last executing test programs: 2.086047782s ago: executing program 4 (id=595): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) setresuid(0xee01, 0xee00, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 2.055798395s ago: executing program 4 (id=596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1.684569562s ago: executing program 4 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 1.545321786s ago: executing program 4 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 1.458990925s ago: executing program 4 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.40593397s ago: executing program 4 (id=611): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x122, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2986dd608a37f200ec2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2f03000000000000000100050218e8c91020010000000000000000000000000001000000000000003a14040a73200c00fe8000"/115], 0x0) 1.017716649s ago: executing program 1 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a000000"], 0x48) 862.262834ms ago: executing program 1 (id=627): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsmount(r0, 0x0, 0x20) 839.881177ms ago: executing program 1 (id=629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000400)=r3, 0x12) 766.009554ms ago: executing program 3 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x44b, 0x1, 0x0, {0x7a}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0xc814) 729.978077ms ago: executing program 3 (id=633): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r2, 0x65aebf9dafbebb59, 0x70bd25, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) 670.661023ms ago: executing program 3 (id=635): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a8000800a400104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 669.659623ms ago: executing program 0 (id=637): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 558.061565ms ago: executing program 1 (id=638): r0 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000340), &(0x7f0000000300)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x5, 0x80000001, 0x2, 0x8, r1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0xe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r1}, &(0x7f0000000840), &(0x7f0000000b00)=r4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r5, 0x2, {0x1}}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x50093}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x80) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r6, &(0x7f0000000040)="6f3d7b6e3595904ad44263292847", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 551.002806ms ago: executing program 3 (id=640): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 454.189065ms ago: executing program 3 (id=642): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xae8}, 0x18) r0 = fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000040), 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchown(r5, 0x0, 0xffffffffffffffff) read$ptp(r0, &(0x7f0000000280)=""/176, 0xb0) 389.526431ms ago: executing program 3 (id=644): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000a40)={0x1a, 0x0, 0xa, 0x8, 0x0, 0x4d, @local}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 362.442544ms ago: executing program 1 (id=645): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 362.266504ms ago: executing program 2 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 290.210201ms ago: executing program 0 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x30a9f29ecc337b1d, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 289.912902ms ago: executing program 1 (id=648): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x3, 0x1, 0x0, 0xb, 0x100, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1e2f47e6}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x34}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0xc4, &(0x7f0000000600)=""/196, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0xe, 0x3ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r0], &(0x7f0000000540)=[{0x5, 0x5, 0x9, 0x8}, {0x2, 0x3, 0x10, 0x7}, {0x1, 0x1, 0x9, 0x62aaf801bb710a28}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='rpcgss_svc_unwrap_failed\x00', r5, 0x0, 0x21}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) 276.413603ms ago: executing program 2 (id=649): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 261.333005ms ago: executing program 0 (id=650): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 190.279032ms ago: executing program 2 (id=651): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 190.103111ms ago: executing program 2 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r2}, 0x18) 143.745166ms ago: executing program 0 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, 0x39, 0x9, 0x70bd2c, 0x0, {0x4}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x00'}]}]}, 0x24}}, 0x0) 132.216347ms ago: executing program 2 (id=654): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 30.352858ms ago: executing program 0 (id=655): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xc, 0x7ffc1fdb}]}) setpriority(0x1, 0x0, 0x9) 30.160397ms ago: executing program 2 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 0s ago: executing program 0 (id=657): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x1}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f0000000040)="0acd53ceb3250b6d2001001000000000e8439a8177b6b76c87b021c4858b1f2133d49624ad432c12", 0x28, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 31.242057][ T4309] cgroup: Unknown subsys name 'net' [ 31.471907][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.766310][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.135777][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.136476][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.137231][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.138815][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.139516][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.140871][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.141405][ T4328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.142607][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.143636][ T4328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.144550][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.145812][ T4328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.147287][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.148077][ T4328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.150101][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.150290][ T4328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.151435][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.153134][ T4328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.154211][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 33.154891][ T4328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 33.155896][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.157198][ T4328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 33.159334][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.160401][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.160705][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 33.161675][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.163067][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.171089][ T4336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.187399][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.200788][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 33.202306][ T4334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.311198][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 33.313364][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 33.330126][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 33.361589][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 33.366756][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.367926][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.371310][ T4320] device bridge_slave_0 entered promiscuous mode [ 33.382027][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.383280][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.384842][ T4320] device bridge_slave_1 entered promiscuous mode [ 33.386499][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.387659][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.390616][ T4319] device bridge_slave_0 entered promiscuous mode [ 33.401422][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.402595][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.404049][ T4319] device bridge_slave_1 entered promiscuous mode [ 33.414865][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.423868][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.424911][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.426455][ T4329] device bridge_slave_0 entered promiscuous mode [ 33.428685][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.435241][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.441450][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.442622][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.444063][ T4329] device bridge_slave_1 entered promiscuous mode [ 33.450988][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.452422][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.453658][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.455061][ T4325] device bridge_slave_0 entered promiscuous mode [ 33.466230][ T4320] team0: Port device team_slave_0 added [ 33.473411][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.474485][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.475945][ T4325] device bridge_slave_1 entered promiscuous mode [ 33.483392][ T4320] team0: Port device team_slave_1 added [ 33.486381][ T4319] team0: Port device team_slave_0 added [ 33.494098][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.498297][ T4319] team0: Port device team_slave_1 added [ 33.502769][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.505357][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.510312][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.511343][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.515094][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.523322][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.524970][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.526242][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.530002][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.532068][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.533165][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.536924][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.546862][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.547914][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.554005][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.555948][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 33.560518][ T4329] team0: Port device team_slave_0 added [ 33.565186][ T4325] team0: Port device team_slave_0 added [ 33.567472][ T4325] team0: Port device team_slave_1 added [ 33.573663][ T4329] team0: Port device team_slave_1 added [ 33.620199][ T4319] device hsr_slave_0 entered promiscuous mode [ 33.659494][ T4319] device hsr_slave_1 entered promiscuous mode [ 33.709705][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.710696][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.714295][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.750230][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.809404][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.849355][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.850502][ T4320] Cannot create hsr debugfs directory [ 33.852934][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.854050][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.857835][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.860582][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.861628][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.865382][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.867260][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.868298][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.872190][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.898219][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.899420][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.900976][ T4330] device bridge_slave_0 entered promiscuous mode [ 33.913735][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.914824][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.916260][ T4330] device bridge_slave_1 entered promiscuous mode [ 33.960200][ T4329] device hsr_slave_0 entered promiscuous mode [ 33.999441][ T4329] device hsr_slave_1 entered promiscuous mode [ 34.049337][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.050452][ T4329] Cannot create hsr debugfs directory [ 34.090195][ T4325] device hsr_slave_0 entered promiscuous mode [ 34.139422][ T4325] device hsr_slave_1 entered promiscuous mode [ 34.179269][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.180466][ T4325] Cannot create hsr debugfs directory [ 34.196444][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.207527][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.233083][ T4330] team0: Port device team_slave_0 added [ 34.244194][ T4330] team0: Port device team_slave_1 added [ 34.263626][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.264714][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.268520][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.271112][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.272050][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.275550][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.340293][ T4330] device hsr_slave_0 entered promiscuous mode [ 34.379896][ T4330] device hsr_slave_1 entered promiscuous mode [ 34.419362][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.420531][ T4330] Cannot create hsr debugfs directory [ 34.435914][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.482461][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.520343][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.566519][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.623672][ T4319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.654371][ T4319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.708172][ T4319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.740577][ T4319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.814073][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.843798][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.883348][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.941859][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.981076][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.022142][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.062470][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.110559][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.165859][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.174829][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.185344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.187308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.188670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.190930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.193374][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.194508][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.196045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.197592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.198955][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.200145][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.201801][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 35.201813][ T4331] Bluetooth: hci2: command 0x0409 tx timeout [ 35.202791][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 35.204324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.209723][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 35.216576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.219530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.223189][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.224963][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.232322][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.260558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.262111][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.279396][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 35.305734][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.306979][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.361343][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.410394][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.412538][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.423516][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.434917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.436330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.437620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.439067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.443939][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.445011][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.446600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.448717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.450427][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.451478][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.452746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.454337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.455886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.457342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.463667][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.476595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.478342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.480735][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.482446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.484093][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.485657][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.489087][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.493810][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.495260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.505519][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.506887][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.508393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.510620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.511911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.513625][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.515055][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.516525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.518054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.520056][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.521103][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.522547][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.523979][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.525304][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.526367][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.527777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.535829][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.539057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.544979][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.549730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.562095][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.564114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.566039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.573524][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.575155][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.576666][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.578260][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.584735][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.589025][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.594943][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.596582][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.604071][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.605785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.607240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.608693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.611081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.613079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.614542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.616004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.628607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.630784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.632167][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.633299][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.634879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.636392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.637761][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.638780][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.640933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.642284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.647721][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.651238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.652663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.658024][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.660083][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.661441][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.662528][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.663789][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.665207][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.666483][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.667491][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.668650][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.684872][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.686479][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.688098][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.692721][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.694681][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.696147][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.697564][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.699078][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.702035][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.703577][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.705122][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.706581][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.717088][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.718766][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.720706][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.722604][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.724105][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.737494][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.742755][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.744495][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.745986][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.747932][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.749825][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.751031][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.753843][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.760814][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.762372][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.763794][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.765289][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.766771][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.768181][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.771447][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.783779][ T4320] device veth0_vlan entered promiscuous mode [ 35.787806][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.789822][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.794601][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.795903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.808831][ T4320] device veth1_vlan entered promiscuous mode [ 35.812360][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.817836][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.823749][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.825254][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.826755][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.828599][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.830824][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.833114][ T4325] device veth0_vlan entered promiscuous mode [ 35.840603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.841944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.846042][ T4325] device veth1_vlan entered promiscuous mode [ 35.851467][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.863395][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.864951][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.866345][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.867891][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.883416][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.885077][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.886492][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.887894][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.890683][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.892344][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.893878][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.895246][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.900365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.901477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.913113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.914840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.916438][ T4319] device veth0_vlan entered promiscuous mode [ 35.918904][ T4320] device veth0_macvtap entered promiscuous mode [ 35.921623][ T4325] device veth0_macvtap entered promiscuous mode [ 35.924511][ T4325] device veth1_macvtap entered promiscuous mode [ 35.930422][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.933156][ T4320] device veth1_macvtap entered promiscuous mode [ 35.940008][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.941563][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.942970][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.944401][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.945748][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.947667][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.950784][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.952277][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.955606][ T4329] device veth0_vlan entered promiscuous mode [ 35.958485][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.961584][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.963247][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.965390][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.967887][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.973675][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.974993][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.976237][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.977455][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.980632][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.982164][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.983789][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.985313][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.986873][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.988278][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.994215][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.995826][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.998051][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.001918][ T4319] device veth1_vlan entered promiscuous mode [ 36.004786][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.006261][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.007669][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.016461][ T4329] device veth1_vlan entered promiscuous mode [ 36.021286][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.022537][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.023753][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.025021][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.046964][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.048489][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.050619][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.051941][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.053452][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.069760][ T4329] device veth0_macvtap entered promiscuous mode [ 36.072958][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.074467][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.075901][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.084502][ T4329] device veth1_macvtap entered promiscuous mode [ 36.090623][ T4319] device veth0_macvtap entered promiscuous mode [ 36.102065][ T4405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.106554][ T4405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.108281][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.110029][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.111513][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.118188][ T4319] device veth1_macvtap entered promiscuous mode [ 36.124277][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.125736][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.127208][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.128718][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.131930][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.138063][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.139423][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.140667][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.140785][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.142260][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.144973][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.146357][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.147813][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.150682][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.152612][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.154041][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.155775][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.157670][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.159124][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.162225][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.172957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.174611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.177968][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.180749][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.182128][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.183611][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.185790][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.187543][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.189081][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.191618][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.193175][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.194568][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.196080][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.198140][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.201866][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.203098][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.204365][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.205582][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.207451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.209028][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.210763][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.212184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.213678][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.214987][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.216940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.221727][ T4319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.223040][ T4319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.224293][ T4319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.225520][ T4319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.228799][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.230531][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.232798][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.234102][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.236090][ T4330] device veth0_vlan entered promiscuous mode [ 36.242961][ T4330] device veth1_vlan entered promiscuous mode [ 36.252659][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.253816][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.255851][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.257652][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.314160][ T4433] 9p: Unknown access argument 00000000004294967295:b ¬k§vc„ú©—íÕRÞ:úþúÕ( YmÆ [hŠ$Ï:¦‚ÊG[_ÇDBÑŠiÞ‘<‘UÙˆÖ ÙV'/•Õ: -22 [ 36.327191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.328858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.334160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.346549][ T4330] device veth0_macvtap entered promiscuous mode [ 36.363060][ T4330] device veth1_macvtap entered promiscuous mode [ 36.375720][ T27] audit: type=1326 audit(36.360:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.379790][ T27] audit: type=1326 audit(36.370:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.387752][ T27] audit: type=1326 audit(36.370:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.393168][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.393943][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.394649][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.395897][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.397292][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.402253][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.404330][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.405871][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.407258][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.408839][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.410826][ T27] audit: type=1326 audit(36.390:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.412608][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.413962][ T27] audit: type=1326 audit(36.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.416539][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.421811][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.423562][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.425121][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.426756][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.428223][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.429876][ T27] audit: type=1326 audit(36.390:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.435917][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.437533][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.440285][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.440594][ T27] audit: type=1326 audit(36.430:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.442398][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.444193][ T27] audit: type=1326 audit(36.430:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.445633][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.450388][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.451807][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.453326][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.454841][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.456364][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.461669][ T27] audit: type=1326 audit(36.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.468708][ T27] audit: type=1326 audit(36.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 36.493391][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.494796][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.496193][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.497546][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.510346][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.511485][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.513924][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.554569][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.555789][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.565235][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.580814][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.582295][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.584692][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.629011][ T4445] loop1: detected capacity change from 0 to 128 [ 36.630235][ T842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.630256][ T842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.630803][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.677593][ T842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.678847][ T842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.683944][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.687662][ T4445] syz.1.10: attempt to access beyond end of device [ 36.687662][ T4445] loop1: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 36.695595][ T4448] loop2: detected capacity change from 0 to 1024 [ 36.697020][ T4448] ======================================================= [ 36.697020][ T4448] WARNING: The mand mount option has been deprecated and [ 36.697020][ T4448] and is ignored by this kernel. Remove the mand [ 36.697020][ T4448] option from the mount to silence this warning. [ 36.697020][ T4448] ======================================================= [ 36.745586][ T4445] syz.1.10: attempt to access beyond end of device [ 36.745586][ T4445] loop1: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 36.786996][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.805612][ T4445] syz.1.10: attempt to access beyond end of device [ 36.805612][ T4445] loop1: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 36.808225][ T4445] syz.1.10: attempt to access beyond end of device [ 36.808225][ T4445] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 36.813749][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 36.815927][ T4445] syz.1.10: attempt to access beyond end of device [ 36.815927][ T4445] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 36.825595][ T4445] syz.1.10: attempt to access beyond end of device [ 36.825595][ T4445] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 36.834047][ T4445] syz.1.10: attempt to access beyond end of device [ 36.834047][ T4445] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 36.836098][ T4445] syz.1.10: attempt to access beyond end of device [ 36.836098][ T4445] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 36.838093][ T4445] syz.1.10: attempt to access beyond end of device [ 36.838093][ T4445] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 36.863655][ T4445] syz.1.10: attempt to access beyond end of device [ 36.863655][ T4445] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 36.867225][ T4444] Buffer I/O error on dev loop1, logical block 241, async page read [ 36.868640][ T4444] Buffer I/O error on dev loop1, logical block 242, async page read [ 36.871250][ T4444] Buffer I/O error on dev loop1, logical block 243, async page read [ 36.872505][ T4444] Buffer I/O error on dev loop1, logical block 244, async page read [ 36.875047][ T4444] Buffer I/O error on dev loop1, logical block 245, async page read [ 36.876758][ T4444] Buffer I/O error on dev loop1, logical block 246, async page read [ 36.888113][ T4444] Buffer I/O error on dev loop1, logical block 247, async page read [ 36.891304][ T4444] Buffer I/O error on dev loop1, logical block 248, async page read [ 36.894291][ T4445] Buffer I/O error on dev loop1, logical block 241, async page read [ 36.899860][ T4445] Buffer I/O error on dev loop1, logical block 242, async page read [ 36.901374][ T4459] loop4: detected capacity change from 0 to 512 [ 36.914485][ T4459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.917106][ T4459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.933746][ T4459] EXT4-fs (loop4): 1 truncate cleaned up [ 36.938690][ T4459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.055345][ T4462] loop0: detected capacity change from 0 to 256 [ 37.279349][ T4331] Bluetooth: hci1: command 0x041b tx timeout [ 37.291528][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 37.291568][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 37.292507][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 37.363079][ T4334] Bluetooth: hci3: command 0x041b tx timeout [ 38.694262][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 39.359647][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 39.359737][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 39.360748][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 39.369507][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 39.439621][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 41.439525][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 41.439533][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 41.450149][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 41.451170][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 41.519511][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 48.972989][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 49.187143][ T4531] capability: warning: `syz.4.37' uses 32-bit capabilities (legacy support in use) [ 49.317658][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 49.317668][ T27] audit: type=1326 audit(49.300:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.323490][ T27] audit: type=1326 audit(49.310:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.328309][ T27] audit: type=1326 audit(49.310:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.345788][ T27] audit: type=1326 audit(49.310:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.348877][ T27] audit: type=1326 audit(49.310:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.367456][ T27] audit: type=1326 audit(49.350:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.381359][ T27] audit: type=1326 audit(49.360:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.391457][ T27] audit: type=1326 audit(49.370:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.394675][ T27] audit: type=1326 audit(49.380:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.423731][ T27] audit: type=1326 audit(49.380:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.3.45" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa875b9e8 code=0x7ffc0000 [ 49.940062][ T112] cfg80211: failed to load regulatory.db [ 50.119982][ T4614] netlink: 'syz.4.72': attribute type 10 has an invalid length. [ 50.130542][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.140039][ T4614] device bridge_slave_1 left promiscuous mode [ 50.142497][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.334086][ T4650] loop2: detected capacity change from 0 to 1024 [ 51.335540][ T4650] EXT4-fs: inline encryption not supported [ 51.337409][ T4650] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.353581][ T4652] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 51.388647][ T4650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.416310][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 51.491272][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 51.582991][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 51.590818][ T4673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.95'. [ 51.630409][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 51.985874][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.987130][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.988332][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.994190][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.995370][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.996526][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.997713][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 51.998858][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.011735][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.013512][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.014637][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.015822][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.018540][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.021577][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.022721][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.023955][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.024995][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.026117][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.027116][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.028166][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.033038][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.034121][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.035307][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.036396][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.037431][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.038510][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.040040][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.041246][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.042355][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.043550][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.044693][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.048310][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052332][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052362][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052370][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052378][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052386][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052393][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052401][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052407][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052414][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052421][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.052427][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.054232][ T7] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 52.183119][ T4718] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 52.216786][ T4721] fido_id[4721]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.367733][ T4743] loop4: detected capacity change from 0 to 512 [ 52.375329][ T4743] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.376138][ T4746] netlink: 'syz.0.121': attribute type 1 has an invalid length. [ 52.378081][ T4743] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.122: bad orphan inode 13 [ 52.382470][ T4743] ext4_test_bit(bit=12, block=18) = 1 [ 52.382539][ T4746] netlink: 244 bytes leftover after parsing attributes in process `syz.0.121'. [ 52.383352][ T4743] is_bad_inode(inode)=0 [ 52.385441][ T4743] NEXT_ORPHAN(inode)=2130706432 [ 52.386158][ T4743] max_ino=32 [ 52.386651][ T4743] i_nlink=1 [ 52.387356][ T4743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.393190][ T4743] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 52.427060][ T4743] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.122: bg 0: block 248: padding at end of block bitmap is not set [ 52.452911][ T4743] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.122: Failed to acquire dquot type 1 [ 52.484746][ T4752] device syzkaller0 entered promiscuous mode [ 52.501156][ T4743] EXT4-fs warning (device loop4): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.501483][ T4760] loop1: detected capacity change from 0 to 512 [ 52.509537][ T4760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.517676][ T4760] EXT4-fs (loop1): 1 truncate cleaned up [ 52.518698][ T4760] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.553065][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 52.571303][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 52.636464][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 52.809436][ T4794] netlink: 'syz.3.143': attribute type 27 has an invalid length. [ 52.919381][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.921024][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.967558][ T4800] atomic_op 00000000259a4152 conn xmit_atomic 0000000000000000 [ 53.002862][ T4803] loop4: detected capacity change from 0 to 512 [ 53.019529][ T4803] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2769: inode #11: comm syz.4.145: corrupted xattr block 95 [ 53.038295][ T4803] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 53.041867][ T4803] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.145: bg 0: block 7: invalid block bitmap [ 53.046599][ T4803] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 53.053359][ T4803] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2935: inode #11: comm syz.4.145: corrupted xattr block 95 [ 53.056116][ T4803] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 53.057519][ T4803] EXT4-fs (loop4): 1 orphan inode deleted [ 53.058405][ T4803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 53.071708][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 53.309899][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.323726][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.595716][ T4794] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.597104][ T4794] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.598623][ T4794] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.606495][ T4794] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.917578][ T4836] netlink: 'syz.3.159': attribute type 10 has an invalid length. [ 53.935650][ T4836] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 54.112917][ T4869] bond0: (slave bridge0): Error: Slave device does not support XDP [ 54.175272][ T4878] syz.1.177 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.945815][ T27] kauditd_printk_skb: 224 callbacks suppressed [ 54.945829][ T27] audit: type=1326 audit(54.930:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f5b9e8 code=0x7ffc0000 [ 54.955379][ T27] audit: type=1326 audit(54.930:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4891 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f5b9e8 code=0x7ffc0000 [ 54.994645][ T4915] netlink: 'syz.0.193': attribute type 13 has an invalid length. [ 55.116291][ T4915] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.117646][ T4915] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.536808][ T4915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.550922][ T4915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.687378][ T4915] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.688773][ T4915] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.690153][ T4915] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.691659][ T4915] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.732610][ T4920] tipc: Started in network mode [ 55.733475][ T4920] tipc: Node identity ac1414aa, cluster identity 4711 [ 55.735245][ T4920] tipc: Enabled bearer , priority 10 [ 55.736634][ T4938] bond0: (slave bridge0): Error: Slave device does not support XDP [ 56.193811][ T4943] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.194837][ T4943] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.201205][ T4943] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 56.202471][ T4943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.204136][ T4963] loop4: detected capacity change from 0 to 128 [ 56.209955][ T4943] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.212203][ T4965] capability: warning: `syz.3.207' uses deprecated v2 capabilities in a way that may be insecure [ 56.214183][ T4943] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 56.215405][ T4943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.216371][ T4943] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.220950][ T4943] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 56.222835][ T4943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.224432][ T4943] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.227993][ T4943] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 56.235677][ T4943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 56.235742][ T4943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 56.236047][ T4943] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 56.258882][ T4963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.273061][ T27] audit: type=1326 audit(56.260:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 56.273781][ T27] audit: type=1326 audit(56.260:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 56.273852][ T27] audit: type=1326 audit(56.260:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 56.273884][ T27] audit: type=1326 audit(56.260:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 56.275989][ T27] audit: type=1326 audit(56.260:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 56.276062][ T27] audit: type=1326 audit(56.260:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 56.280421][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 56.410776][ T27] audit: type=1326 audit(56.400:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 56.414003][ T27] audit: type=1326 audit(56.400:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 56.698210][ T5001] loop2: detected capacity change from 0 to 1024 [ 56.705832][ T5001] EXT4-fs: Ignoring removed bh option [ 56.733222][ T5001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.760483][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 56.770964][ T5009] xt_hashlimit: max too large, truncated to 1048576 [ 56.862528][ T3898] tipc: Node number set to 2886997162 [ 57.372596][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 57.377326][ T5011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 57.514234][ T5035] netlink: 'syz.2.238': attribute type 4 has an invalid length. [ 57.541638][ T5035] netlink: 'syz.2.238': attribute type 4 has an invalid length. [ 57.626889][ T5044] netlink: 'syz.2.242': attribute type 3 has an invalid length. [ 57.688707][ T5051] bond0: (slave bridge0): Error: Slave device does not support XDP [ 57.780587][ T5056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 57.839291][ T4334] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.249883][ T4334] Bluetooth: hci4: command 0x0c1a tx timeout [ 58.249893][ T4336] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.250941][ T4334] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.251882][ T4336] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.283152][ T5110] binfmt_misc: register: failed to install interpreter file ./file0 [ 58.881726][ T5163] loop3: detected capacity change from 0 to 512 [ 58.886460][ T5163] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.907488][ T5163] EXT4-fs (loop3): 1 truncate cleaned up [ 58.908453][ T5163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.938255][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 59.095050][ T5180] loop3: detected capacity change from 0 to 2048 [ 59.127477][ T5180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.146566][ T5187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'. [ 59.181612][ T5180] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.302: bg 0: block 234: padding at end of block bitmap is not set [ 59.185781][ T5180] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.188016][ T5180] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.188016][ T5180] [ 59.191765][ T5182] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.192437][ T5180] EXT4-fs (loop3): Total free blocks count 0 [ 59.194738][ T5180] EXT4-fs (loop3): Free/Dirty block details [ 59.197137][ T5180] EXT4-fs (loop3): free_blocks=0 [ 59.197994][ T5180] EXT4-fs (loop3): dirty_blocks=16 [ 59.200862][ T5180] EXT4-fs (loop3): Block reservation details [ 59.201834][ T5180] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 59.280697][ T5182] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.381592][ T5182] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.444204][ T5208] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 59.511105][ T5182] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.584926][ T5224] netlink: 'syz.0.324': attribute type 4 has an invalid length. [ 59.588131][ T5224] netlink: 'syz.0.324': attribute type 4 has an invalid length. [ 59.622431][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.650496][ T5226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.702596][ T5232] tipc: Enabled bearer , priority 0 [ 59.720454][ T5232] tipc: Disabling bearer [ 59.727158][ T5182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.735870][ T5182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.782437][ T5182] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.785860][ T5182] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.908514][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 59.917879][ T5247] loop1: detected capacity change from 0 to 8192 [ 59.919917][ T4331] Bluetooth: hci0: command 0x0406 tx timeout [ 59.939025][ T5247] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.957069][ T5252] loop3: detected capacity change from 0 to 512 [ 59.990230][ T5252] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 59.991932][ T5252] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.002464][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 60.002477][ T27] audit: type=1326 audit(59.982:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b5b9e8 code=0x7ffc0000 [ 60.006709][ T27] audit: type=1326 audit(59.982:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=43 compat=0 ip=0xffffb1b5b9e8 code=0x7ffc0000 [ 60.021700][ T5260] netlink: 76 bytes leftover after parsing attributes in process `syz.1.335'. [ 60.023471][ T27] audit: type=1326 audit(59.992:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b5b9e8 code=0x7ffc0000 [ 60.026603][ T27] audit: type=1326 audit(59.992:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb1b5b9e8 code=0x7ffc0000 [ 60.060587][ T5252] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.338: corrupted inode contents [ 60.063312][ T27] audit: type=1326 audit(59.992:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1b5b9e8 code=0x7ffc0000 [ 60.066641][ T27] audit: type=1326 audit(59.992:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb1b5df8c code=0x7ffc0000 [ 60.074074][ T5252] EXT4-fs (loop3): Remounting filesystem read-only [ 60.075087][ T5252] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm syz.3.338: mark_inode_dirty error [ 60.081338][ T5252] EXT4-fs (loop3): Remounting filesystem read-only [ 60.083958][ T27] audit: type=1326 audit(59.992:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffb1b5dea8 code=0x7ffc0000 [ 60.084916][ T5252] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.338: corrupted inode contents [ 60.090973][ T27] audit: type=1326 audit(59.992:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffb1b5ddac code=0x7ffc0000 [ 60.094215][ T27] audit: type=1326 audit(59.992:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffb1b5ddac code=0x7ffc0000 [ 60.103203][ T27] audit: type=1326 audit(59.992:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffb1b5a30c code=0x7ffc0000 [ 60.105838][ T5252] EXT4-fs (loop3): Remounting filesystem read-only [ 60.109035][ T5252] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.338: mark_inode_dirty error [ 60.116493][ T5252] EXT4-fs (loop3): Remounting filesystem read-only [ 60.118569][ T5252] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.338: corrupted inode contents [ 60.122503][ T5252] EXT4-fs (loop3): Remounting filesystem read-only [ 60.123649][ T5252] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 60.125206][ T5252] EXT4-fs (loop3): Remounting filesystem read-only [ 60.126303][ T5252] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.338: corrupted inode contents [ 60.128219][ T5252] EXT4-fs (loop3): Remounting filesystem read-only [ 60.129541][ T5252] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm syz.3.338: mark_inode_dirty error [ 60.132004][ T5252] EXT4-fs (loop3): Remounting filesystem read-only [ 60.132942][ T5252] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 60.134668][ T5252] EXT4-fs (loop3): Remounting filesystem read-only [ 60.136562][ T5252] EXT4-fs (loop3): 1 truncate cleaned up [ 60.138854][ T4410] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:6: Failed to release dquot type 1 [ 60.145461][ T4410] EXT4-fs (loop3): Remounting filesystem read-only [ 60.152104][ T5252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.186320][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 60.316352][ T5283] loop2: detected capacity change from 0 to 1024 [ 60.319407][ T4336] Bluetooth: hci2: command 0x0406 tx timeout [ 60.320385][ T4336] Bluetooth: hci3: command 0x0406 tx timeout [ 60.321356][ T4336] Bluetooth: hci4: command 0x0406 tx timeout [ 60.322340][ T4336] Bluetooth: hci1: command 0x0406 tx timeout [ 60.323717][ T5285] IPVS: Error connecting to the multicast addr [ 60.350725][ T5283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 60.393812][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 60.924521][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 60.925990][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 61.335225][ T5337] netlink: 60 bytes leftover after parsing attributes in process `syz.0.371'. [ 61.468743][ T5345] syz.2.375 uses obsolete (PF_INET,SOCK_PACKET) [ 61.886296][ T5310] Set syz1 is full, maxelem 65536 reached [ 62.000802][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 62.025393][ T5388] device syzkaller0 entered promiscuous mode [ 62.335011][ T5431] device syzkaller0 entered promiscuous mode [ 62.340924][ T5431] device syzkaller0 left promiscuous mode [ 62.380823][ T5437] loop2: detected capacity change from 0 to 512 [ 62.397164][ T5437] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.401780][ T5437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 62.413215][ T5437] process 'syz.2.419' launched '/dev/fd/4' with NULL argv: empty string added [ 62.453669][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 62.580627][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 62.583675][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.585728][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.601836][ T5455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.767371][ T5479] netlink: 7 bytes leftover after parsing attributes in process `syz.0.437'. [ 62.893824][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.895154][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.977049][ T5489] loop3: detected capacity change from 0 to 1024 [ 63.001647][ T5489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.016506][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 63.135989][ T5502] xt_policy: neither incoming nor outgoing policy selected [ 63.276820][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.291257][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.575996][ T5480] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.577534][ T5480] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.578766][ T5480] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.580453][ T5480] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.819253][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'. [ 63.820778][ T5486] device bridge_slave_1 left promiscuous mode [ 63.822179][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.871786][ T5486] device bridge_slave_0 left promiscuous mode [ 63.873028][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.040870][ T5504] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.063704][ T5511] netlink: 72 bytes leftover after parsing attributes in process `syz.3.451'. [ 64.151881][ T5506] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'. [ 64.292550][ T5537] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 64.357445][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 64.404042][ T5545] loop1: detected capacity change from 0 to 512 [ 64.441941][ T5545] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.442280][ T5545] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.445178][ T5545] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.467: corrupted inode contents [ 64.445440][ T5545] EXT4-fs (loop1): Remounting filesystem read-only [ 64.445451][ T5545] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #16: comm syz.1.467: mark_inode_dirty error [ 64.445661][ T5545] EXT4-fs (loop1): Remounting filesystem read-only [ 64.445698][ T5545] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.467: corrupted inode contents [ 64.445853][ T5545] EXT4-fs (loop1): Remounting filesystem read-only [ 64.445865][ T5545] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.467: mark_inode_dirty error [ 64.446012][ T5545] EXT4-fs (loop1): Remounting filesystem read-only [ 64.446100][ T5545] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.467: corrupted inode contents [ 64.446253][ T5545] EXT4-fs (loop1): Remounting filesystem read-only [ 64.446266][ T5545] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 64.446426][ T5545] EXT4-fs (loop1): Remounting filesystem read-only [ 64.446445][ T5545] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.467: corrupted inode contents [ 64.446590][ T5545] EXT4-fs (loop1): Remounting filesystem read-only [ 64.446600][ T5545] EXT4-fs error (device loop1): ext4_truncate:4318: inode #16: comm syz.1.467: mark_inode_dirty error [ 64.448120][ T5545] EXT4-fs (loop1): Remounting filesystem read-only [ 64.448140][ T5545] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 64.449396][ T5545] EXT4-fs (loop1): Remounting filesystem read-only [ 64.451487][ T5545] EXT4-fs (loop1): 1 truncate cleaned up [ 64.451829][ T4635] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:8: Failed to release dquot type 1 [ 64.455034][ T5547] loop2: detected capacity change from 0 to 4096 [ 64.482479][ T4635] EXT4-fs (loop1): Remounting filesystem read-only [ 64.482683][ T5545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.491801][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.491854][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.521116][ T5547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.525028][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 64.689049][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 65.046409][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 65.186843][ T5595] loop3: detected capacity change from 0 to 128 [ 65.267439][ T5599] netlink: 176 bytes leftover after parsing attributes in process `syz.3.488'. [ 65.329001][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 65.432090][ T5617] netlink: 'syz.4.498': attribute type 7 has an invalid length. [ 65.432109][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 65.480003][ T27] kauditd_printk_skb: 247 callbacks suppressed [ 65.480015][ T27] audit: type=1326 audit(65.462:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 65.480044][ T27] audit: type=1326 audit(65.462:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 65.482975][ T27] audit: type=1326 audit(65.462:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=193 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 65.483061][ T27] audit: type=1326 audit(65.462:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 65.483081][ T27] audit: type=1326 audit(65.462:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 65.484310][ T27] audit: type=1326 audit(65.462:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 65.500782][ T5624] device syzkaller1 entered promiscuous mode [ 65.575589][ T27] audit: type=1326 audit(65.552:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 65.575653][ T27] audit: type=1326 audit(65.552:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5620 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 65.756511][ T5643] loop4: detected capacity change from 0 to 128 [ 65.758606][ T5643] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.777561][ T5643] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.786773][ T27] audit: type=1326 audit(65.762:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f5b9e8 code=0x7ffc0000 [ 65.792729][ T27] audit: type=1326 audit(65.772:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb0f5b9e8 code=0x7ffc0000 [ 65.834566][ T4635] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.986106][ T5666] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.987669][ T5666] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.988945][ T5666] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.990767][ T5666] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.003008][ T5666] Zero length message leads to an empty skb [ 66.089465][ T5677] loop3: detected capacity change from 0 to 512 [ 66.091218][ T5677] EXT4-fs: Ignoring removed nobh option [ 66.096377][ T5678] netlink: 'syz.4.523': attribute type 4 has an invalid length. [ 66.126099][ T5677] EXT4-fs error (device loop3): __ext4_iget:5091: inode #11: block 1: comm syz.3.524: invalid block [ 66.128381][ T5677] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.524: couldn't read orphan inode 11 (err -117) [ 66.131290][ T5677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.147078][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 66.365159][ T5702] openvswitch: netlink: EtherType 0 is less than min 600 [ 66.452874][ T5710] loop3: detected capacity change from 0 to 512 [ 66.482721][ T5710] EXT4-fs (loop3): too many log groups per flexible block group [ 66.484271][ T5710] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 66.485569][ T5710] EXT4-fs (loop3): mount failed [ 66.562518][ T5718] device veth3 entered promiscuous mode [ 66.573264][ T5717] loop4: detected capacity change from 0 to 8192 [ 66.575069][ T5717] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 66.621551][ T4512] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.644366][ T5717] netlink: 'syz.4.539': attribute type 12 has an invalid length. [ 66.740850][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.743422][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.744782][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.746805][ T5729] device bridge_slave_0 left promiscuous mode [ 66.748024][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.763500][ T5729] bond0: (slave bond_slave_0): Releasing backup interface [ 66.787484][ T5729] bond0: (slave bond_slave_1): Releasing backup interface [ 66.859584][ T5729] team0: Port device team_slave_0 removed [ 66.874036][ T5729] team0: Port device team_slave_1 removed [ 66.875373][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.877045][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.882902][ T5729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.884190][ T5729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.022083][ T5737] loop4: detected capacity change from 0 to 512 [ 67.118267][ T5737] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.549: bad orphan inode 11862016 [ 67.120657][ T5737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.160107][ T5743] bond0: (slave bridge0): Error: Slave device does not support XDP [ 67.302332][ T5753] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.401772][ T5753] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.406067][ T5764] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 67.408030][ T5764] device bridge1 entered promiscuous mode [ 67.446087][ T5768] loop3: detected capacity change from 0 to 512 [ 67.491973][ T5753] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.495011][ T5768] EXT4-fs (loop3): too many log groups per flexible block group [ 67.496186][ T5768] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 67.497217][ T5768] EXT4-fs (loop3): mount failed [ 67.601268][ T5753] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.623846][ T5784] tipc: Started in network mode [ 67.626373][ T5784] tipc: Node identity 46f59959d19c, cluster identity 4711 [ 67.627565][ T5784] tipc: Enabled bearer , priority 0 [ 67.630315][ T5784] device syzkaller0 entered promiscuous mode [ 67.737818][ T5784] tipc: Resetting bearer [ 67.747014][ T5783] tipc: Resetting bearer [ 67.947878][ T5783] tipc: Disabling bearer [ 68.138163][ T5753] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.155019][ T5753] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.162286][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 68.188107][ T5753] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.194563][ T5753] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.203156][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.208063][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.209522][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.216083][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.218667][ T5810] loop2: detected capacity change from 0 to 512 [ 68.219970][ T5808] device geneve2 entered promiscuous mode [ 68.224454][ T5810] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.581: inode has both inline data and extents flags [ 68.226666][ T5810] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.581: couldn't read orphan inode 15 (err -117) [ 68.232797][ T5810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.233838][ T5808] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.236446][ T5808] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.239023][ T5808] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.240790][ T5808] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.278942][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 68.365556][ T5825] loop2: detected capacity change from 0 to 512 [ 68.366958][ T5825] journal_path: Lookup failure for './bus' [ 68.368015][ T5825] EXT4-fs: error: could not find journal device path [ 68.436637][ T5834] __nla_validate_parse: 11 callbacks suppressed [ 68.436650][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 68.923171][ T5858] loop3: detected capacity change from 0 to 2048 [ 68.928787][ T5857] loop4: detected capacity change from 0 to 512 [ 68.947900][ T5858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.966897][ T5857] EXT4-fs (loop4): too many log groups per flexible block group [ 68.968368][ T5857] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 68.975892][ T5857] EXT4-fs (loop4): mount failed [ 68.983395][ T5858] EXT4-fs: Ignoring removed orlov option [ 68.984368][ T5858] EXT4-fs (loop3): can't enable nombcache during remount [ 69.057424][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 69.192793][ T5888] xt_hashlimit: size too large, truncated to 1048576 [ 69.398873][ T5902] loop3: detected capacity change from 0 to 512 [ 69.417354][ T5902] EXT2-fs (loop3): error: couldn't mount because of unsupported optional features (4740) [ 69.513687][ T5911] loop2: detected capacity change from 0 to 512 [ 69.533219][ T5911] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.543222][ T5911] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 69.566505][ T5911] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.621: inode #15: comm syz.2.621: iget: illegal inode # [ 69.568661][ T5911] EXT4-fs (loop2): Remounting filesystem read-only [ 69.578232][ T5911] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.621: couldn't read orphan inode 15 (err -117) [ 69.590629][ T5911] EXT4-fs (loop2): Remounting filesystem read-only [ 69.591670][ T5911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 69.624701][ T5911] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.621: inode #15: comm syz.2.621: iget: illegal inode # [ 69.652083][ T5911] EXT4-fs (loop2): Remounting filesystem read-only [ 69.708086][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 69.921172][ T5944] netlink: 'syz.3.635': attribute type 21 has an invalid length. [ 70.053132][ T5953] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.073873][ T5953] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.077001][ T5957] loop2: detected capacity change from 0 to 256 [ 70.078670][ T5953] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.089221][ T5953] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.090989][ T5957] FAT-fs (loop2): bogus logical sector size 128 [ 70.091981][ T5957] FAT-fs (loop2): Can't find a valid FAT filesystem [ 70.113412][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 70.129377][ T5959] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 70.462206][ T5986] openvswitch: netlink: Missing key (keys=40, expected=80) [ 70.527908][ T27] kauditd_printk_skb: 294 callbacks suppressed [ 70.527919][ T27] audit: type=1326 audit(70.502:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 70.534312][ T27] audit: type=1326 audit(70.512:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=140 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 70.540771][ T27] audit: type=1326 audit(70.522:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 70.555244][ T27] audit: type=1326 audit(70.522:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.0.655" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f5b9e8 code=0x7ffc0000 [ 70.561138][ T5992] loop2: detected capacity change from 0 to 512 [ 70.592273][ T5992] [ 70.592697][ T5992] ====================================================== [ 70.593830][ T5992] WARNING: possible circular locking dependency detected [ 70.594930][ T5992] syzkaller #0 Not tainted [ 70.595615][ T5992] ------------------------------------------------------ [ 70.596656][ T5992] syz.2.656/5992 is trying to acquire lock: [ 70.597494][ T5992] ffff0000cb3a8b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 70.598932][ T5992] [ 70.598932][ T5992] but task is already holding lock: [ 70.599913][ T5992] ffff0000f6560ad0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 70.601352][ T5992] [ 70.601352][ T5992] which lock already depends on the new lock. [ 70.601352][ T5992] [ 70.602839][ T5992] [ 70.602839][ T5992] the existing dependency chain (in reverse order) is: [ 70.604079][ T5992] [ 70.604079][ T5992] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 70.605145][ T5992] down_write+0x5c/0x88 [ 70.605828][ T5992] ext4_destroy_inline_data+0x30/0x11c [ 70.606746][ T5992] ext4_writepages+0x3f4/0x284c [ 70.607560][ T5992] do_writepages+0x2c0/0x4fc [ 70.608382][ T5992] filemap_fdatawrite_wbc+0x124/0x174 [ 70.609236][ T5992] file_write_and_wait_range+0x110/0x1d8 [ 70.610141][ T5992] ext4_sync_file+0x210/0xc7c [ 70.610902][ T5992] vfs_fsync_range+0x168/0x188 [ 70.611717][ T5992] ext4_buffered_write_iter+0x484/0x530 [ 70.612569][ T5992] ext4_file_write_iter+0x188/0x152c [ 70.613413][ T5992] do_iter_write+0x530/0x91c [ 70.614186][ T5992] vfs_iter_write+0x88/0xac [ 70.614899][ T5992] iter_file_splice_write+0x500/0xa18 [ 70.615771][ T5992] direct_splice_actor+0xe4/0x134 [ 70.616535][ T5992] splice_direct_to_actor+0x3b4/0x978 [ 70.617409][ T5992] do_splice_direct+0x158/0x244 [ 70.618186][ T5992] do_sendfile+0x458/0xc88 [ 70.618870][ T5992] __arm64_sys_sendfile64+0x130/0x360 [ 70.619749][ T5992] invoke_syscall+0x98/0x2bc [ 70.620476][ T5992] el0_svc_common+0x138/0x258 [ 70.621246][ T5992] do_el0_svc+0x58/0x13c [ 70.621883][ T5992] el0_svc+0x58/0x138 [ 70.622515][ T5992] el0t_64_sync_handler+0x84/0xf0 [ 70.623312][ T5992] el0t_64_sync+0x18c/0x190 [ 70.624007][ T5992] [ 70.624007][ T5992] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 70.625197][ T5992] __lock_acquire+0x293c/0x6544 [ 70.625965][ T5992] lock_acquire+0x20c/0x644 [ 70.626728][ T5992] percpu_down_read+0x70/0x2a8 [ 70.627569][ T5992] ext4_writepages+0x188/0x284c [ 70.628299][ T5992] do_writepages+0x2c0/0x4fc [ 70.629077][ T5992] __writeback_single_inode+0x164/0x157c [ 70.629922][ T5992] writeback_single_inode+0x1c0/0x720 [ 70.630745][ T5992] write_inode_now+0x144/0x1b0 [ 70.631428][ T5992] iput+0x5cc/0x7f4 [ 70.632017][ T5992] ext4_xattr_block_set+0x17a4/0x2810 [ 70.632861][ T5992] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 70.633799][ T5992] __ext4_expand_extra_isize+0x298/0x358 [ 70.634665][ T5992] __ext4_mark_inode_dirty+0x3e4/0x790 [ 70.635540][ T5992] ext4_evict_inode+0xb58/0x1270 [ 70.636328][ T5992] evict+0x3c8/0x810 [ 70.636983][ T5992] iput+0x764/0x7f4 [ 70.637546][ T5992] ext4_process_orphan+0x240/0x2b4 [ 70.638314][ T5992] ext4_orphan_cleanup+0x908/0x104c [ 70.639229][ T5992] ext4_fill_super+0x6440/0x68a8 [ 70.640071][ T5992] get_tree_bdev+0x358/0x544 [ 70.640767][ T5992] ext4_get_tree+0x28/0x38 [ 70.641599][ T5992] vfs_get_tree+0x90/0x274 [ 70.642332][ T5992] do_new_mount+0x228/0x810 [ 70.643128][ T5992] path_mount+0x5b4/0xe78 [ 70.643862][ T5992] __arm64_sys_mount+0x49c/0x584 [ 70.644634][ T5992] invoke_syscall+0x98/0x2bc [ 70.645325][ T5992] el0_svc_common+0x138/0x258 [ 70.646039][ T5992] do_el0_svc+0x58/0x13c [ 70.646765][ T5992] el0_svc+0x58/0x138 [ 70.647425][ T5992] el0t_64_sync_handler+0x84/0xf0 [ 70.648230][ T5992] el0t_64_sync+0x18c/0x190 [ 70.648996][ T5992] [ 70.648996][ T5992] other info that might help us debug this: [ 70.648996][ T5992] [ 70.650528][ T5992] Possible unsafe locking scenario: [ 70.650528][ T5992] [ 70.651646][ T5992] CPU0 CPU1 [ 70.652419][ T5992] ---- ---- [ 70.653153][ T5992] lock(&ei->xattr_sem); [ 70.653798][ T5992] lock(&sbi->s_writepages_rwsem); [ 70.654899][ T5992] lock(&ei->xattr_sem); [ 70.655830][ T5992] lock(&sbi->s_writepages_rwsem); [ 70.656602][ T5992] [ 70.656602][ T5992] *** DEADLOCK *** [ 70.656602][ T5992] [ 70.657727][ T5992] 3 locks held by syz.2.656/5992: [ 70.658498][ T5992] #0: ffff0000cb3aa0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 70.660013][ T5992] #1: ffff0000cb3aa650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 70.661391][ T5992] #2: ffff0000f6560ad0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 70.662892][ T5992] [ 70.662892][ T5992] stack backtrace: [ 70.663767][ T5992] CPU: 1 PID: 5992 Comm: syz.2.656 Not tainted syzkaller #0 [ 70.664945][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 70.666482][ T5992] Call trace: [ 70.666964][ T5992] dump_backtrace+0x1c8/0x1f4 [ 70.667630][ T5992] show_stack+0x2c/0x3c [ 70.668214][ T5992] __dump_stack+0x30/0x40 [ 70.668837][ T5992] dump_stack_lvl+0xf8/0x160 [ 70.669445][ T5992] dump_stack+0x1c/0x5c [ 70.670049][ T5992] print_circular_bug+0x148/0x1b0 [ 70.670756][ T5992] check_noncircular+0x240/0x2d4 [ 70.671558][ T5992] __lock_acquire+0x293c/0x6544 [ 70.672275][ T5992] lock_acquire+0x20c/0x644 [ 70.672972][ T5992] percpu_down_read+0x70/0x2a8 [ 70.673673][ T5992] ext4_writepages+0x188/0x284c [ 70.674377][ T5992] do_writepages+0x2c0/0x4fc [ 70.675067][ T5992] __writeback_single_inode+0x164/0x157c [ 70.675868][ T5992] writeback_single_inode+0x1c0/0x720 [ 70.676640][ T5992] write_inode_now+0x144/0x1b0 [ 70.677339][ T5992] iput+0x5cc/0x7f4 [ 70.677879][ T5992] ext4_xattr_block_set+0x17a4/0x2810 [ 70.678715][ T5992] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 70.679548][ T5992] __ext4_expand_extra_isize+0x298/0x358 [ 70.680375][ T5992] __ext4_mark_inode_dirty+0x3e4/0x790 [ 70.681211][ T5992] ext4_evict_inode+0xb58/0x1270 [ 70.681938][ T5992] evict+0x3c8/0x810 [ 70.682521][ T5992] iput+0x764/0x7f4 [ 70.683053][ T5992] ext4_process_orphan+0x240/0x2b4 [ 70.683791][ T5992] ext4_orphan_cleanup+0x908/0x104c [ 70.684527][ T5992] ext4_fill_super+0x6440/0x68a8 [ 70.685245][ T5992] get_tree_bdev+0x358/0x544 [ 70.686167][ T5992] ext4_get_tree+0x28/0x38 [ 70.686831][ T5992] vfs_get_tree+0x90/0x274 [ 70.687473][ T5992] do_new_mount+0x228/0x810 [ 70.688101][ T5992] path_mount+0x5b4/0xe78 [ 70.688716][ T5992] __arm64_sys_mount+0x49c/0x584 [ 70.689391][ T5992] invoke_syscall+0x98/0x2bc [ 70.690035][ T5992] el0_svc_common+0x138/0x258 [ 70.690710][ T5992] do_el0_svc+0x58/0x13c [ 70.691353][ T5992] el0_svc+0x58/0x138 [ 70.691946][ T5992] el0t_64_sync_handler+0x84/0xf0 [ 70.692723][ T5992] el0t_64_sync+0x18c/0x190 [ 70.699010][ T5992] ------------[ cut here ]------------ [ 70.699958][ T5992] EA inode 11 i_nlink=2 [ 70.700456][ T5992] WARNING: CPU: 1 PID: 5992 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 70.702609][ T5992] Modules linked in: [ 70.703269][ T5992] CPU: 1 PID: 5992 Comm: syz.2.656 Not tainted syzkaller #0 [ 70.704403][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 70.706006][ T5992] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.707234][ T5992] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 70.708198][ T5992] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 70.709145][ T5992] sp : ffff8000220c6e00 [ 70.709723][ T5992] x29: ffff8000220c6ea0 x28: 0000000000000000 x27: dfff800000000000 [ 70.710932][ T5992] x26: 1fffe0001c4d51d6 x25: ffff700004418dc4 x24: 0000000000000000 [ 70.712210][ T5992] x23: ffff800017a8a000 x22: ffff0000e26a8cf8 x21: 0000000000000002 [ 70.713466][ T5992] x20: 0000000000000001 x19: ffff0000e26a8cb8 x18: ffff800011abbcc0 [ 70.714668][ T5992] x17: 1fffe00033edbb7e x16: ffff800008042d90 x15: ffff8000150bd000 [ 70.715788][ T5992] x14: 0000000000000100 x13: 0000000000000120 x12: 0000000000000001 [ 70.717135][ T5992] x11: 1fffe00019ecf010 x10: 0000000000000000 x9 : ab2a013ca2d7fe00 [ 70.718311][ T5992] x8 : ab2a013ca2d7fe00 x7 : 0000000000000004 x6 : ffff800008251e80 [ 70.719443][ T5992] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008240ddc [ 70.720605][ T5992] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 70.721736][ T5992] Call trace: [ 70.722199][ T5992] ext4_xattr_inode_update_ref+0x42c/0x470 [ 70.723124][ T5992] ext4_xattr_set_entry+0x918/0x15ac [ 70.723888][ T5992] ext4_xattr_ibody_set+0x204/0x600 [ 70.724706][ T5992] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 70.725634][ T5992] __ext4_expand_extra_isize+0x298/0x358 [ 70.726587][ T5992] __ext4_mark_inode_dirty+0x3e4/0x790 [ 70.727469][ T5992] ext4_evict_inode+0xb58/0x1270 [ 70.728232][ T5992] evict+0x3c8/0x810 [ 70.728844][ T5992] iput+0x764/0x7f4 [ 70.729496][ T5992] ext4_process_orphan+0x240/0x2b4 [ 70.730276][ T5992] ext4_orphan_cleanup+0x908/0x104c [ 70.731065][ T5992] ext4_fill_super+0x6440/0x68a8 [ 70.731852][ T5992] get_tree_bdev+0x358/0x544 [ 70.732506][ T5992] ext4_get_tree+0x28/0x38 [ 70.733145][ T5992] vfs_get_tree+0x90/0x274 [ 70.733768][ T5992] do_new_mount+0x228/0x810 [ 70.734593][ T5992] path_mount+0x5b4/0xe78 [ 70.735347][ T5992] __arm64_sys_mount+0x49c/0x584 [ 70.736104][ T5992] invoke_syscall+0x98/0x2bc [ 70.736813][ T5992] el0_svc_common+0x138/0x258 [ 70.737634][ T5992] do_el0_svc+0x58/0x13c [ 70.738395][ T5992] el0_svc+0x58/0x138 [ 70.739029][ T5992] el0t_64_sync_handler+0x84/0xf0 [ 70.739868][ T5992] el0t_64_sync+0x18c/0x190 [ 70.740540][ T5992] irq event stamp: 3637 [ 70.741138][ T5992] hardirqs last enabled at (3637): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 70.742667][ T5992] hardirqs last disabled at (3636): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 70.744119][ T5992] softirqs last enabled at (3318): [] handle_softirqs+0xaf8/0xc6c [ 70.745581][ T5992] softirqs last disabled at (3207): [] __do_softirq+0x14/0x20 [ 70.747021][ T5992] ---[ end trace 0000000000000000 ]--- [ 70.749903][ T5992] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #18: comm syz.2.656: iget: bad extra_isize 90 (inode size 256) [ 70.760456][ T5992] EXT4-fs (loop2): Remounting filesystem read-only [ 70.761599][ T5992] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.656: error while reading EA inode 18 err=-117 [ 70.765645][ T5992] EXT4-fs (loop2): Remounting filesystem read-only [ 70.766827][ T5992] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #18: comm syz.2.656: iget: bad extra_isize 90 (inode size 256) [ 70.770404][ T5992] EXT4-fs (loop2): Remounting filesystem read-only [ 70.771348][ T5992] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.656: error while reading EA inode 18 err=-117 [ 70.773330][ T5992] EXT4-fs (loop2): Remounting filesystem read-only [ 70.774440][ T5992] EXT4-fs (loop2): 1 orphan inode deleted [ 70.775309][ T5992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.796687][ T4329] EXT4-fs (loop2): unmounting filesystem.