last executing test programs: 8.366273185s ago: executing program 4 (id=11): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000001500)={0xfffffffffffffffd, 0xa, 0x14e, 0x100000000, 0x4, 0x42, 0x4e, 0x6, 0xffffffd5}) 7.854715985s ago: executing program 4 (id=17): connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004008}, 0x4444) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.797848004s ago: executing program 4 (id=24): socket$inet(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x8}], 0x1, 0x0, 0x2}}], 0x48, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYBLOB="16cfc515847a96d5ec40aa629b29dbce89f7c103b1d93b100456ff9cbcd4dca9defbf72be3055c2589351597ee8c611a7270301fc29dec4a803902d3d55b9b4f936f9833fe9dad98335ec209b9bbfcd95ce13e3ca67791516227dda81a0bcb334fb1d8f484ca8c2cae9b2a855f53ef02b3a6421421dd4b0076b0a4c6dae57123fd808ff08334cbc239ff35cd10520955c534ce0bb76f55339a01b94be000cc745db4843d39d84202181bf65e5499b24d40fd", @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000180)=""/98, 0x62, 0x0, &(0x7f0000000280)=""/55, 0x37}}, 0x10) 4.515199237s ago: executing program 2 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x22}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 4.029600135s ago: executing program 0 (id=27): pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2a002, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, 0x0, 0x0) 3.991959857s ago: executing program 0 (id=28): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) 3.879614597s ago: executing program 2 (id=29): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000100), 0x1d, 0x4000000) 3.671662622s ago: executing program 3 (id=32): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 3.671475762s ago: executing program 2 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close(r0) 3.503212026s ago: executing program 1 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 2.527587912s ago: executing program 2 (id=36): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x28) 2.508379923s ago: executing program 3 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.347694886s ago: executing program 0 (id=39): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x4) 2.347592976s ago: executing program 2 (id=40): truncate(&(0x7f0000000200)='./file2\x00', 0x8) 2.272839892s ago: executing program 3 (id=41): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 2.197117478s ago: executing program 4 (id=42): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) 1.676386429s ago: executing program 0 (id=43): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) 1.331286006s ago: executing program 2 (id=44): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() 1.291313679s ago: executing program 1 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) 1.192382306s ago: executing program 3 (id=46): r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x60b13e, 0x0, 0x6, 0x3a2}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) listen(r1, 0x4) close_range(r0, r1, 0x0) 1.192180607s ago: executing program 0 (id=47): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.158116489s ago: executing program 4 (id=48): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 1.146446821s ago: executing program 1 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1000000000000008}, 0x18) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000580)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0) close(r2) 999.625692ms ago: executing program 3 (id=50): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x13}, 0x20) 991.589422ms ago: executing program 3 (id=51): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000001600)={[{@debug}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x3, 0x3) 951.580365ms ago: executing program 1 (id=52): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x0, 0x0, 0x80000000000000, 0x804, 0x20000}, 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f00000001c0)=ANY=[], 0xe) 876.439541ms ago: executing program 0 (id=53): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000eca66bc5df4c3e0c781293e5582adc708a70b9f781fce81a14ec8c4497773d9bdc03a48b4eb2bcafbbe1d835095a66d75aa209e944eac7d462064ca202bf95038452af466e5a920058ed911911ff3c97158e885fa5ce6417b90dc0c10e6aa53f0505c798a7a150c2d4bb3a1293a170ad8d78f81e11c18b22cb272c80bd3803d966c1e79b8a6aa891d49e91e08960e1c98420"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r2 = socket$kcm(0x23, 0x2, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0xfffffffffffffff7, &(0x7f00000001c0)=[{0x0}], 0x1, 0x8}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r3, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x84}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\xf1\xbf\x98\f\x17\xd0\xd4\xa7\f\x00\x10\x00\x00\x8f\xc0\x9b\x85\x99\xab\xa7AkQ\x16$\x15\xcf\x14#\xad\x1f\xce}K\xdd\x90.\x86\xcb\xe2\f26!\xd6z\x9e\xc3\xe5\xbf\xc2c\x02\xdc\x86\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xdc)\x82\xeb\xa4\xa9\x14\xf86\xdc\x8e$B\xa0\x12Zqeo\xb8Z\xa1{\x9ewcbQ[O\xf3y\x99\xc7\xd29\xb7R\xc4:5wV\x86\xef\x95\xa8\x8f2T\xb0\xa2j\xed\xf28a\xfd\xf6d\b\xa8\xb5\x89\xd3mN]0\xb8K\t\x00\x00\x00\x01\x00\x00\x00\n\xb3\xe5\x94\xa7\xd3\xc3_\xc9\xcc\xa0nN\xc14k\xcd\xad\x9d}\xd5$\xaaf') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='ext4_ext_remove_space_done\x00', r10, 0x0, 0x5}, 0x18) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r11, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r12}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8f1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") socket$nl_route(0x10, 0x3, 0x0) 57.739135ms ago: executing program 1 (id=54): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x814) 0s ago: executing program 4 (id=55): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01001000000000000000020000"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 49.209605][ T4170] cgroup: Unknown subsys name 'net' [ 49.353302][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.575909][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.954644][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.019216][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.096107][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 52.115148][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.122503][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.130636][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.141616][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.149091][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.156931][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.184500][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 52.207822][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.231070][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.254041][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.261297][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.270188][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.282469][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.299185][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.306252][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.314162][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.394163][ T4182] team0: Port device team_slave_0 added [ 52.400395][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.407514][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.415773][ T4181] device bridge_slave_0 entered promiscuous mode [ 52.425038][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.445783][ T4182] team0: Port device team_slave_1 added [ 52.460354][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.467442][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.476158][ T4181] device bridge_slave_1 entered promiscuous mode [ 52.484720][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.519334][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.526432][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.534953][ T4197] device bridge_slave_0 entered promiscuous mode [ 52.555709][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.562915][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.588877][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.606455][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.614423][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.622652][ T4197] device bridge_slave_1 entered promiscuous mode [ 52.635490][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.642855][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.650630][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.658366][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.665325][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.691539][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.704427][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.723297][ T4183] team0: Port device team_slave_0 added [ 52.729490][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.736648][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.744566][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.756445][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.776897][ T4183] team0: Port device team_slave_1 added [ 52.806396][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.833299][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.851822][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.868159][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.875119][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.901508][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.919676][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.931078][ T4181] team0: Port device team_slave_0 added [ 52.958362][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.965319][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.991834][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.003756][ T4181] team0: Port device team_slave_1 added [ 53.026403][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.033395][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.052692][ T4184] team0: Port device team_slave_0 added [ 53.060813][ T4197] team0: Port device team_slave_0 added [ 53.074330][ T4184] team0: Port device team_slave_1 added [ 53.097352][ T4197] team0: Port device team_slave_1 added [ 53.129196][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.136313][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.162460][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.180820][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.187783][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.213887][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.225779][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.233685][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.259943][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.281565][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.288814][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.314884][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.326995][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.334406][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.360847][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.372568][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.379674][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.405862][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.419311][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.426228][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.432783][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.440777][ T4183] Cannot create hsr debugfs directory [ 53.537350][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.544398][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.551483][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.559263][ T4184] Cannot create hsr debugfs directory [ 53.593971][ T4181] device hsr_slave_0 entered promiscuous mode [ 53.601189][ T4181] device hsr_slave_1 entered promiscuous mode [ 53.607975][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.615965][ T4181] Cannot create hsr debugfs directory [ 53.629477][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 53.636205][ T4187] Bluetooth: hci2: command 0x0409 tx timeout [ 53.643082][ T4187] Bluetooth: hci3: command 0x0409 tx timeout [ 53.645965][ T4197] device hsr_slave_0 entered promiscuous mode [ 53.656071][ T4197] device hsr_slave_1 entered promiscuous mode [ 53.663001][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.670829][ T4197] Cannot create hsr debugfs directory [ 53.708297][ T4187] Bluetooth: hci4: command 0x0409 tx timeout [ 53.714439][ T4187] Bluetooth: hci0: command 0x0409 tx timeout [ 53.941934][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.954273][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.964526][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.980355][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.024079][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.044180][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.053506][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.084072][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.135161][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.146178][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.157648][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.173552][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.206939][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.241474][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.255043][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.270907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.281095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.299025][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.311425][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.327552][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.379091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.391394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.400884][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.408278][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.416659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.426337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.435090][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.442197][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.450462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.460250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.480472][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.493008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.507476][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.517212][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.531113][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.544160][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.584574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.594332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.603183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.612143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.621436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.630142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.638907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.647269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.658863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.674581][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.685184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.694404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.711019][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.731282][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.740965][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.757157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.765596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.778543][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.803159][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.810380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.820188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.831016][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.838141][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.846468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.855996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.864777][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.871915][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.879929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.887602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.895662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.904760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.913804][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.920912][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.928859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.936981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.949143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.963572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.972896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.981907][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.989019][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.997591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.006946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.017431][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.024545][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.033214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.069626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.079526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.089627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.100250][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.107371][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.115507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.126819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.135458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.144719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.156226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.165203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.174830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.183395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.192235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.218384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.227242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.236274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.246260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.255058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.264177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.274104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.283138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.292072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.300423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.310153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.319111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.327678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.338815][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.349002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.364914][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.376208][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.396951][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.406767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.416165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.426100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.434533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.443031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.450928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.459217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.467518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.476205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.504056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.518498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.548607][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.570745][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.590542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.608098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.627986][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.635713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.652153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.691469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.709326][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 55.719220][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 55.725285][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 55.737877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.748049][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.755136][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.763568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.773190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.782014][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.789114][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.797339][ T4246] Bluetooth: hci0: command 0x041b tx timeout [ 55.797729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.809056][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 55.811863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.825416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.834586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.842589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.859842][ T4182] device veth0_vlan entered promiscuous mode [ 55.881875][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.901759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.912303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.922067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.934211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.943323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.951156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.959710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.974328][ T4182] device veth1_vlan entered promiscuous mode [ 55.983603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.992462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.000900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.018789][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.026281][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.039829][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.052642][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.074031][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.083264][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.095903][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.109312][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.149674][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.164805][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.176031][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.184960][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.194794][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.204474][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.213675][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.222154][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.230223][ T4183] device veth0_vlan entered promiscuous mode [ 56.242005][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.262759][ T4183] device veth1_vlan entered promiscuous mode [ 56.302192][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.319113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.328637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.337523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.347609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.377806][ T4182] device veth0_macvtap entered promiscuous mode [ 56.393656][ T4182] device veth1_macvtap entered promiscuous mode [ 56.423250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.438982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.454588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.463253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.478719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.488564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.496434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.509843][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.524721][ T4184] device veth0_vlan entered promiscuous mode [ 56.533435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.542377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.551416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.560202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.574439][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.585051][ T4183] device veth0_macvtap entered promiscuous mode [ 56.596362][ T4183] device veth1_macvtap entered promiscuous mode [ 56.606240][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.614727][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.623714][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.633000][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.645430][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.654632][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.663369][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.673869][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.701392][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.716943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.726978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.734831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.746868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.770565][ T4184] device veth1_vlan entered promiscuous mode [ 56.803503][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.812064][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.820919][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.830431][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.839613][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.847574][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.859547][ T4197] device veth0_vlan entered promiscuous mode [ 56.869128][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.879886][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.892645][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.929291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.948447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.959556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.968392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.979578][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.991516][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.003462][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.021232][ T4197] device veth1_vlan entered promiscuous mode [ 57.043437][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.052715][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.061539][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.071117][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.079969][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.096988][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.106092][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.115291][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.124575][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.137070][ T4184] device veth0_macvtap entered promiscuous mode [ 57.175637][ T4184] device veth1_macvtap entered promiscuous mode [ 57.190313][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.198979][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.206351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.214908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.223762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.232875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.243748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.270073][ T4181] device veth0_vlan entered promiscuous mode [ 57.287589][ T4197] device veth0_macvtap entered promiscuous mode [ 57.297127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.305045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.314539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.322707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.338673][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.354425][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.364785][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.375500][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.386978][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.404246][ T4181] device veth1_vlan entered promiscuous mode [ 57.414216][ T4197] device veth1_macvtap entered promiscuous mode [ 57.425090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.435808][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.444755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.454000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.464458][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.464567][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.478776][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.489271][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.500369][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.511189][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.522626][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.556638][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.567262][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.580208][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.591101][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.601272][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.612098][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.623810][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.639316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.647570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.655930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.665229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.674470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.683401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.695464][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.704607][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.714170][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.723185][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.740334][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.752051][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.762594][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.773855][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.783742][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.794861][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 57.795612][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.801967][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 57.817113][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 57.817726][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.864073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.875425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.879799][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 57.895134][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.903690][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 57.919104][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.933304][ T4181] device veth0_macvtap entered promiscuous mode [ 57.942420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.953175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.997308][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.016637][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.041774][ T4239] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.050699][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.062307][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.063847][ T4239] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.074872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.097174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.117329][ T4181] device veth1_macvtap entered promiscuous mode [ 58.164289][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.192843][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.205624][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.219421][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.230047][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.242965][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.253060][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.263838][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.288874][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.300036][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.316118][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.336655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.359665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.373094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.397728][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.413911][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.424196][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.436691][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.448144][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.462113][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.472670][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.483371][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.499619][ T26] audit: type=1326 audit(1765556265.573:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4291 comm="syz.1.2" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a95d81749 code=0x0 [ 58.518777][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.533550][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.574100][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.582603][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.599745][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.611374][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.629698][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.654760][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.664387][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.677782][ T4300] loop3: detected capacity change from 0 to 512 [ 58.705662][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.733175][ T4300] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.749009][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.757121][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.803537][ T4300] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.817965][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.823529][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.830123][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.853971][ T4300] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.6: Allocating blocks 41-42 which overlap fs metadata [ 58.895580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.923637][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.944260][ T4300] Quota error (device loop3): write_blk: dquota write failed [ 58.953482][ T4300] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 58.966479][ T4300] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 58.976854][ T4300] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.6: Failed to acquire dquot type 1 [ 58.989864][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.009424][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.026063][ T4300] EXT4-fs error (device loop3): mb_free_blocks:1860: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 59.068472][ T4300] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #12: comm syz.3.6: corrupted inode contents [ 59.088415][ T4300] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #12: comm syz.3.6: mark_inode_dirty error [ 59.099819][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.124223][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.140217][ T4300] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #12: comm syz.3.6: corrupted inode contents [ 59.165244][ T4300] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.6: mark_inode_dirty error [ 59.183933][ T4300] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #12: comm syz.3.6: corrupted inode contents [ 59.205094][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.216140][ T4300] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 59.233112][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.265180][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.288622][ T4300] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #12: comm syz.3.6: corrupted inode contents [ 59.306933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.326349][ T4300] EXT4-fs error (device loop3): ext4_truncate:4279: inode #12: comm syz.3.6: mark_inode_dirty error [ 59.345058][ T4300] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 59.355265][ T4300] EXT4-fs (loop3): 1 truncate cleaned up [ 59.376317][ T4300] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,minixdf,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 59.476271][ T4318] loop4: detected capacity change from 0 to 512 [ 59.485462][ T4300] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 59.561728][ T4323] loop1: detected capacity change from 0 to 512 [ 59.613179][ T4323] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 59.647325][ T4318] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.668618][ T4318] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.669620][ T4323] EXT4-fs (loop1): invalid journal inode [ 59.725095][ T4323] EXT4-fs (loop1): can't get journal size [ 59.780198][ T26] audit: type=1326 audit(1765556266.853:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04779b749 code=0x7ffc0000 [ 59.815139][ T4323] EXT4-fs (loop1): 1 truncate cleaned up [ 59.835807][ T4323] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 59.854972][ T26] audit: type=1326 audit(1765556266.853:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fb04779b749 code=0x7ffc0000 [ 59.913266][ T26] audit: type=1326 audit(1765556266.853:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04779b749 code=0x7ffc0000 [ 59.936039][ T26] audit: type=1326 audit(1765556266.853:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4327 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04779b749 code=0x7ffc0000 [ 59.947951][ T4239] Bluetooth: hci3: command 0x0419 tx timeout [ 59.974321][ T4239] Bluetooth: hci2: command 0x0419 tx timeout [ 59.981397][ T4239] Bluetooth: hci1: command 0x0419 tx timeout [ 59.992813][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 60.008320][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 60.156607][ T4346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 61.503351][ T4350] loop3: detected capacity change from 0 to 1024 [ 61.656286][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.809779][ T26] audit: type=1326 audit(1765556268.873:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc749b77749 code=0x7ffc0000 [ 61.898009][ C0] sched: RT throttling activated [ 61.935982][ T26] audit: type=1326 audit(1765556268.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4338 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc749b77749 code=0x7ffc0000 [ 61.950078][ T4350] EXT4-fs (loop3): Mount option "dioread_nolock" incompatible with ext2 [ 63.130621][ T4365] loop1: detected capacity change from 0 to 512 [ 63.286632][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.295285][ T4365] EXT4-fs (loop1): Ignoring removed bh option [ 63.353264][ T4365] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 63.500830][ T4365] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.524187][ T1108] cfg80211: failed to load regulatory.db [ 63.543863][ T4366] lo speed is unknown, defaulting to 1000 [ 63.550605][ T4366] lo speed is unknown, defaulting to 1000 [ 63.575422][ T4366] lo speed is unknown, defaulting to 1000 [ 63.586093][ T4366] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.599231][ T4366] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 63.609662][ T4378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26'. [ 63.627035][ T4366] lo speed is unknown, defaulting to 1000 [ 63.635198][ T4366] lo speed is unknown, defaulting to 1000 [ 63.642187][ T4366] lo speed is unknown, defaulting to 1000 [ 63.649317][ T4366] lo speed is unknown, defaulting to 1000 [ 63.655884][ T4366] lo speed is unknown, defaulting to 1000 [ 63.669962][ T4378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26'. [ 63.699700][ T4378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26'. [ 64.074987][ T4393] loop3: detected capacity change from 0 to 512 [ 64.133294][ T4393] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 64.174930][ T4393] EXT4-fs (loop3): invalid journal inode [ 64.196062][ T4393] EXT4-fs (loop3): can't get journal size [ 64.266657][ T4393] EXT4-fs (loop3): 1 truncate cleaned up [ 64.294069][ T4393] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 64.304689][ T4400] loop1: detected capacity change from 0 to 128 [ 64.360894][ T4400] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.403160][ T4400] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.650304][ T4422] device bridge1 entered promiscuous mode [ 66.318090][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 66.318103][ T26] audit: type=1326 audit(1765556273.383:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0477925e7 code=0x7ffc0000 [ 66.449566][ T26] audit: type=1326 audit(1765556273.383:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb047737829 code=0x7ffc0000 [ 66.472034][ T26] audit: type=1326 audit(1765556273.383:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0477925e7 code=0x7ffc0000 [ 66.494948][ T26] audit: type=1326 audit(1765556273.383:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb047737829 code=0x7ffc0000 [ 66.522634][ T26] audit: type=1326 audit(1765556273.383:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04779b749 code=0x7ffc0000 [ 66.566550][ T26] audit: type=1326 audit(1765556273.493:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb04779b749 code=0x7ffc0000 [ 66.629249][ T4445] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET) [ 66.637885][ T4443] loop4: detected capacity change from 0 to 512 [ 66.655299][ T26] audit: type=1326 audit(1765556273.493:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0477925e7 code=0x7ffc0000 [ 66.724726][ T26] audit: type=1326 audit(1765556273.493:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb047737829 code=0x7ffc0000 [ 66.748400][ T4443] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.777711][ T4443] EXT4-fs (loop4): invalid journal inode [ 66.793532][ T4443] EXT4-fs (loop4): can't get journal size [ 66.810893][ T26] audit: type=1326 audit(1765556273.493:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0477925e7 code=0x7ffc0000 [ 66.821799][ T4453] loop3: detected capacity change from 0 to 1024 [ 66.861199][ T26] audit: type=1326 audit(1765556273.493:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb047737829 code=0x7ffc0000 [ 66.885006][ T4443] EXT4-fs (loop4): 1 truncate cleaned up [ 66.894691][ T4443] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 66.945370][ T4453] EXT4-fs (loop3): inline encryption not supported [ 66.957771][ T4453] EXT4-fs (loop3): Ignoring removed orlov option [ 67.016336][ T4453] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c018, mo2=0002] [ 67.070259][ T4453] System zones: 0-1, 3-12 [ 67.076133][ T4453] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,min_batch_time=0x00000000000004ab,data_err=ignore,nobarrier,inlinecrypt,orlov,nogrpid,discard,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 67.527177][ T4459] loop0: detected capacity change from 0 to 512 [ 67.766838][ T4459] [ 67.769294][ T4459] ====================================================== [ 67.776313][ T4459] WARNING: possible circular locking dependency detected [ 67.783348][ T4459] syzkaller #0 Not tainted [ 67.787764][ T4459] ------------------------------------------------------ [ 67.794789][ T4459] syz.0.53/4459 is trying to acquire lock: [ 67.800597][ T4459] ffff8880216febd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1c0/0x2d20 [ 67.810727][ T4459] [ 67.810727][ T4459] but task is already holding lock: [ 67.818092][ T4459] ffff8880210f0650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 67.827169][ T4459] [ 67.827169][ T4459] which lock already depends on the new lock. [ 67.827169][ T4459] [ 67.837671][ T4459] [ 67.837671][ T4459] the existing dependency chain (in reverse order) is: [ 67.846051][ T4471] netlink: 68 bytes leftover after parsing attributes in process `syz.4.55'. [ 67.846896][ T4459] [ 67.846896][ T4459] -> #1 (sb_internal){.+.+}-{0:0}: [ 67.846927][ T4459] percpu_down_read+0x46/0x1b0 [ 67.868231][ T4459] ext4_evict_inode+0x444/0x1080 [ 67.873702][ T4459] evict+0x485/0x870 [ 67.878165][ T4459] ext4_ext_migrate+0xc0a/0xe50 [ 67.883562][ T4459] ext4_ioctl+0x18a5/0x3590 [ 67.888600][ T4459] __se_sys_ioctl+0xfa/0x170 [ 67.893817][ T4459] do_syscall_64+0x4c/0xa0 [ 67.898759][ T4459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.905178][ T4459] [ 67.905178][ T4459] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 67.913726][ T4459] __lock_acquire+0x2c33/0x7c60 [ 67.919116][ T4459] lock_acquire+0x197/0x3f0 [ 67.924241][ T4459] percpu_down_read+0x46/0x1b0 [ 67.929633][ T4459] ext4_writepages+0x1c0/0x2d20 [ 67.935021][ T4459] do_writepages+0x48d/0x6d0 [ 67.940148][ T4459] __writeback_single_inode+0x153/0xda0 [ 67.946229][ T4459] writeback_single_inode+0x221/0x8b0 [ 67.952137][ T4459] write_inode_now+0x217/0x280 [ 67.957424][ T4459] iput+0x5ab/0x8a0 [ 67.961763][ T4459] ext4_xattr_set_entry+0x10ff/0x3d30 [ 67.967665][ T4459] ext4_xattr_block_set+0x4f7/0x2d30 [ 67.973487][ T4459] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 67.979828][ T4459] __ext4_expand_extra_isize+0x301/0x3e0 [ 67.985996][ T4459] __ext4_mark_inode_dirty+0x469/0x700 [ 67.991988][ T4459] ext4_evict_inode+0xa81/0x1080 [ 67.997487][ T4459] evict+0x485/0x870 [ 68.001896][ T4459] ext4_orphan_cleanup+0xaa9/0x12e0 [ 68.007669][ T4459] ext4_fill_super+0x92f0/0x9a60 [ 68.013164][ T4459] mount_bdev+0x287/0x3c0 [ 68.018107][ T4459] legacy_get_tree+0xe6/0x180 [ 68.023437][ T4459] vfs_get_tree+0x88/0x270 [ 68.028637][ T4459] do_new_mount+0x24a/0xa40 [ 68.034082][ T4459] __se_sys_mount+0x2d6/0x3c0 [ 68.039267][ T4459] do_syscall_64+0x4c/0xa0 [ 68.044196][ T4459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.050606][ T4459] [ 68.050606][ T4459] other info that might help us debug this: [ 68.050606][ T4459] [ 68.060855][ T4459] Possible unsafe locking scenario: [ 68.060855][ T4459] [ 68.068300][ T4459] CPU0 CPU1 [ 68.073665][ T4459] ---- ---- [ 68.079123][ T4459] lock(sb_internal); [ 68.083190][ T4459] lock(&sbi->s_writepages_rwsem); [ 68.090892][ T4459] lock(sb_internal); [ 68.097462][ T4459] lock(&sbi->s_writepages_rwsem); [ 68.102643][ T4459] [ 68.102643][ T4459] *** DEADLOCK *** [ 68.102643][ T4459] [ 68.110769][ T4459] 3 locks held by syz.0.53/4459: [ 68.115706][ T4459] #0: ffff8880210f00e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 68.126002][ T4459] #1: ffff8880210f0650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 68.135485][ T4459] #2: ffff88806275da80 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 68.145859][ T4459] [ 68.145859][ T4459] stack backtrace: [ 68.151851][ T4459] CPU: 1 PID: 4459 Comm: syz.0.53 Not tainted syzkaller #0 [ 68.159036][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.169098][ T4459] Call Trace: [ 68.172380][ T4459] [ 68.175300][ T4459] dump_stack_lvl+0x168/0x230 [ 68.179967][ T4459] ? load_image+0x3b0/0x3b0 [ 68.184453][ T4459] ? show_regs_print_info+0x20/0x20 [ 68.189637][ T4459] ? print_circular_bug+0x12b/0x1a0 [ 68.194820][ T4459] check_noncircular+0x274/0x310 [ 68.199743][ T4459] ? add_chain_block+0x940/0x940 [ 68.204667][ T4459] ? _find_first_zero_bit+0xce/0xf0 [ 68.209854][ T4459] ? add_lock_to_list+0x18d/0x280 [ 68.214923][ T4459] __lock_acquire+0x2c33/0x7c60 [ 68.219786][ T4459] ? verify_lock_unused+0x140/0x140 [ 68.225006][ T4459] lock_acquire+0x197/0x3f0 [ 68.229504][ T4459] ? ext4_writepages+0x1c0/0x2d20 [ 68.234515][ T4459] ? check_path+0x40/0x40 [ 68.238831][ T4459] ? __might_sleep+0xf0/0xf0 [ 68.243415][ T4459] ? read_lock_is_recursive+0x10/0x10 [ 68.248775][ T4459] ? mark_lock+0x94/0x320 [ 68.253087][ T4459] ? __lock_acquire+0x13ad/0x7c60 [ 68.258095][ T4459] percpu_down_read+0x46/0x1b0 [ 68.262904][ T4459] ? ext4_writepages+0x1c0/0x2d20 [ 68.268092][ T4459] ext4_writepages+0x1c0/0x2d20 [ 68.272944][ T4459] ? rcu_is_watching+0x11/0xa0 [ 68.277694][ T4459] ? lock_release+0xba/0x870 [ 68.282269][ T4459] ? rcu_lock_release+0x5/0x20 [ 68.287017][ T4459] ? mark_lock+0x94/0x320 [ 68.291329][ T4459] ? verify_lock_unused+0x140/0x140 [ 68.296515][ T4459] ? mark_lock+0x94/0x320 [ 68.300837][ T4459] ? ext4_readpage+0x2e0/0x2e0 [ 68.306408][ T4459] ? __lock_acquire+0x13ad/0x7c60 [ 68.311416][ T4459] ? rcu_lock_release+0x5/0x20 [ 68.316166][ T4459] ? __lock_acquire+0x7c60/0x7c60 [ 68.321280][ T4459] ? do_raw_spin_lock+0x11d/0x280 [ 68.326299][ T4459] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 68.331660][ T4459] ? do_raw_spin_unlock+0x11d/0x230 [ 68.336851][ T4459] ? ext4_readpage+0x2e0/0x2e0 [ 68.341686][ T4459] do_writepages+0x48d/0x6d0 [ 68.346265][ T4459] ? __writepage+0x130/0x130 [ 68.350996][ T4459] ? writeback_single_inode+0x216/0x8b0 [ 68.356535][ T4459] ? __lock_acquire+0x7c60/0x7c60 [ 68.361552][ T4459] ? do_raw_spin_lock+0x11d/0x280 [ 68.366587][ T4459] __writeback_single_inode+0x153/0xda0 [ 68.372214][ T4459] writeback_single_inode+0x221/0x8b0 [ 68.377580][ T4459] ? write_inode_now+0x280/0x280 [ 68.382601][ T4459] write_inode_now+0x217/0x280 [ 68.387381][ T4459] ? bdi_split_work_to_wbs+0x820/0x820 [ 68.392833][ T4459] ? do_raw_spin_unlock+0x11d/0x230 [ 68.398111][ T4459] iput+0x5ab/0x8a0 [ 68.401912][ T4459] ext4_xattr_set_entry+0x10ff/0x3d30 [ 68.407398][ T4459] ? ext4_xattr_ibody_set+0x330/0x330 [ 68.412779][ T4459] ? rcu_is_watching+0x11/0xa0 [ 68.417532][ T4459] ? kmem_cache_free+0x14c/0x210 [ 68.422456][ T4459] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 68.428531][ T4459] ext4_xattr_block_set+0x4f7/0x2d30 [ 68.433842][ T4459] ? do_raw_spin_unlock+0x11d/0x230 [ 68.439043][ T4459] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 68.444751][ T4459] ? ext4_xattr_block_find+0x500/0x500 [ 68.450290][ T4459] ? ext4_xattr_block_find+0x433/0x500 [ 68.455756][ T4459] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 68.461566][ T4459] __ext4_expand_extra_isize+0x301/0x3e0 [ 68.467187][ T4459] __ext4_mark_inode_dirty+0x469/0x700 [ 68.472752][ T4459] ext4_evict_inode+0xa81/0x1080 [ 68.477724][ T4459] ? _raw_spin_unlock+0x24/0x40 [ 68.482565][ T4459] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 68.488447][ T4459] ? do_raw_spin_unlock+0x11d/0x230 [ 68.493827][ T4459] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 68.499724][ T4459] evict+0x485/0x870 [ 68.503621][ T4459] ? __lock_acquire+0x7c60/0x7c60 [ 68.508673][ T4459] ? proc_nr_inodes+0x320/0x320 [ 68.513518][ T4459] ? do_raw_spin_unlock+0x11d/0x230 [ 68.518714][ T4459] ? _raw_spin_unlock+0x24/0x40 [ 68.523576][ T4459] ? iput+0x706/0x8a0 [ 68.527555][ T4459] ext4_orphan_cleanup+0xaa9/0x12e0 [ 68.532760][ T4459] ? ext4_orphan_del+0xb90/0xb90 [ 68.537686][ T4459] ? errseq_check_and_advance+0x62/0x120 [ 68.543310][ T4459] ext4_fill_super+0x92f0/0x9a60 [ 68.548244][ T4459] ? ext4_mount+0x40/0x40 [ 68.552556][ T4459] ? set_blocksize+0x1f1/0x370 [ 68.557302][ T4459] ? sb_set_blocksize+0xa5/0xe0 [ 68.562141][ T4459] mount_bdev+0x287/0x3c0 [ 68.566455][ T4459] ? ext4_mount+0x40/0x40 [ 68.570774][ T4459] legacy_get_tree+0xe6/0x180 [ 68.575475][ T4459] ? ext4_errno_to_code+0x160/0x160 [ 68.580671][ T4459] vfs_get_tree+0x88/0x270 [ 68.585088][ T4459] do_new_mount+0x24a/0xa40 [ 68.589585][ T4459] __se_sys_mount+0x2d6/0x3c0 [ 68.594255][ T4459] ? __x64_sys_mount+0xc0/0xc0 [ 68.599012][ T4459] ? lockdep_hardirqs_on+0x94/0x140 [ 68.604207][ T4459] ? __x64_sys_mount+0x1c/0xc0 [ 68.608985][ T4459] do_syscall_64+0x4c/0xa0 [ 68.613405][ T4459] ? clear_bhb_loop+0x30/0x80 [ 68.618164][ T4459] ? clear_bhb_loop+0x30/0x80 [ 68.622848][ T4459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.628832][ T4459] RIP: 0033:0x7fb04779ceea [ 68.633251][ T4459] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.653073][ T4459] RSP: 002b:00007fb045a01e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.661562][ T4459] RAX: ffffffffffffffda RBX: 00007fb045a01ef0 RCX: 00007fb04779ceea [ 68.669702][ T4459] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb045a01eb0 [ 68.677669][ T4459] RBP: 0000200000000180 R08: 00007fb045a01ef0 R09: 0000000000800700 [ 68.685627][ T4459] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 68.693587][ T4459] R13: 00007fb045a01eb0 R14: 000000000000046f R15: 000000000000002c [ 68.701670][ T4459] [ 68.718986][ T4459] ------------[ cut here ]------------ [ 68.724481][ T4459] EA inode 11 i_nlink=2 [ 68.724722][ T4459] WARNING: CPU: 0 PID: 4459 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 68.740322][ T4459] Modules linked in: [ 68.744252][ T4459] CPU: 1 PID: 4459 Comm: syz.0.53 Not tainted syzkaller #0 [ 68.752066][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.770778][ T4459] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 68.786216][ T4473] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 68.789672][ T4459] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 df a2 ff 49 8b 37 48 c7 c7 c0 8c 1d 8a 89 da e8 d2 d2 7d 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 68.794362][ T4473] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 68.816397][ T4459] RSP: 0018:ffffc9000307f140 EFLAGS: 00010246 [ 68.824592][ T4473] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 68.834491][ T4459] RAX: 150133841fbc4900 RBX: 0000000000000002 RCX: 0000000000080000 [ 68.846675][ T4459] RDX: ffffc90003d83000 RSI: 000000000007ffff RDI: 0000000000080000 [ 68.856437][ T4459] RBP: ffffc9000307f230 R08: dffffc0000000000 R09: fffff5200060fd8d [ 68.864887][ T4459] R10: fffff5200060fd8d R11: 1ffff9200060fd8c R12: ffffc9000307f1a0 [ 68.874731][ T4459] R13: ffff8880605d2a80 R14: dffffc0000000000 R15: ffff8880605d2ac0 [ 68.882833][ T4459] FS: 00007fb045a026c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 68.893581][ T4459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.900449][ T4459] CR2: 0000555562b93808 CR3: 000000001fd83000 CR4: 00000000003506e0 [ 68.905768][ T4473] PM: hibernation: Basic memory bitmaps created [ 68.910129][ T4459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.922927][ T4459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.924073][ T4472] PM: hibernation: Basic memory bitmaps freed [ 68.933080][ T4459] Call Trace: [ 68.941174][ T4459] [ 68.944203][ T4459] ? ext4_xattr_block_csum+0x500/0x500 [ 68.953580][ T4459] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 68.959541][ T4459] ? mb_cache_entry_create+0x62e/0x890 [ 68.965058][ T4459] ext4_xattr_set_entry+0xed0/0x3d30 [ 68.970616][ T4459] ? rcu_is_watching+0x11/0xa0 [ 68.975510][ T4459] ? mb_cache_entry_create+0x676/0x890 [ 68.981352][ T4459] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 68.986958][ T4459] ? ext4_xattr_ibody_set+0x330/0x330 [ 68.992588][ T4459] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 68.998392][ T4459] ? ext4_xattr_block_find+0x500/0x500 [ 69.003859][ T4459] ext4_xattr_ibody_set+0x112/0x330 [ 69.009110][ T4459] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 69.015055][ T4459] __ext4_expand_extra_isize+0x301/0x3e0 [ 69.020806][ T4459] __ext4_mark_inode_dirty+0x469/0x700 [ 69.026276][ T4459] ext4_evict_inode+0xa81/0x1080 [ 69.031237][ T4459] ? _raw_spin_unlock+0x24/0x40 [ 69.036179][ T4459] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 69.042920][ T4459] ? do_raw_spin_unlock+0x11d/0x230 [ 69.048457][ T4459] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 69.054394][ T4459] evict+0x485/0x870 [ 69.058336][ T4459] ? __lock_acquire+0x7c60/0x7c60 [ 69.063394][ T4459] ? proc_nr_inodes+0x320/0x320 [ 69.068319][ T4459] ? do_raw_spin_unlock+0x11d/0x230 [ 69.073539][ T4459] ? _raw_spin_unlock+0x24/0x40 [ 69.078423][ T4459] ? iput+0x706/0x8a0 [ 69.082406][ T4459] ext4_orphan_cleanup+0xaa9/0x12e0 [ 69.087592][ T4459] ? ext4_orphan_del+0xb90/0xb90 [ 69.092541][ T4459] ? errseq_check_and_advance+0x62/0x120 [ 69.098290][ T4459] ext4_fill_super+0x92f0/0x9a60 [ 69.103237][ T4459] ? ext4_mount+0x40/0x40 [ 69.107556][ T4459] ? set_blocksize+0x1f1/0x370 [ 69.112352][ T4459] ? sb_set_blocksize+0xa5/0xe0 [ 69.117218][ T4459] mount_bdev+0x287/0x3c0 [ 69.121651][ T4459] ? ext4_mount+0x40/0x40 [ 69.126098][ T4459] legacy_get_tree+0xe6/0x180 [ 69.130820][ T4459] ? ext4_errno_to_code+0x160/0x160 [ 69.136029][ T4459] vfs_get_tree+0x88/0x270 [ 69.140890][ T4459] do_new_mount+0x24a/0xa40 [ 69.145408][ T4459] __se_sys_mount+0x2d6/0x3c0 [ 69.150395][ T4459] ? __x64_sys_mount+0xc0/0xc0 [ 69.155260][ T4459] ? lockdep_hardirqs_on+0x94/0x140 [ 69.160780][ T4459] ? __x64_sys_mount+0x1c/0xc0 [ 69.165640][ T4459] do_syscall_64+0x4c/0xa0 [ 69.170121][ T4459] ? clear_bhb_loop+0x30/0x80 [ 69.174810][ T4459] ? clear_bhb_loop+0x30/0x80 [ 69.179696][ T4459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.185667][ T4459] RIP: 0033:0x7fb04779ceea [ 69.190215][ T4459] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.210031][ T4459] RSP: 002b:00007fb045a01e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.218490][ T4459] RAX: ffffffffffffffda RBX: 00007fb045a01ef0 RCX: 00007fb04779ceea [ 69.226574][ T4459] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb045a01eb0 [ 69.234716][ T4459] RBP: 0000200000000180 R08: 00007fb045a01ef0 R09: 0000000000800700 [ 69.243145][ T4459] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 69.251284][ T4459] R13: 00007fb045a01eb0 R14: 000000000000046f R15: 000000000000002c [ 69.259615][ T4459] [ 69.262744][ T4459] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.270031][ T4459] CPU: 0 PID: 4459 Comm: syz.0.53 Not tainted syzkaller #0 [ 69.277219][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.287255][ T4459] Call Trace: [ 69.290521][ T4459] [ 69.293433][ T4459] dump_stack_lvl+0x168/0x230 [ 69.298108][ T4459] ? show_regs_print_info+0x20/0x20 [ 69.303300][ T4459] ? load_image+0x3b0/0x3b0 [ 69.307899][ T4459] panic+0x2c9/0x7f0 [ 69.311782][ T4459] ? bpf_jit_dump+0xd0/0xd0 [ 69.316272][ T4459] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 69.322332][ T4459] __warn+0x248/0x2b0 [ 69.326300][ T4459] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 69.332270][ T4459] report_bug+0x1b7/0x2e0 [ 69.336595][ T4459] handle_bug+0x3a/0x70 [ 69.340750][ T4459] exc_invalid_op+0x16/0x40 [ 69.345235][ T4459] asm_exc_invalid_op+0x16/0x20 [ 69.350084][ T4459] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 69.356663][ T4459] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 df a2 ff 49 8b 37 48 c7 c7 c0 8c 1d 8a 89 da e8 d2 d2 7d 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 69.376366][ T4459] RSP: 0018:ffffc9000307f140 EFLAGS: 00010246 [ 69.382426][ T4459] RAX: 150133841fbc4900 RBX: 0000000000000002 RCX: 0000000000080000 [ 69.390405][ T4459] RDX: ffffc90003d83000 RSI: 000000000007ffff RDI: 0000000000080000 [ 69.398367][ T4459] RBP: ffffc9000307f230 R08: dffffc0000000000 R09: fffff5200060fd8d [ 69.406772][ T4459] R10: fffff5200060fd8d R11: 1ffff9200060fd8c R12: ffffc9000307f1a0 [ 69.414729][ T4459] R13: ffff8880605d2a80 R14: dffffc0000000000 R15: ffff8880605d2ac0 [ 69.422694][ T4459] ? ext4_xattr_block_csum+0x500/0x500 [ 69.428144][ T4459] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 69.433600][ T4459] ? mb_cache_entry_create+0x62e/0x890 [ 69.439054][ T4459] ext4_xattr_set_entry+0xed0/0x3d30 [ 69.444333][ T4459] ? rcu_is_watching+0x11/0xa0 [ 69.449098][ T4459] ? mb_cache_entry_create+0x676/0x890 [ 69.454548][ T4459] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 69.459993][ T4459] ? ext4_xattr_ibody_set+0x330/0x330 [ 69.465355][ T4459] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 69.471079][ T4459] ? ext4_xattr_block_find+0x500/0x500 [ 69.476556][ T4459] ext4_xattr_ibody_set+0x112/0x330 [ 69.481759][ T4459] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 69.487684][ T4459] __ext4_expand_extra_isize+0x301/0x3e0 [ 69.493317][ T4459] __ext4_mark_inode_dirty+0x469/0x700 [ 69.498908][ T4459] ext4_evict_inode+0xa81/0x1080 [ 69.503948][ T4459] ? _raw_spin_unlock+0x24/0x40 [ 69.508792][ T4459] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 69.514695][ T4459] ? do_raw_spin_unlock+0x11d/0x230 [ 69.519968][ T4459] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 69.525853][ T4459] evict+0x485/0x870 [ 69.529755][ T4459] ? __lock_acquire+0x7c60/0x7c60 [ 69.534767][ T4459] ? proc_nr_inodes+0x320/0x320 [ 69.539600][ T4459] ? do_raw_spin_unlock+0x11d/0x230 [ 69.544783][ T4459] ? _raw_spin_unlock+0x24/0x40 [ 69.549834][ T4459] ? iput+0x706/0x8a0 [ 69.553811][ T4459] ext4_orphan_cleanup+0xaa9/0x12e0 [ 69.559001][ T4459] ? ext4_orphan_del+0xb90/0xb90 [ 69.563972][ T4459] ? errseq_check_and_advance+0x62/0x120 [ 69.569603][ T4459] ext4_fill_super+0x92f0/0x9a60 [ 69.574543][ T4459] ? ext4_mount+0x40/0x40 [ 69.578861][ T4459] ? set_blocksize+0x1f1/0x370 [ 69.583613][ T4459] ? sb_set_blocksize+0xa5/0xe0 [ 69.588556][ T4459] mount_bdev+0x287/0x3c0 [ 69.592882][ T4459] ? ext4_mount+0x40/0x40 [ 69.597385][ T4459] legacy_get_tree+0xe6/0x180 [ 69.602141][ T4459] ? ext4_errno_to_code+0x160/0x160 [ 69.607333][ T4459] vfs_get_tree+0x88/0x270 [ 69.611744][ T4459] do_new_mount+0x24a/0xa40 [ 69.616244][ T4459] __se_sys_mount+0x2d6/0x3c0 [ 69.620942][ T4459] ? __x64_sys_mount+0xc0/0xc0 [ 69.625712][ T4459] ? lockdep_hardirqs_on+0x94/0x140 [ 69.630901][ T4459] ? __x64_sys_mount+0x1c/0xc0 [ 69.635746][ T4459] do_syscall_64+0x4c/0xa0 [ 69.640157][ T4459] ? clear_bhb_loop+0x30/0x80 [ 69.644918][ T4459] ? clear_bhb_loop+0x30/0x80 [ 69.649585][ T4459] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.655466][ T4459] RIP: 0033:0x7fb04779ceea [ 69.659875][ T4459] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.680790][ T4459] RSP: 002b:00007fb045a01e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.689369][ T4459] RAX: ffffffffffffffda RBX: 00007fb045a01ef0 RCX: 00007fb04779ceea [ 69.697326][ T4459] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb045a01eb0 [ 69.705282][ T4459] RBP: 0000200000000180 R08: 00007fb045a01ef0 R09: 0000000000800700 [ 69.713272][ T4459] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 69.721244][ T4459] R13: 00007fb045a01eb0 R14: 000000000000046f R15: 000000000000002c [ 69.729216][ T4459] [ 69.732591][ T4459] Kernel Offset: disabled [ 69.736917][ T4459] Rebooting in 86400 seconds..