last executing test programs: 1.821088453s ago: executing program 2 (id=389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x20000880) 1.550801585s ago: executing program 4 (id=396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) 1.484785687s ago: executing program 4 (id=398): r0 = socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 1.361431163s ago: executing program 3 (id=405): set_mempolicy(0x3, &(0x7f00000000c0)=0x9, 0x5) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x1002, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1c1, &(0x7f00000015c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000003c0), 0x100000000000022d) 1.303456985s ago: executing program 2 (id=408): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$PPPIOCCONNECT(r0, 0x4004743a, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@rnullb, r2, &(0x7f0000000340)) socket$kcm(0xa, 0x922000000003, 0x11) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095", @ANYBLOB="3e24c1c8320e64a0eb042434cc5c5114cdd74776f4255b84a896af2f6b08baf70f86ea992301079569d4dcccb027aaeb260f6f02963240e11eb8c6014013b07fa5763259c5fbc4e648d248c03f9b4f66bbe660ac7163ea374eb3049e10d5d712c97fb543271407811a470ce9548a915cd1a491cb285b79c63576b61cb099b58a63525d41f406baaba97dcab6f3a1c3ccd7b3325546a1cc405842c38f30f3488a66add1bccc82ce4e40b3c1e78e2273523afc3e7855f2b301d951b483345db79a83fa637442ad8db7fc3ea04adf36ce9d84982d5c8aa39adcad6f10a7", @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000d9cf020000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) syz_io_uring_setup(0x2b0a, &(0x7f0000000540)={0x0, 0x5883, 0x7, 0x3, 0x2c2}, &(0x7f0000000400)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r11}, 0x10) 1.132402172s ago: executing program 3 (id=414): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x77, 0x8003, 0x4, 0x2000009, 0x7f, 0x81}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xbc}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000010000000000611000004000000004000000000000000000"], 0x0, 0x28}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 1.065255865s ago: executing program 2 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x20000880) 993.174138ms ago: executing program 3 (id=420): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 941.620381ms ago: executing program 1 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x84b, &(0x7f0000000280)={0x0, 0x45f8, 0x400, 0x1, 0x361}) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) 876.903923ms ago: executing program 3 (id=428): socket$nl_generic(0x10, 0x3, 0x10) pipe2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x60002016}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000c5851300"/21], 0x50) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r8, 0x26, &(0x7f00000031c0)={0x1}) 876.746393ms ago: executing program 1 (id=429): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) write$sndseq(r0, &(0x7f0000000140)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffdf, 0x3, 0x21}, 0x14005}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 866.082004ms ago: executing program 1 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) geteuid() 792.911407ms ago: executing program 1 (id=433): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r2, 0x6749}, 0x8) 792.715547ms ago: executing program 0 (id=434): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="05031600d3fc140000004788031c0810", 0x10, 0x4000800, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 791.836607ms ago: executing program 1 (id=435): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 738.739189ms ago: executing program 0 (id=436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) 738.581109ms ago: executing program 0 (id=437): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @local}, 0x10, 0x0}, 0x24008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 737.846039ms ago: executing program 0 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x20040840) 689.052421ms ago: executing program 1 (id=439): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) 688.852071ms ago: executing program 0 (id=440): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x3}) write$sndseq(r0, &(0x7f0000000140)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffdf, 0x3, 0x21}, 0x14005}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 683.247542ms ago: executing program 0 (id=441): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0x80, 0xc11}) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) 604.498075ms ago: executing program 4 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYBLOB="03"]) 529.051208ms ago: executing program 4 (id=443): openat(0xffffffffffffff9c, 0x0, 0x35b043, 0x13) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 515.176668ms ago: executing program 2 (id=444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x348, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x10000}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, [0x0, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xffffff00], 'caif0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x3c, 0x9, 0xe, 0x10}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0xfffffff7, 0x200000, 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffd0f, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010100000000f7ffffff0100000a0500010007000000006ebd92", @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) 499.955579ms ago: executing program 4 (id=445): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r2, 0x6749}, 0x8) 429.140073ms ago: executing program 4 (id=446): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="05031600d3fc140000004788031c0810", 0x10, 0x4000800, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 305.105357ms ago: executing program 2 (id=447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000004000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000005"], 0xfc}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0xfd, 0x37bc0b736aafec5e, &(0x7f0000000100)={0xa, 0x0, 0xa576, @mcast1, 0x0, 0x2}, 0x20) 304.789327ms ago: executing program 2 (id=448): symlinkat(&(0x7f0000001b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x14000b01, &(0x7f00000000c0)={0x11, 0x5, r3, 0x1, 0x80}, 0x14) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000400)={@remote, @loopback}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x20, 0x20, 0xfff, 0x24dd, {{0x28, 0x4, 0x3, 0x39, 0xa0, 0x65, 0x0, 0xfe, 0x2f, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x1f, 0x5b, [@dev={0xac, 0x14, 0x14, 0x2a}, @empty, @empty, @broadcast, @multicast2, @remote, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x4, "ee10"}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x8, [{@remote, 0x5}]}, @end, @timestamp_prespec={0x44, 0x54, 0xdd, 0x3, 0xa, [{@multicast2, 0x5}, {@local, 0xb}, {@multicast2, 0xe6c}, {@multicast1, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfe10}, {@empty, 0x1}, {@private=0xa010100, 0x5}, {@broadcast, 0x200}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4}, {@remote, 0x6}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000000200300000007000000", @ANYRES32, @ANYBLOB="5a006708060005"], 0x24}}, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 42.929999ms ago: executing program 3 (id=449): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @local}, 0x10, 0x0}, 0x24008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 0s ago: executing program 3 (id=450): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 30.905359][ T4309] cgroup: Unknown subsys name 'net' [ 31.145757][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.398027][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.087632][ T4321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.094767][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.096125][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.097474][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.099233][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.101065][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.102243][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.103765][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.105189][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.105890][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.106686][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.107701][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.108510][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.109607][ T4334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.111023][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.111673][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.112898][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.115187][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.116333][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.117649][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.117768][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.118852][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.120371][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.121100][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.121976][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.124951][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.126164][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.126399][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.130078][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.131253][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.263804][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 32.287272][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 32.292750][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 32.308003][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 32.321852][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.322959][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.325967][ T4325] device bridge_slave_0 entered promiscuous mode [ 32.328813][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.329937][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.331339][ T4325] device bridge_slave_1 entered promiscuous mode [ 32.342125][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 32.357484][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.358616][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.359968][ T4320] device bridge_slave_0 entered promiscuous mode [ 32.362629][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.364154][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.365570][ T4320] device bridge_slave_1 entered promiscuous mode [ 32.368060][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.380341][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.381812][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.382981][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.384826][ T4323] device bridge_slave_0 entered promiscuous mode [ 32.388103][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.389222][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.390599][ T4319] device bridge_slave_0 entered promiscuous mode [ 32.392344][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.393598][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.395118][ T4319] device bridge_slave_1 entered promiscuous mode [ 32.399783][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.404286][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.405382][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.406851][ T4323] device bridge_slave_1 entered promiscuous mode [ 32.414501][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.422030][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.425313][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.427733][ T4325] team0: Port device team_slave_0 added [ 32.438299][ T4325] team0: Port device team_slave_1 added [ 32.446523][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.455182][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.456194][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.460089][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.462931][ T4320] team0: Port device team_slave_0 added [ 32.465542][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.467412][ T4320] team0: Port device team_slave_1 added [ 32.468492][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.469652][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.470989][ T4332] device bridge_slave_0 entered promiscuous mode [ 32.473446][ T4319] team0: Port device team_slave_0 added [ 32.474715][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.475759][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.479466][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.481750][ T4319] team0: Port device team_slave_1 added [ 32.487304][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.488432][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.489863][ T4332] device bridge_slave_1 entered promiscuous mode [ 32.502887][ T4323] team0: Port device team_slave_0 added [ 32.504633][ T4323] team0: Port device team_slave_1 added [ 32.508588][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.509589][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.513979][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.516334][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.517345][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.521293][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.526039][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.532066][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.533747][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.537537][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.540019][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.547981][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.549058][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.552936][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.557997][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.559064][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.562946][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.568845][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.569956][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.573851][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.614083][ T4325] device hsr_slave_0 entered promiscuous mode [ 32.653191][ T4325] device hsr_slave_1 entered promiscuous mode [ 32.719479][ T4332] team0: Port device team_slave_0 added [ 32.721240][ T4332] team0: Port device team_slave_1 added [ 32.774078][ T4320] device hsr_slave_0 entered promiscuous mode [ 32.813228][ T4320] device hsr_slave_1 entered promiscuous mode [ 32.853073][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.854279][ T4320] Cannot create hsr debugfs directory [ 32.904016][ T4319] device hsr_slave_0 entered promiscuous mode [ 32.943251][ T4319] device hsr_slave_1 entered promiscuous mode [ 32.983152][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.984295][ T4319] Cannot create hsr debugfs directory [ 32.985519][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.986556][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.990385][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.998775][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.999781][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.005863][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.043991][ T4323] device hsr_slave_0 entered promiscuous mode [ 33.083316][ T4323] device hsr_slave_1 entered promiscuous mode [ 33.123109][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.124203][ T4323] Cannot create hsr debugfs directory [ 33.194043][ T4332] device hsr_slave_0 entered promiscuous mode [ 33.233341][ T4332] device hsr_slave_1 entered promiscuous mode [ 33.273153][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.274501][ T4332] Cannot create hsr debugfs directory [ 33.357873][ T4325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.394201][ T4325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.446493][ T4325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.504089][ T4325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.555519][ T4323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.584340][ T4323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.627865][ T4323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.665991][ T4323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.717577][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.754253][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.796902][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.845999][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.905618][ T4319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.934500][ T4319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.983985][ T4319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.038204][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.045223][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.046988][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.048464][ T4319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.084762][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.096439][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.101284][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.103914][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.106205][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.108162][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.109218][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.110750][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.112186][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.114061][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.115121][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.116409][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.118079][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.119616][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.120942][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.122196][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.123936][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.125416][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.126930][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.146893][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.148620][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.150107][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.151586][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.152985][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.154084][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.155574][ T4321] Bluetooth: hci3: command 0x0409 tx timeout [ 34.156346][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.156591][ T4321] Bluetooth: hci2: command 0x0409 tx timeout [ 34.157976][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.158594][ T4321] Bluetooth: hci0: command 0x0409 tx timeout [ 34.160015][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.160638][ T4321] Bluetooth: hci4: command 0x0409 tx timeout [ 34.162147][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.163808][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.166757][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.175816][ T4323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.177707][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.181218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.182784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.191015][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.194336][ T4332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.224177][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.243339][ T4336] Bluetooth: hci1: command 0x0409 tx timeout [ 34.269210][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.307979][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.310285][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.311782][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.314295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.315919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.319533][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.344979][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.346558][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.351494][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.352971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.355322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.356556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.361815][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.364043][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.365511][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.366851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.368156][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.377776][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.379969][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.384620][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.385957][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.393406][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.394917][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.396314][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.397352][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.398616][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.400070][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.401472][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.402645][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.410763][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.419458][ T4323] device veth0_vlan entered promiscuous mode [ 34.422404][ T4323] device veth1_vlan entered promiscuous mode [ 34.425545][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.426866][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.428366][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.429937][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.431600][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.434365][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.435899][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.437387][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.438729][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.440132][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.442326][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.447503][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.448883][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.450292][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.451814][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.461279][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.462823][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.476512][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.477918][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.479399][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.480806][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.481878][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.483690][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.485210][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.486649][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.487718][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.489088][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.490819][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.492307][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.494985][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.496505][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.498048][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.499415][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.500852][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.502469][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.504653][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.506017][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.507463][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.508930][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.510348][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.511757][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.519413][ T4323] device veth0_macvtap entered promiscuous mode [ 34.521489][ T4323] device veth1_macvtap entered promiscuous mode [ 34.524922][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.526512][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.527999][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.532378][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.536377][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.537689][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.545438][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.546592][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.548641][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.557905][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.568071][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.569276][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.570885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.584042][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.590060][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.591239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.592759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.604331][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.606298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.607603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.608931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.610075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.611902][ T4323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.613883][ T4323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.615158][ T4323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.616480][ T4323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.620019][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.625364][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.626836][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.628245][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.629375][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.631795][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.636434][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.637940][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.639299][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.640360][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.649916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.660152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.661710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.676240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.677469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.681457][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.687289][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.688474][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.691358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.692931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.694830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.696271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.701033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.702588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.712112][ T4325] device veth0_vlan entered promiscuous mode [ 34.715998][ T4319] device veth0_vlan entered promiscuous mode [ 34.718261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.719661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.721507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.722976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.724721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.726228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.727591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.728899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.730272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.736706][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.737970][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.738122][ T4319] device veth1_vlan entered promiscuous mode [ 34.741435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.742861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.746524][ T4325] device veth1_vlan entered promiscuous mode [ 34.749526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.750897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.752277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.754090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.762298][ T4325] device veth0_macvtap entered promiscuous mode [ 34.765478][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.766929][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.768446][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.769884][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.772810][ T4325] device veth1_macvtap entered promiscuous mode [ 34.777933][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.779237][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.780737][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.791976][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.794607][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.796594][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.799015][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.800597][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.802639][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.808907][ T4319] device veth0_macvtap entered promiscuous mode [ 34.810973][ T4319] device veth1_macvtap entered promiscuous mode [ 34.816203][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.817883][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.819358][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.820957][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.824221][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.826842][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.828255][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.829714][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.831184][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.832663][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.836181][ T4422] loop0: detected capacity change from 0 to 1024 [ 34.837363][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.838967][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.840874][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.842370][ T4422] ======================================================= [ 34.842370][ T4422] WARNING: The mand mount option has been deprecated and [ 34.842370][ T4422] and is ignored by this kernel. Remove the mand [ 34.842370][ T4422] option from the mount to silence this warning. [ 34.842370][ T4422] ======================================================= [ 34.849362][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.850878][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.852792][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.860657][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.862143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.865432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.866908][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.869108][ T4325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.870417][ T4325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.871800][ T4325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.874761][ T4325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.878843][ T4422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.881351][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.882981][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.897548][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.899106][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.901559][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.906555][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.908061][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.916343][ T4422] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.1: lblock 3 mapped to illegal pblock 3 (length 3) [ 34.919029][ T4422] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 34.921514][ T4319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.922904][ T4319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.925509][ T4422] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.925509][ T4422] [ 34.929508][ T4319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.930784][ T4319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.937799][ T4422] EXT4-fs error (device loop0): ext4_ext_remove_space:2930: inode #15: comm syz.0.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 34.940880][ T4320] device veth0_vlan entered promiscuous mode [ 34.941976][ T4422] EXT4-fs error (device loop0) in ext4_setattr:5672: Corrupt filesystem [ 34.949117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.950647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.956651][ T4320] device veth1_vlan entered promiscuous mode [ 34.958630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.960020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.961354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.980221][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 34.984015][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.997567][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.998966][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.000136][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.011282][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.012510][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.032463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.045409][ T4320] device veth0_macvtap entered promiscuous mode [ 35.048115][ T4320] device veth1_macvtap entered promiscuous mode [ 35.052540][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.057522][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.058996][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.060516][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.061949][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.063960][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.066033][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.068569][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.070203][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.071647][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.076206][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.077658][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.079193][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.081167][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.084670][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.086125][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.087408][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.089292][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.111980][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.113895][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.115315][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.116613][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.118110][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.119472][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.120956][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.124500][ T138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.132947][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.134276][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.136305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.150402][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.151570][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.220632][ T4439] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 35.338361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.000839][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.002079][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.005987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.035008][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.036207][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.037860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.040514][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.041681][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.045731][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.110429][ T4332] device veth0_vlan entered promiscuous mode [ 36.112596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.116732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.118348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.119819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.121415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.122849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.127789][ T4332] device veth1_vlan entered promiscuous mode [ 36.136958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.138381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.139747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.141150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.145568][ T4332] device veth0_macvtap entered promiscuous mode [ 36.147845][ T4332] device veth1_macvtap entered promiscuous mode [ 36.159710][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.161336][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.162766][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.165664][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.167423][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.168954][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.170422][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.171923][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.176216][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.177755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.179179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.180515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.181918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.185431][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.186932][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.188439][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.189897][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.191328][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.192838][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.198420][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.200036][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.207622][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.208761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.210254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.232778][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.234255][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 36.234280][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 36.234297][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 36.234315][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 36.235389][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.239075][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.240314][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.284049][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.285280][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.286172][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.286853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.287519][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.308012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.316400][ T4321] Bluetooth: hci1: command 0x041b tx timeout [ 36.328111][ T4452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.603173][ T4463] loop2: detected capacity change from 0 to 512 [ 36.606373][ T4463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.608069][ T4463] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.782282][ T4463] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3: inode has both inline data and extents flags [ 36.786474][ T4463] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 36.788546][ T4463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.861480][ T4463] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 37.334865][ T4456] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 37.335987][ T4456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 37.337670][ T4456] vhci_hcd vhci_hcd.0: Device attached [ 37.546117][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 37.566344][ T4483] loop2: detected capacity change from 0 to 512 [ 37.622224][ T4483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.631203][ T4483] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #2: comm syz.2.14: corrupted inode contents [ 37.641995][ T4483] EXT4-fs error (device loop2): ext4_dirty_inode:6133: inode #2: comm syz.2.14: mark_inode_dirty error [ 37.642153][ T4487] random: crng reseeded on system resumption [ 37.645175][ T4409] usb 11-1: SetAddress Request (2) to port 0 [ 37.646224][ T4409] usb 11-1: new SuperSpeed USB device number 2 using vhci_hcd [ 37.650950][ T4483] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #2: comm syz.2.14: corrupted inode contents [ 37.662879][ T4483] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #2: comm syz.2.14: corrupted inode contents [ 37.695402][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 37.700942][ T4469] vhci_hcd: connection reset by peer [ 37.702613][ T4440] vhci_hcd: stop threads [ 37.703499][ T4440] vhci_hcd: release socket [ 37.704871][ T4440] vhci_hcd: disconnect device [ 37.708927][ T4437] hid (null): unknown global tag 0xd [ 37.711153][ T4437] hid-generic 0000:0002:0005.0001: unknown main item tag 0x6 [ 37.712300][ T4437] hid-generic 0000:0002:0005.0001: unknown main item tag 0xe [ 37.713746][ T4437] hid-generic 0000:0002:0005.0001: unknown global tag 0xd [ 37.714824][ T4437] hid-generic 0000:0002:0005.0001: item 0 1 1 13 parsing failed [ 37.720951][ T4437] hid-generic: probe of 0000:0002:0005.0001 failed with error -22 [ 37.811025][ T4494] capability: warning: `syz.3.17' uses deprecated v2 capabilities in a way that may be insecure [ 38.091189][ T4499] netlink: 'syz.3.18': attribute type 30 has an invalid length. [ 38.095493][ T4499] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.097100][ T4499] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.098402][ T4499] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.099694][ T4499] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.153924][ T4499] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.155474][ T4499] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.156846][ T4499] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.158252][ T4499] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 38.296389][ T4503] loop1: detected capacity change from 0 to 1024 [ 38.313836][ T4321] Bluetooth: hci2: command 0x040f tx timeout [ 38.313858][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 38.314811][ T4321] Bluetooth: hci4: command 0x040f tx timeout [ 38.315693][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 38.335610][ T4499] Zero length message leads to an empty skb [ 38.344805][ T4503] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.350174][ T4503] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.20: lblock 3 mapped to illegal pblock 3 (length 3) [ 38.352506][ T4503] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 38.355239][ T4503] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.355239][ T4503] [ 38.360704][ T4503] EXT4-fs error (device loop1): ext4_ext_remove_space:2930: inode #15: comm syz.1.20: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 38.366038][ T4503] EXT4-fs error (device loop1) in ext4_setattr:5672: Corrupt filesystem [ 38.384051][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 38.403685][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 38.431457][ T4510] loop3: detected capacity change from 0 to 512 [ 38.459525][ T4512] loop4: detected capacity change from 0 to 1024 [ 38.465949][ T4510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.479305][ T4475] Set syz1 is full, maxelem 65536 reached [ 38.487510][ T4512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.511424][ T27] audit: type=1326 audit(38.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e95b9e8 code=0x7ffc0000 [ 38.522991][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 38.528309][ T27] audit: type=1326 audit(38.520:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=221 compat=0 ip=0xffff8e95b9e8 code=0x7ffc0000 [ 38.531386][ T27] audit: type=1326 audit(38.520:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e95b9e8 code=0x7ffc0000 [ 38.541869][ T27] audit: type=1326 audit(38.520:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.1.24" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e95b9e8 code=0x7ffc0000 [ 38.563943][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 38.578252][ T4520] loop4: detected capacity change from 0 to 512 [ 38.586244][ T4520] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 38.596118][ T4520] EXT2-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 38.597671][ T4520] EXT2-fs (loop4): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 38.604613][ T4520] syz.4.25: attempt to access beyond end of device [ 38.604613][ T4520] loop4: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 38.707479][ T4535] loop1: detected capacity change from 0 to 1024 [ 38.719195][ T4538] random: crng reseeded on system resumption [ 38.730747][ T4538] Restarting kernel threads ... [ 38.731012][ T4535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.731523][ T4538] done. [ 38.750278][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 38.849603][ T27] audit: type=1326 audit(38.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 38.852607][ T27] audit: type=1326 audit(38.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 38.856036][ T27] audit: type=1326 audit(38.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 38.859146][ T27] audit: type=1326 audit(38.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 38.862826][ T27] audit: type=1326 audit(38.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 38.874566][ T27] audit: type=1326 audit(38.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 38.897361][ T4556] loop3: detected capacity change from 0 to 512 [ 38.903464][ T4556] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 38.912145][ T4556] EXT2-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 38.913804][ T4556] EXT2-fs (loop3): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 38.927313][ T4556] syz.3.39: attempt to access beyond end of device [ 38.927313][ T4556] loop3: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 39.000589][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.001948][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.089267][ T4569] loop0: detected capacity change from 0 to 1024 [ 39.105282][ T4569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.121939][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 39.398244][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.412955][ T4545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.720052][ T4545] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.721568][ T4545] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.722925][ T4545] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.726744][ T4545] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.894536][ T4374] Process accounting resumed [ 40.020030][ T4593] loop0: detected capacity change from 0 to 512 [ 40.022737][ T4593] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 40.046343][ T4593] EXT2-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 40.047748][ T4593] EXT2-fs (loop0): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 40.054192][ T4593] syz.0.52: attempt to access beyond end of device [ 40.054192][ T4593] loop0: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 40.089097][ T4599] loop4: detected capacity change from 0 to 1024 [ 40.115331][ T4599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.116188][ T4606] loop9: detected capacity change from 0 to 7 [ 40.119243][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.120658][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.129629][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.131016][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.134698][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.136037][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.145642][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.147048][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.159548][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.161051][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.164430][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.165837][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.173302][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.174692][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.176127][ T4606] ldm_validate_partition_table(): Disk read failed. [ 40.178463][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 40.201258][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.202806][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.212822][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.214410][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.225700][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.227124][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.237191][ T4606] Dev loop9: unable to read RDB block 0 [ 40.239605][ T4606] loop9: unable to read partition table [ 40.240740][ T4606] loop9: partition table beyond EOD, truncated [ 40.241753][ T4606] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 40.241753][ T4606] ) failed (rc=-5) [ 40.284404][ T4620] loop2: detected capacity change from 0 to 512 [ 40.289974][ T4620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.310596][ T4620] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.329474][ T4620] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.60: bg 0: block 248: padding at end of block bitmap is not set [ 40.365622][ T4620] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.60: Failed to acquire dquot type 1 [ 40.393559][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 40.394529][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 40.395177][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 40.395436][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 40.437594][ T4633] loop3: detected capacity change from 0 to 512 [ 40.454835][ T4620] EXT4-fs (loop2): 1 truncate cleaned up [ 40.458176][ T4633] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 40.466556][ T4620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.473586][ T4321] Bluetooth: hci1: command 0x0419 tx timeout [ 40.482541][ T4633] EXT2-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 40.484238][ T4633] EXT2-fs (loop3): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 40.501723][ T4633] syz.3.68: attempt to access beyond end of device [ 40.501723][ T4633] loop3: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 40.504142][ T4639] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 40.598650][ T4440] Bluetooth: hci5: Frame reassembly failed (-84) [ 40.742390][ T4654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 40.921371][ T4637] Set syz1 is full, maxelem 65536 reached [ 41.040877][ T4663] netlink: 7 bytes leftover after parsing attributes in process `syz.0.82'. [ 41.114977][ T4667] loop4: detected capacity change from 0 to 512 [ 41.123587][ T4667] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 41.130642][ T4667] EXT2-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 41.132099][ T4667] EXT2-fs (loop4): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 41.138907][ T4667] syz.4.83: attempt to access beyond end of device [ 41.138907][ T4667] loop4: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 41.246152][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 41.893923][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 42.019496][ T4700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 42.056957][ T4702] loop0: detected capacity change from 0 to 512 [ 42.063318][ T4702] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 42.074072][ T4702] EXT2-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 42.075438][ T4702] EXT2-fs (loop0): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 42.075597][ T4704] netlink: 'syz.4.98': attribute type 3 has an invalid length. [ 42.078357][ T4704] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.98'. [ 42.094789][ T4702] syz.0.97: attempt to access beyond end of device [ 42.094789][ T4702] loop0: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 42.135976][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 42.232964][ T4712] loop3: detected capacity change from 0 to 512 [ 42.266194][ T4712] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.272666][ T4712] netlink: 7 bytes leftover after parsing attributes in process `syz.3.102'. [ 42.324166][ T4712] netlink: 7 bytes leftover after parsing attributes in process `syz.3.102'. [ 42.329133][ T4708] Set syz1 is full, maxelem 65536 reached [ 42.354713][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 42.369638][ T4719] syz.4.103 uses obsolete (PF_INET,SOCK_PACKET) [ 42.539655][ T4731] device team_slave_0 entered promiscuous mode [ 42.540729][ T4731] device team_slave_1 entered promiscuous mode [ 42.541738][ T4731] device vlan2 entered promiscuous mode [ 42.542755][ T4731] device team0 entered promiscuous mode [ 42.600544][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.114'. [ 42.633171][ T4331] Bluetooth: hci5: command 0x1003 tx timeout [ 42.633283][ T4321] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 42.668602][ T4746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.116'. [ 42.715525][ T4409] usb 11-1: device descriptor read/8, error -110 [ 42.933674][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 42.996250][ T4791] tipc: Started in network mode [ 42.997155][ T4791] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 43.004569][ T4791] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 43.006380][ T4791] tipc: Enabled bearer , priority 10 [ 43.016473][ T4795] loop4: detected capacity change from 0 to 512 [ 43.099662][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 43.105324][ T4806] netlink: 76 bytes leftover after parsing attributes in process `syz.1.147'. [ 43.105449][ T4809] bond0 speed is unknown, defaulting to 1000 [ 43.109648][ T4809] bond0 speed is unknown, defaulting to 1000 [ 43.111503][ T4809] bond0 speed is unknown, defaulting to 1000 [ 43.136008][ T4409] usb usb11-port1: attempt power cycle [ 43.236897][ T4809] infiniband syz0: set down [ 43.241372][ T4809] infiniband syz0: added bond0 [ 43.249610][ T4367] bond0 speed is unknown, defaulting to 1000 [ 43.291179][ T4809] RDS/IB: syz0: added [ 43.292054][ T4809] smc: adding ib device syz0 with port count 1 [ 43.316677][ T4809] smc: ib device syz0 port 1 has pnetid [ 43.327472][ T4809] bond0 speed is unknown, defaulting to 1000 [ 43.335000][ T4389] bond0 speed is unknown, defaulting to 1000 [ 43.354278][ T4809] bond0 speed is unknown, defaulting to 1000 [ 43.421912][ T4809] bond0 speed is unknown, defaulting to 1000 [ 43.465276][ T4809] bond0 speed is unknown, defaulting to 1000 [ 43.491282][ T4809] bond0 speed is unknown, defaulting to 1000 [ 43.666392][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 43.666405][ T27] audit: type=1326 audit(43.660:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 43.670831][ T27] audit: type=1326 audit(43.660:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=104 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 43.682071][ T27] audit: type=1326 audit(43.660:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 43.688490][ T27] audit: type=1326 audit(43.660:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 43.696439][ T27] audit: type=1326 audit(43.660:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 43.702892][ T27] audit: type=1326 audit(43.660:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 43.727059][ T27] audit: type=1326 audit(43.720:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 43.730665][ T27] audit: type=1326 audit(43.720:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4833 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b5b9e8 code=0x7ffc0000 [ 43.774524][ T4409] usb usb11-port1: unable to enumerate USB device [ 43.907653][ T27] audit: type=1326 audit(43.900:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5b9e8 code=0x7ffc0000 [ 43.911466][ T27] audit: type=1326 audit(43.900:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9d5b9e8 code=0x7ffc0000 [ 43.921355][ T4848] loop0: detected capacity change from 0 to 1024 [ 43.949352][ T4848] EXT4-fs: Ignoring removed orlov option [ 43.953375][ T4797] Set syz1 is full, maxelem 65536 reached [ 43.956764][ T4848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.123505][ T4409] tipc: Node number set to 1 [ 44.635969][ T4888] loop2: detected capacity change from 0 to 1024 [ 44.660891][ T4890] loop3: detected capacity change from 0 to 764 [ 44.671780][ T4890] isofs: isofs_export_get_parent(): child directory not normalized! [ 44.690190][ T4888] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.767869][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 44.776032][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 44.909674][ T4911] loop2: detected capacity change from 0 to 512 [ 44.914137][ T4911] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 44.920825][ T4911] EXT2-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 44.922261][ T4911] EXT2-fs (loop2): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 44.930209][ T4911] syz.2.190: attempt to access beyond end of device [ 44.930209][ T4911] loop2: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 45.082052][ T4927] 9pnet: Could not find request transport: f [ 45.250533][ T4945] loop0: detected capacity change from 0 to 512 [ 45.263180][ T4945] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 45.286012][ T4945] EXT2-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 45.287559][ T4945] EXT2-fs (loop0): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 45.628931][ T4960] loop0: detected capacity change from 0 to 1024 [ 45.656263][ T4960] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.212: Failed to acquire dquot type 0 [ 45.658608][ T4960] EXT4-fs error (device loop0): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 45.661967][ T4960] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #13: comm syz.0.212: corrupted inode contents [ 45.673724][ T4960] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #13: comm syz.0.212: mark_inode_dirty error [ 45.677930][ T4960] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #13: comm syz.0.212: corrupted inode contents [ 45.681044][ T4960] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.212: mark_inode_dirty error [ 45.686289][ T4960] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #13: comm syz.0.212: corrupted inode contents [ 45.690135][ T4970] loop1: detected capacity change from 0 to 128 [ 45.700268][ T4960] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 45.707766][ T4960] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #13: comm syz.0.212: corrupted inode contents [ 45.721436][ T4960] EXT4-fs error (device loop0): ext4_truncate:4318: inode #13: comm syz.0.212: mark_inode_dirty error [ 45.727596][ T4972] loop2: detected capacity change from 0 to 512 [ 45.732012][ T4960] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 45.746514][ T4972] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 45.756591][ T4960] EXT4-fs (loop0): 1 truncate cleaned up [ 45.765160][ T4960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.786350][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 46.158811][ T4993] loop2: detected capacity change from 0 to 1024 [ 46.203760][ T4993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.216652][ T4900] Set syz1 is full, maxelem 65536 reached [ 46.226526][ T4996] mmap: syz.1.223 (4996) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.235110][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 46.269333][ T4998] loop2: detected capacity change from 0 to 512 [ 46.278905][ T4998] EXT4-fs: inline encryption not supported [ 46.294907][ T4998] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 46.308017][ T4998] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.227: invalid indirect mapped block 2683928664 (level 1) [ 46.326087][ T4998] EXT4-fs (loop2): 1 truncate cleaned up [ 46.327038][ T4998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.366653][ T4998] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.227: Invalid block bitmap block 3 in block_group 0 [ 46.394553][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 46.625770][ T5013] device syzkaller0 entered promiscuous mode [ 46.693677][ T5020] loop1: detected capacity change from 0 to 1024 [ 46.705163][ T5020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.718603][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 46.873895][ T5041] loop1: detected capacity change from 0 to 512 [ 46.876668][ T5041] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.878111][ T5041] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.246: Failed to acquire dquot type 1 [ 46.881379][ T5041] EXT4-fs (loop1): 1 truncate cleaned up [ 46.882683][ T5041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.886922][ T5041] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 46.889021][ T5041] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8 [ 46.930388][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 47.073882][ T5050] loop1: detected capacity change from 0 to 1024 [ 47.106184][ T5050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.132769][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 48.023123][ T5055] Set syz1 is full, maxelem 65536 reached [ 48.108615][ T5064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.110230][ T5064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.475994][ T5076] __nla_validate_parse: 15 callbacks suppressed [ 50.476005][ T5076] netlink: 32 bytes leftover after parsing attributes in process `syz.1.259'. [ 57.317011][ T5080] loop4: detected capacity change from 0 to 1024 [ 57.334599][ T5080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 57.339761][ T5080] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.260: lblock 3 mapped to illegal pblock 3 (length 3) [ 57.342168][ T5080] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 57.346962][ T5051] bond0 speed is unknown, defaulting to 1000 [ 57.352129][ T5080] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.352129][ T5080] [ 57.392984][ T5086] loop1: detected capacity change from 0 to 512 [ 57.417148][ T27] kauditd_printk_skb: 240 callbacks suppressed [ 57.417156][ T27] audit: type=1326 audit(57.410:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.426308][ T5086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.436260][ T4440] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 57.436928][ T27] audit: type=1326 audit(57.430:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.439156][ T4440] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 57.443460][ T27] audit: type=1326 audit(57.430:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.446482][ T4440] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.446482][ T4440] [ 57.449053][ T27] audit: type=1326 audit(57.440:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.452159][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 57.474574][ T27] audit: type=1326 audit(57.440:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.477803][ T27] audit: type=1326 audit(57.440:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.481119][ T27] audit: type=1326 audit(57.450:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.484706][ T27] audit: type=1326 audit(57.450:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.487929][ T27] audit: type=1326 audit(57.450:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.491490][ T27] audit: type=1326 audit(57.450:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5087 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 57.531946][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 57.603156][ T5108] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 57.684592][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 57.720037][ T5121] loop0: detected capacity change from 0 to 1024 [ 57.748942][ T5121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 57.758037][ T5121] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.275: lblock 3 mapped to illegal pblock 3 (length 3) [ 57.760538][ T5121] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 57.762471][ T5121] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.762471][ T5121] [ 57.772167][ T5123] loop4: detected capacity change from 0 to 1024 [ 57.782194][ T5123] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.276: Failed to acquire dquot type 0 [ 57.787885][ T9] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 57.790463][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 57.792398][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.792398][ T9] [ 57.792617][ T5123] EXT4-fs error (device loop4): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 57.796751][ T5123] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #13: comm syz.4.276: corrupted inode contents [ 57.813175][ T5123] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #13: comm syz.4.276: mark_inode_dirty error [ 57.823217][ T5123] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #13: comm syz.4.276: corrupted inode contents [ 57.826157][ T5123] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.276: mark_inode_dirty error [ 57.828737][ T5123] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #13: comm syz.4.276: corrupted inode contents [ 57.836060][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 57.846757][ T5123] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 57.853983][ T5123] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #13: comm syz.4.276: corrupted inode contents [ 57.862228][ T5123] EXT4-fs error (device loop4): ext4_truncate:4318: inode #13: comm syz.4.276: mark_inode_dirty error [ 57.869857][ T5123] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 57.886151][ T5123] EXT4-fs (loop4): 1 truncate cleaned up [ 57.887170][ T5123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.917245][ T5128] bond0 speed is unknown, defaulting to 1000 [ 57.966197][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 58.207668][ T5145] loop2: detected capacity change from 0 to 256 [ 58.278410][ T5145] FAT-fs (loop2): Directory bread(block 64) failed [ 58.279619][ T5145] FAT-fs (loop2): Directory bread(block 65) failed [ 58.280879][ T5145] FAT-fs (loop2): Directory bread(block 66) failed [ 58.282055][ T5145] FAT-fs (loop2): Directory bread(block 67) failed [ 58.283336][ T5145] FAT-fs (loop2): Directory bread(block 68) failed [ 58.284471][ T5145] FAT-fs (loop2): Directory bread(block 69) failed [ 58.285726][ T5145] FAT-fs (loop2): Directory bread(block 70) failed [ 58.286779][ T5145] FAT-fs (loop2): Directory bread(block 71) failed [ 58.287975][ T5145] FAT-fs (loop2): Directory bread(block 72) failed [ 58.289154][ T5145] FAT-fs (loop2): Directory bread(block 73) failed [ 58.461648][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 58.662328][ T5164] loop4: detected capacity change from 0 to 1024 [ 58.669031][ T5164] EXT4-fs: Ignoring removed orlov option [ 58.691308][ T5164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.754025][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 58.819196][ T5177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.298'. [ 58.852108][ T5179] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 58.853182][ T5179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.860611][ T5179] vhci_hcd vhci_hcd.0: Device attached [ 58.895226][ T5179] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 58.896267][ T5179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.897471][ T5179] vhci_hcd vhci_hcd.0: Device attached [ 58.913172][ T5179] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 58.914255][ T5179] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 58.919116][ T5179] vhci_hcd vhci_hcd.0: Device attached [ 58.942404][ T5179] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 58.943500][ T5179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.945243][ T5179] vhci_hcd vhci_hcd.0: Device attached [ 58.962044][ T5179] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 58.963014][ T5179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.965351][ T5179] vhci_hcd vhci_hcd.0: Device attached [ 58.966960][ T5179] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 58.985394][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 58.999376][ T5179] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15) [ 59.000409][ T5179] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.004102][ T5179] vhci_hcd vhci_hcd.0: Device attached [ 59.007646][ T5200] vhci_hcd: connection closed [ 59.007989][ T5197] vhci_hcd: connection closed [ 59.008059][ T5190] vhci_hcd: connection closed [ 59.010036][ T5184] vhci_hcd: connection closed [ 59.010061][ T5193] vhci_hcd: connection closed [ 59.011468][ T4423] vhci_hcd: stop threads [ 59.011486][ T4423] vhci_hcd: release socket [ 59.011502][ T4423] vhci_hcd: disconnect device [ 59.012325][ T5182] vhci_hcd: connection closed [ 59.017616][ T5089] Set syz1 is full, maxelem 65536 reached [ 59.019366][ T4423] vhci_hcd: stop threads [ 59.020121][ T4423] vhci_hcd: release socket [ 59.020889][ T4423] vhci_hcd: disconnect device [ 59.021723][ T4423] vhci_hcd: stop threads [ 59.022397][ T4423] vhci_hcd: release socket [ 59.028455][ T4423] vhci_hcd: disconnect device [ 59.031571][ T4423] vhci_hcd: stop threads [ 59.032237][ T4423] vhci_hcd: release socket [ 59.039969][ T4423] vhci_hcd: disconnect device [ 59.045988][ T4423] vhci_hcd: stop threads [ 59.046647][ T4423] vhci_hcd: release socket [ 59.053282][ T4423] vhci_hcd: disconnect device [ 59.056073][ T4423] vhci_hcd: stop threads [ 59.056702][ T4423] vhci_hcd: release socket [ 59.063436][ T4374] vhci_hcd: vhci_device speed not set [ 59.071099][ T4423] vhci_hcd: disconnect device [ 59.091601][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.092744][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.094609][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.095777][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.096973][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.097971][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.099184][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.100230][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.101307][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.102451][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.107044][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.108224][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.109342][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.110504][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.112648][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.114038][ T14] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 59.117156][ T14] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 59.149480][ T5215] process 'syz.3.310' launched '/dev/fd/4' with NULL argv: empty string added [ 59.198141][ T5222] netlink: 'syz.1.313': attribute type 13 has an invalid length. [ 59.202209][ T5219] fido_id[5219]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.220686][ T5222] gretap0: refused to change device tx_queue_len [ 59.221873][ T5222] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 59.275913][ T5232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.317'. [ 59.282972][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 59.316224][ T5232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.317'. [ 59.376380][ T5240] loop3: detected capacity change from 0 to 512 [ 59.406236][ T5232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.317'. [ 59.406701][ T5240] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.421345][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 59.473766][ T5245] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 59.516398][ T5249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.322'. [ 59.540559][ T5251] loop4: detected capacity change from 0 to 1024 [ 59.542104][ T5251] EXT4-fs: Ignoring removed orlov option [ 59.552917][ T5251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.611594][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 59.726865][ T5264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 59.876736][ T5280] device ip6gre1 entered promiscuous mode [ 60.218281][ T5284] loop1: detected capacity change from 0 to 1024 [ 60.220079][ T5284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.240366][ T5284] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 60.648630][ T5312] loop4: detected capacity change from 0 to 2048 [ 60.669146][ T5312] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.349: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 60.672038][ T5312] EXT4-fs (loop4): get root inode failed [ 60.672914][ T5312] EXT4-fs (loop4): mount failed [ 60.735062][ T5320] loop3: detected capacity change from 0 to 4096 [ 60.743575][ T5320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.759644][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 61.020799][ T5340] netlink: 'syz.0.360': attribute type 10 has an invalid length. [ 61.022178][ T5340] device dummy0 entered promiscuous mode [ 61.024823][ T5340] bridge0: port 3(dummy0) entered blocking state [ 61.025901][ T5340] bridge0: port 3(dummy0) entered disabled state [ 61.027496][ T5340] bridge0: port 3(dummy0) entered blocking state [ 61.028546][ T5340] bridge0: port 3(dummy0) entered forwarding state [ 61.042913][ T112] cfg80211: failed to load regulatory.db [ 61.058597][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 61.332980][ T5359] loop1: detected capacity change from 0 to 1024 [ 61.339388][ T5359] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.341814][ T5359] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.345717][ T5359] JBD2: no valid journal superblock found [ 61.346863][ T5359] EXT4-fs (loop1): error loading journal [ 61.361974][ T4332] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 61.368143][ T4332] CPU: 0 PID: 4332 Comm: syz-executor Not tainted syzkaller #0 [ 61.369211][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 61.370570][ T4332] Call trace: [ 61.371042][ T4332] dump_backtrace+0x1c8/0x1f4 [ 61.371741][ T4332] show_stack+0x2c/0x3c [ 61.372379][ T4332] __dump_stack+0x30/0x40 [ 61.373016][ T4332] dump_stack_lvl+0xf8/0x160 [ 61.373646][ T4332] dump_stack+0x1c/0x5c [ 61.374269][ T4332] dump_header+0xc0/0x724 [ 61.374898][ T4332] oom_kill_process+0x360/0x674 [ 61.375601][ T4332] out_of_memory+0xc5c/0xf68 [ 61.376248][ T4332] mem_cgroup_out_of_memory+0x210/0x2bc [ 61.377044][ T4332] try_charge_memcg+0xac4/0x1448 [ 61.377683][ T4332] charge_memcg+0xa4/0x1f4 [ 61.378364][ T4332] mem_cgroup_swapin_charge_folio+0x270/0x3d8 [ 61.379234][ T4332] __read_swap_cache_async+0x3ac/0x6c0 [ 61.379969][ T4332] swapin_readahead+0x59c/0xa7c [ 61.380676][ T4332] do_swap_page+0x2c8/0x231c [ 61.381353][ T4332] handle_mm_fault+0xffc/0x2ff0 [ 61.382086][ T4332] do_page_fault+0x310/0x99c [ 61.382798][ T4332] do_translation_fault+0x94/0xc8 [ 61.383549][ T4332] do_mem_abort+0x70/0x194 [ 61.384169][ T4332] el0_da+0x70/0x154 [ 61.384766][ T4332] el0t_64_sync_handler+0x90/0xf0 [ 61.385441][ T4332] el0t_64_sync+0x18c/0x190 [ 61.431329][ T4332] memory: usage 307200kB, limit 307200kB, failcnt 137 [ 61.432413][ T4332] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 61.434093][ T4332] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 61.435304][ T4332] Memory cgroup stats for /syz4: [ 61.435542][ T4332] anon 0 [ 61.435542][ T4332] file 12288 [ 61.435542][ T4332] kernel 314560512 [ 61.435542][ T4332] kernel_stack 98304 [ 61.435542][ T4332] pagetables 126976 [ 61.435542][ T4332] sec_pagetables 0 [ 61.435542][ T4332] percpu 5920 [ 61.435542][ T4332] sock 0 [ 61.435542][ T4332] vmalloc 0 [ 61.435542][ T4332] shmem 0 [ 61.435542][ T4332] zswap 0 [ 61.435542][ T4332] zswapped 0 [ 61.435542][ T4332] file_mapped 12288 [ 61.435542][ T4332] file_dirty 12288 [ 61.435542][ T4332] file_writeback 0 [ 61.435542][ T4332] swapcached 270336 [ 61.435542][ T4332] anon_thp 0 [ 61.435542][ T4332] file_thp 0 [ 61.435542][ T4332] shmem_thp 0 [ 61.435542][ T4332] inactive_anon 0 [ 61.435542][ T4332] active_anon 0 [ 61.435542][ T4332] inactive_file 0 [ 61.435542][ T4332] active_file 12288 [ 61.435542][ T4332] unevictable 0 [ 61.435542][ T4332] slab_reclaimable 28168 [ 61.435542][ T4332] slab_unreclaimable 989288 [ 61.435542][ T4332] slab 1017456 [ 61.450752][ T4332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.349,pid=5310,uid=0 [ 61.453994][ T4332] Memory cgroup out of memory: Killed process 5310 (syz.4.349) total-vm:102044kB, anon-rss:1084kB, file-rss:21832kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 61.512068][ T5365] loop1: detected capacity change from 0 to 512 [ 61.553137][ T5365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.247296][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 62.356589][ T5377] loop1: detected capacity change from 0 to 1024 [ 62.362775][ T5377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.368106][ T5231] Set syz1 is full, maxelem 65536 reached [ 62.416077][ T5377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 62.581258][ T5396] loop0: detected capacity change from 0 to 1764 [ 62.638086][ T5405] loop4: detected capacity change from 0 to 2048 [ 62.638732][ T5401] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 62.686491][ T5405] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.704399][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 62.776222][ T5416] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.388: bg 0: block 345: padding at end of block bitmap is not set [ 62.781026][ T5416] EXT4-fs (loop4): Remounting filesystem read-only [ 62.882755][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 62.911393][ T5420] __nla_validate_parse: 11 callbacks suppressed [ 62.911410][ T5420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 63.171835][ T5451] loop2: detected capacity change from 0 to 128 [ 63.197818][ T5451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 63.210825][ T5455] loop3: detected capacity change from 0 to 128 [ 63.349209][ T27] kauditd_printk_skb: 123 callbacks suppressed [ 63.349220][ T27] audit: type=1326 audit(63.340:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.358509][ T27] audit: type=1326 audit(63.340:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.359536][ T5469] loop9: detected capacity change from 0 to 7 [ 63.367632][ C0] blk_print_req_error: 9 callbacks suppressed [ 63.367640][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.369786][ C0] buffer_io_error: 9 callbacks suppressed [ 63.369796][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.371259][ T27] audit: type=1326 audit(63.340:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.371746][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.376378][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.378603][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.380036][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.383879][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.385230][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.386327][ T27] audit: type=1326 audit(63.340:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.390054][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.390069][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.394954][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.396349][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.397967][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.399449][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.400748][ T5469] ldm_validate_partition_table(): Disk read failed. [ 63.402274][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.403717][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.404293][ T27] audit: type=1326 audit(63.340:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.406108][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.409806][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.414528][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 63.415988][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.418097][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 63.419743][ T27] audit: type=1326 audit(63.340:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.422166][ T5469] Dev loop9: unable to read RDB block 0 [ 63.433325][ T5469] loop9: unable to read partition table [ 63.434377][ T5469] loop9: partition table beyond EOD, truncated [ 63.435510][ T5469] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 63.435510][ T5469] ) failed (rc=-5) [ 63.436699][ T27] audit: type=1326 audit(63.340:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.457120][ T27] audit: type=1326 audit(63.340:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.468352][ T27] audit: type=1326 audit(63.350:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.477471][ T27] audit: type=1326 audit(63.350:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d5b9e8 code=0x7ffc0000 [ 63.571338][ T5492] hub 2-0:1.0: USB hub found [ 63.580856][ T5492] hub 2-0:1.0: 8 ports detected [ 63.600441][ T5494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.428'. [ 63.891700][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.893085][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.895914][ T5523] 9p: Unknown access argument : -22 [ 63.922224][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.923999][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.925217][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.926511][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.927781][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.929054][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.930301][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.931515][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.932732][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.934592][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.935742][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.936964][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.938232][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.939416][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.940555][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.941773][ T4367] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 63.960667][ T4367] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 63.998581][ T5529] capability: warning: `syz.0.441' uses 32-bit capabilities (legacy support in use) [ 64.006370][ T5527] fido_id[5527]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.403559][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.419647][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.476045][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.505743][ T5546] loop3: detected capacity change from 0 to 512 [ 64.520556][ T5546] [ 64.520949][ T5546] ====================================================== [ 64.522089][ T5546] WARNING: possible circular locking dependency detected [ 64.523170][ T5546] syzkaller #0 Not tainted [ 64.523871][ T5546] ------------------------------------------------------ [ 64.524924][ T5546] syz.3.450/5546 is trying to acquire lock: [ 64.525767][ T5546] ffff0000c3648b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x188/0x284c [ 64.527301][ T5546] [ 64.527301][ T5546] but task is already holding lock: [ 64.528376][ T5546] ffff0000c364a650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 64.529770][ T5546] [ 64.529770][ T5546] which lock already depends on the new lock. [ 64.529770][ T5546] [ 64.531266][ T5546] [ 64.531266][ T5546] the existing dependency chain (in reverse order) is: [ 64.532554][ T5546] [ 64.532554][ T5546] -> #1 (sb_internal){.+.+}-{0:0}: [ 64.533647][ T5546] percpu_down_read+0x70/0x2a8 [ 64.534409][ T5546] ext4_evict_inode+0x3dc/0x1270 [ 64.535213][ T5546] evict+0x3c8/0x810 [ 64.535876][ T5546] iput+0x764/0x7f4 [ 64.536494][ T5546] ext4_ext_migrate+0x9dc/0xbfc [ 64.537284][ T5546] ext4_ioctl+0x1a38/0x4198 [ 64.538004][ T5546] __arm64_sys_ioctl+0x14c/0x1c8 [ 64.538780][ T5546] invoke_syscall+0x98/0x2bc [ 64.539554][ T5546] el0_svc_common+0x138/0x258 [ 64.540323][ T5546] do_el0_svc+0x58/0x13c [ 64.541067][ T5546] el0_svc+0x58/0x138 [ 64.541772][ T5546] el0t_64_sync_handler+0x84/0xf0 [ 64.542596][ T5546] el0t_64_sync+0x18c/0x190 [ 64.543310][ T5546] [ 64.543310][ T5546] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 64.544571][ T5546] __lock_acquire+0x293c/0x6544 [ 64.545375][ T5546] lock_acquire+0x20c/0x644 [ 64.546081][ T5546] percpu_down_read+0x70/0x2a8 [ 64.546835][ T5546] ext4_writepages+0x188/0x284c [ 64.547631][ T5546] do_writepages+0x2c0/0x4fc [ 64.548369][ T5546] __writeback_single_inode+0x164/0x157c [ 64.549288][ T5546] writeback_single_inode+0x1c0/0x720 [ 64.550169][ T5546] write_inode_now+0x144/0x1b0 [ 64.551028][ T5546] iput+0x5cc/0x7f4 [ 64.551704][ T5546] ext4_xattr_block_set+0x17a4/0x2810 [ 64.552545][ T5546] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 64.553428][ T5546] __ext4_expand_extra_isize+0x298/0x358 [ 64.554320][ T5546] __ext4_mark_inode_dirty+0x3e4/0x790 [ 64.555140][ T5546] ext4_evict_inode+0xb58/0x1270 [ 64.555928][ T5546] evict+0x3c8/0x810 [ 64.556540][ T5546] iput+0x764/0x7f4 [ 64.557148][ T5546] ext4_process_orphan+0x240/0x2b4 [ 64.557986][ T5546] ext4_orphan_cleanup+0x908/0x104c [ 64.558825][ T5546] ext4_fill_super+0x6440/0x68a8 [ 64.559606][ T5546] get_tree_bdev+0x358/0x544 [ 64.560388][ T5546] ext4_get_tree+0x28/0x38 [ 64.561122][ T5546] vfs_get_tree+0x90/0x274 [ 64.561852][ T5546] do_new_mount+0x228/0x810 [ 64.562579][ T5546] path_mount+0x5b4/0xe78 [ 64.563282][ T5546] __arm64_sys_mount+0x49c/0x584 [ 64.564040][ T5546] invoke_syscall+0x98/0x2bc [ 64.564806][ T5546] el0_svc_common+0x138/0x258 [ 64.565521][ T5546] do_el0_svc+0x58/0x13c [ 64.566237][ T5546] el0_svc+0x58/0x138 [ 64.566880][ T5546] el0t_64_sync_handler+0x84/0xf0 [ 64.567684][ T5546] el0t_64_sync+0x18c/0x190 [ 64.568436][ T5546] [ 64.568436][ T5546] other info that might help us debug this: [ 64.568436][ T5546] [ 64.569798][ T5546] Possible unsafe locking scenario: [ 64.569798][ T5546] [ 64.570833][ T5546] CPU0 CPU1 [ 64.571559][ T5546] ---- ---- [ 64.572309][ T5546] lock(sb_internal); [ 64.572915][ T5546] lock(&sbi->s_writepages_rwsem); [ 64.574057][ T5546] lock(sb_internal); [ 64.575084][ T5546] lock(&sbi->s_writepages_rwsem); [ 64.575874][ T5546] [ 64.575874][ T5546] *** DEADLOCK *** [ 64.575874][ T5546] [ 64.576999][ T5546] 3 locks held by syz.3.450/5546: [ 64.577735][ T5546] #0: ffff0000c364a0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 64.579304][ T5546] #1: ffff0000c364a650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 64.580741][ T5546] #2: ffff0000f61d00c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 64.582257][ T5546] [ 64.582257][ T5546] stack backtrace: [ 64.583127][ T5546] CPU: 0 PID: 5546 Comm: syz.3.450 Not tainted syzkaller #0 [ 64.584398][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 64.586099][ T5546] Call trace: [ 64.586628][ T5546] dump_backtrace+0x1c8/0x1f4 [ 64.587402][ T5546] show_stack+0x2c/0x3c [ 64.588087][ T5546] __dump_stack+0x30/0x40 [ 64.588778][ T5546] dump_stack_lvl+0xf8/0x160 [ 64.589483][ T5546] dump_stack+0x1c/0x5c [ 64.590110][ T5546] print_circular_bug+0x148/0x1b0 [ 64.590896][ T5546] check_noncircular+0x240/0x2d4 [ 64.591623][ T5546] __lock_acquire+0x293c/0x6544 [ 64.592356][ T5546] lock_acquire+0x20c/0x644 [ 64.593033][ T5546] percpu_down_read+0x70/0x2a8 [ 64.593782][ T5546] ext4_writepages+0x188/0x284c [ 64.594529][ T5546] do_writepages+0x2c0/0x4fc [ 64.595253][ T5546] __writeback_single_inode+0x164/0x157c [ 64.596076][ T5546] writeback_single_inode+0x1c0/0x720 [ 64.596908][ T5546] write_inode_now+0x144/0x1b0 [ 64.597576][ T5546] iput+0x5cc/0x7f4 [ 64.598133][ T5546] ext4_xattr_block_set+0x17a4/0x2810 [ 64.598908][ T5546] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 64.599794][ T5546] __ext4_expand_extra_isize+0x298/0x358 [ 64.600681][ T5546] __ext4_mark_inode_dirty+0x3e4/0x790 [ 64.601489][ T5546] ext4_evict_inode+0xb58/0x1270 [ 64.602217][ T5546] evict+0x3c8/0x810 [ 64.602798][ T5546] iput+0x764/0x7f4 [ 64.603387][ T5546] ext4_process_orphan+0x240/0x2b4 [ 64.604125][ T5546] ext4_orphan_cleanup+0x908/0x104c [ 64.604884][ T5546] ext4_fill_super+0x6440/0x68a8 [ 64.605567][ T5546] get_tree_bdev+0x358/0x544 [ 64.606225][ T5546] ext4_get_tree+0x28/0x38 [ 64.606889][ T5546] vfs_get_tree+0x90/0x274 [ 64.607552][ T5546] do_new_mount+0x228/0x810 [ 64.608180][ T5546] path_mount+0x5b4/0xe78 [ 64.608776][ T5546] __arm64_sys_mount+0x49c/0x584 [ 64.609518][ T5546] invoke_syscall+0x98/0x2bc [ 64.610188][ T5546] el0_svc_common+0x138/0x258 [ 64.611003][ T5546] do_el0_svc+0x58/0x13c [ 64.611731][ T5546] el0_svc+0x58/0x138 [ 64.612371][ T5546] el0t_64_sync_handler+0x84/0xf0 [ 64.613190][ T5546] el0t_64_sync+0x18c/0x190 [ 64.622078][ T5546] ------------[ cut here ]------------ [ 64.622967][ T5546] EA inode 11 i_nlink=2 [ 64.623287][ T5546] WARNING: CPU: 0 PID: 5546 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 64.625444][ T5546] Modules linked in: [ 64.626043][ T5546] CPU: 0 PID: 5546 Comm: syz.3.450 Not tainted syzkaller #0 [ 64.627111][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 64.628566][ T5546] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 64.629702][ T5546] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 64.630672][ T5546] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 64.631571][ T5546] sp : ffff800021736e00 [ 64.632175][ T5546] x29: ffff800021736ea0 x28: 0000000000000000 x27: dfff800000000000 [ 64.633304][ T5546] x26: 1fffe0001ec03bde x25: ffff7000042e6dc4 x24: 0000000000000000 [ 64.634436][ T5546] x23: ffff800017a8a000 x22: ffff0000f601dd38 x21: 0000000000000002 [ 64.635645][ T5546] x20: 0000000000000001 x19: ffff0000f601dcf8 x18: ffff800011abbcc0 [ 64.636814][ T5546] x17: 1fffe00033ed797e x16: ffff800008042d90 x15: 0000000040000000 [ 64.637974][ T5546] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 64.639085][ T5546] x11: ff0080000804801c x10: 0000000040000002 x9 : f09c83d2434d9d00 [ 64.640245][ T5546] x8 : f09c83d2434d9d00 x7 : 0000000000000004 x6 : ffff800008251e80 [ 64.641420][ T5546] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 64.642618][ T5546] x2 : ffff8000217369a0 x1 : 0000000000000000 x0 : ffff800008251f14 [ 64.643849][ T5546] Call trace: [ 64.644279][ T5546] ext4_xattr_inode_update_ref+0x42c/0x470 [ 64.645069][ T5546] ext4_xattr_set_entry+0x918/0x15ac [ 64.645832][ T5546] ext4_xattr_ibody_set+0x204/0x600 [ 64.646597][ T5546] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 64.647429][ T5546] __ext4_expand_extra_isize+0x298/0x358 [ 64.648196][ T5546] __ext4_mark_inode_dirty+0x3e4/0x790 [ 64.648962][ T5546] ext4_evict_inode+0xb58/0x1270 [ 64.649709][ T5546] evict+0x3c8/0x810 [ 64.650299][ T5546] iput+0x764/0x7f4 [ 64.650856][ T5546] ext4_process_orphan+0x240/0x2b4 [ 64.651528][ T5546] ext4_orphan_cleanup+0x908/0x104c [ 64.652233][ T5546] ext4_fill_super+0x6440/0x68a8 [ 64.652958][ T5546] get_tree_bdev+0x358/0x544 [ 64.653642][ T5546] ext4_get_tree+0x28/0x38 [ 64.654300][ T5546] vfs_get_tree+0x90/0x274 [ 64.654911][ T5546] do_new_mount+0x228/0x810 [ 64.655574][ T5546] path_mount+0x5b4/0xe78 [ 64.656221][ T5546] __arm64_sys_mount+0x49c/0x584 [ 64.656917][ T5546] invoke_syscall+0x98/0x2bc [ 64.657553][ T5546] el0_svc_common+0x138/0x258 [ 64.658257][ T5546] do_el0_svc+0x58/0x13c [ 64.658881][ T5546] el0_svc+0x58/0x138 [ 64.659477][ T5546] el0t_64_sync_handler+0x84/0xf0 [ 64.660277][ T5546] el0t_64_sync+0x18c/0x190 [ 64.661034][ T5546] irq event stamp: 2833 [ 64.661695][ T5546] hardirqs last enabled at (2833): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 64.663346][ T5546] hardirqs last disabled at (2832): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 64.665000][ T5546] softirqs last enabled at (1852): [] local_bh_enable+0x10/0x34 [ 64.666496][ T5546] softirqs last disabled at (1850): [] local_bh_disable+0x10/0x34 [ 64.667934][ T5546] ---[ end trace 0000000000000000 ]--- [ 64.670848][ T5546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #18: comm syz.3.450: iget: bad extra_isize 90 (inode size 256) [ 64.673292][ T5546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.450: error while reading EA inode 18 err=-117 [ 64.675435][ T5546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #18: comm syz.3.450: iget: bad extra_isize 90 (inode size 256) [ 64.679540][ T5546] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.450: error while reading EA inode 18 err=-117 [ 64.681768][ T5546] EXT4-fs (loop3): 1 orphan inode deleted [ 64.878731][ T5516] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.880260][ T5516] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.881710][ T5516] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.883073][ T5516] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.103188][ T5529] bond0 speed is unknown, defaulting to 1000