last executing test programs: 3m14.113400478s ago: executing program 32 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000f1401000000000000000000090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2m41.412604085s ago: executing program 33 (id=530): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x6, 0x2ba, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1m43.520354687s ago: executing program 34 (id=982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r1}, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 1m32.486907068s ago: executing program 35 (id=1227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r2, &(0x7f0000000040)={0x11, 0x18, 0x0, 0x1, 0x8, 0x6, @random}, 0x14) 1m14.571632813s ago: executing program 5 (id=1499): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$cgroup2(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8000, 0x0) 1m14.455707044s ago: executing program 5 (id=1503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, 0x0, 0x0) 1m14.311703638s ago: executing program 5 (id=1506): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 1m13.279816297s ago: executing program 5 (id=1519): getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x3, 0x0, "ef359f413bb93852f707ee5e5ca9000ff8f909e737ff0edf110ff4117639c2eb4b78c656e6774415cc05018000009d020000a301a004000000000000d5d6eeb6", "036c47c6780820d1cbf7966d61fdcf335269bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47de9b49600", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfd14) 1m12.721545541s ago: executing program 5 (id=1527): sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m10.414975983s ago: executing program 5 (id=1556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1m10.359906668s ago: executing program 7 (id=1557): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x177f, &(0x7f00000002c0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 1m10.101691853s ago: executing program 36 (id=1556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1m10.089637184s ago: executing program 7 (id=1563): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 1m10.005782172s ago: executing program 7 (id=1564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x44800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m9.82590988s ago: executing program 7 (id=1567): getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x3, 0x0, "ef359f413bb93852f707ee5e5ca9000ff8f909e737ff0edf110ff4117639c2eb4b78c656e6774415cc05018000009d020000a301a004000000000000d5d6eeb6", "036c47c6780820d1cbf7966d61fdcf335269bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47de9b49600", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfd14) 1m9.013917948s ago: executing program 7 (id=1577): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff2}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xad}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x200000d4) r0 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 1m8.533155964s ago: executing program 7 (id=1581): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)={0x62, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8742}, @pad1]}, 0x28) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 1m8.295001647s ago: executing program 37 (id=1581): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)={0x62, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8742}, @pad1]}, 0x28) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 49.04397777s ago: executing program 8 (id=1799): openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x12, 0x0, &(0x7f0000000200)='GPL\x00', 0x1ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 48.950876789s ago: executing program 8 (id=1801): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 48.705111152s ago: executing program 8 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r1 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r1, 0x7) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa95, &(0x7f0000000300)={0x0, 0xffffffff, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 48.482779733s ago: executing program 8 (id=1811): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@i_version}, {@minixdf}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) 48.128024758s ago: executing program 8 (id=1818): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000c99) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 46.803011626s ago: executing program 8 (id=1828): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 46.521219122s ago: executing program 38 (id=1828): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 24.582832024s ago: executing program 4 (id=2046): unshare(0x8040480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 24.455903606s ago: executing program 4 (id=2050): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 23.352880442s ago: executing program 4 (id=2059): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000456422d8b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r4, 0xaf5, 0x0) write$binfmt_script(r4, &(0x7f0000000540)={'#! ', './file0'}, 0xb) write(r2, 0x0, 0x0) 22.933951022s ago: executing program 4 (id=2065): getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x3, 0x0, "ef359f413bb93852f707ee5e5ca9000ff8f909e737ff0edf110ff4117639c2eb4b78c656e6774415cc05018000009d020000a301a004000000000000d5d6eeb6", "036c47c6780820d1cbf7966d61fdcf335269bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47de9b49600", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfd14) 22.827897822s ago: executing program 3 (id=2067): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) 22.536661471s ago: executing program 4 (id=2072): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000300), &(0x7f00000004c0)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) 22.452116179s ago: executing program 3 (id=2073): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f00000000c0)=0x2) 21.781976603s ago: executing program 3 (id=2075): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20.554337361s ago: executing program 3 (id=2082): getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x3, 0x0, "ef359f413bb93852f707ee5e5ca9000ff8f909e737ff0edf110ff4117639c2eb4b78c656e6774415cc05018000009d020000a301a004000000000000d5d6eeb6", "036c47c6780820d1cbf7966d61fdcf335269bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47de9b49600", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfd14) 20.488087928s ago: executing program 4 (id=2083): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) 20.14687903s ago: executing program 39 (id=2083): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x3}, 0x1c) 20.05169457s ago: executing program 3 (id=2088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 19.513818661s ago: executing program 3 (id=2094): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 19.000780301s ago: executing program 40 (id=2094): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 5.468196183s ago: executing program 1 (id=2189): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000300), &(0x7f00000004c0)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) 5.439319286s ago: executing program 1 (id=2190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010a0103"], 0x20}}, 0xa291dae356942430) 5.347792305s ago: executing program 1 (id=2191): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x42000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.249059683s ago: executing program 2 (id=2204): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.032369774s ago: executing program 9 (id=2205): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.96753484s ago: executing program 1 (id=2206): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.823998934s ago: executing program 6 (id=2207): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 1.65836036s ago: executing program 9 (id=2209): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl$KDSIGACCEPT(r1, 0x5607, 0x38) 1.595118616s ago: executing program 6 (id=2210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010a0103"], 0x20}}, 0xa291dae356942430) 1.486452876s ago: executing program 0 (id=2211): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f00000002c0)='\f', 0x1}], 0x1, 0xfffff, 0x0, 0x0) r2 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x8, 0x0, 0x10000) 1.424095022s ago: executing program 9 (id=2212): getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(0x0, 0x1c507e, 0x0) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x3, 0x0, "ef359f413bb93852f707ee5e5ca9000ff8f909e737ff0edf110ff4117639c2eb4b78c656e6774415cc05018000009d020000a301a004000000000000d5d6eeb6", "036c47c6780820d1cbf7966d61fdcf335269bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47de9b49600", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfd14) 1.373549197s ago: executing program 6 (id=2213): r0 = io_uring_setup(0x2c4d, &(0x7f0000000380)={0x0, 0x0, 0x400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) 1.314029233s ago: executing program 2 (id=2214): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4f9, &(0x7f0000001480)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1.076130326s ago: executing program 6 (id=2215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.048833099s ago: executing program 0 (id=2216): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000140)={{0x8, 0x9}, 'port0\x00', 0x4, 0x20020, 0x6, 0x3, 0x64, 0x0, 0x80, 0x0, 0x4, 0x66}) tkill(r1, 0x7) 1.000260363s ago: executing program 2 (id=2217): syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0xeae0, 0x8, 0x1}, &(0x7f0000000040), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) epoll_create(0xaf2) 979.848715ms ago: executing program 9 (id=2218): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 888.044704ms ago: executing program 6 (id=2219): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 813.313991ms ago: executing program 0 (id=2220): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 698.384552ms ago: executing program 1 (id=2221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 600.162612ms ago: executing program 9 (id=2222): rt_tgsigqueueinfo(0x0, 0x0, 0x26, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/40) 600.021312ms ago: executing program 2 (id=2223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010a0103"], 0x20}}, 0xa291dae356942430) 498.935041ms ago: executing program 6 (id=2224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 428.958088ms ago: executing program 9 (id=2225): socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000980)='kvm_ioapic_set_irq\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0xffffffffffffff68) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) setresuid(0xee01, 0xee01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2}) 423.733548ms ago: executing program 0 (id=2226): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@tick=0x75}], 0x38) read$snapshot(r4, 0x0, 0xffffffbf) 309.07875ms ago: executing program 2 (id=2227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 251.998145ms ago: executing program 0 (id=2228): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x140) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}], [], 0x6b}}) 190.344901ms ago: executing program 2 (id=2229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 158.867714ms ago: executing program 1 (id=2230): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000140)={{0x8, 0x9}, 'port0\x00', 0x4, 0x20020, 0x6, 0x3, 0x64, 0x0, 0x80, 0x0, 0x4, 0x66}) tkill(r1, 0x7) 0s ago: executing program 0 (id=2231): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): filesystem without journal. Quota mode: none. [ 211.531112][ T8512] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.748781][ T8532] netlink: 'syz.2.1515': attribute type 10 has an invalid length. [ 211.769563][ T8532] team0: Cannot enslave team device to itself [ 211.791353][ T8532] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 212.059075][ T8540] loop5: detected capacity change from 0 to 512 [ 212.079148][ T8538] program syz.2.1518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.083183][ T7858] EXT4-fs (loop8): unmounting filesystem. [ 212.120483][ T8540] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1519: casefold flag without casefold feature [ 212.159474][ T8540] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1519: couldn't read orphan inode 15 (err -117) [ 212.182444][ T8540] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 212.243825][ T8540] loop5: detected capacity change from 512 to 64 [ 212.266133][ T8540] syz.5.1519: attempt to access beyond end of device [ 212.266133][ T8540] loop5: rw=2051, sector=98, nr_sectors = 2 limit=64 [ 212.305668][ T8546] loop8: detected capacity change from 0 to 2048 [ 212.312405][ T8540] EXT4-fs (loop5): discard request in group:0 block:48 count:1 failed with -5 [ 212.331045][ T8540] syz.5.1519: attempt to access beyond end of device [ 212.331045][ T8540] loop5: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 212.358410][ T8540] EXT4-fs (loop5): discard request in group:0 block:254 count:1 failed with -5 [ 212.369968][ T8540] syz.5.1519: attempt to access beyond end of device [ 212.369968][ T8540] loop5: rw=2049, sector=74, nr_sectors = 24 limit=64 [ 212.385769][ T8540] EXT4-fs warning (device loop5): ext4_end_bio:347: I/O error 10 writing to inode 19 starting block 37) [ 212.400598][ T8540] Buffer I/O error on device loop5, logical block 37 [ 212.407951][ T8540] Buffer I/O error on device loop5, logical block 38 [ 212.414742][ T8540] Buffer I/O error on device loop5, logical block 39 [ 212.421444][ T8540] Buffer I/O error on device loop5, logical block 40 [ 212.429113][ T8540] Buffer I/O error on device loop5, logical block 41 [ 212.430682][ T8546] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 212.435805][ T8540] Buffer I/O error on device loop5, logical block 42 [ 212.435949][ T8540] Buffer I/O error on device loop5, logical block 43 [ 212.435965][ T8540] Buffer I/O error on device loop5, logical block 44 [ 212.436844][ T8540] Buffer I/O error on device loop5, logical block 45 [ 212.471211][ T8540] Buffer I/O error on device loop5, logical block 46 [ 212.528481][ T4837] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 212.562241][ T8559] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1526'. [ 212.584020][ T8559] tipc: Enabling of bearer <^dp:s> rejected, media not registered [ 212.586617][ T4837] EXT4-fs (loop5): unmounting filesystem. [ 212.610681][ T7858] EXT4-fs (loop8): unmounting filesystem. [ 212.621425][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 212.835291][ T8565] netlink: 324 bytes leftover after parsing attributes in process `syz.7.1530'. [ 212.910153][ T8565] loop7: detected capacity change from 0 to 1024 [ 212.927896][ T8570] program syz.8.1531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.937895][ T8565] EXT4-fs: Ignoring removed oldalloc option [ 212.992406][ T8565] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 213.474128][ T7557] EXT4-fs (loop7): unmounting filesystem. [ 213.907929][ T8585] sg_write: data in/out 231/8 bytes for SCSI command 0xeb-- guessing data in; [ 213.907929][ T8585] program syz.8.1539 not setting count and/or reply_len properly [ 214.031189][ T8593] netlink: 1904 bytes leftover after parsing attributes in process `syz.8.1542'. [ 214.107532][ T8590] loop7: detected capacity change from 0 to 4096 [ 214.149204][ T8590] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 214.278285][ T8601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1546'. [ 214.297373][ T7557] EXT4-fs (loop7): unmounting filesystem. [ 214.547039][ T8609] loop7: detected capacity change from 0 to 1024 [ 214.578777][ T8609] EXT4-fs: Ignoring removed i_version option [ 214.665266][ T2963] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.701729][ T8609] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 214.815731][ T2963] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.896408][ T7557] EXT4-fs (loop7): unmounting filesystem. [ 214.972890][ T8625] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1558'. [ 215.012046][ T2963] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.206366][ T2963] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.541321][ T8645] loop7: detected capacity change from 0 to 512 [ 215.610115][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1569'. [ 215.619631][ T8645] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1567: casefold flag without casefold feature [ 215.638662][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.650897][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.659915][ T8645] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1567: couldn't read orphan inode 15 (err -117) [ 215.683243][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.702541][ T8645] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 215.712169][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.722774][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.731089][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.741779][ T26] kauditd_printk_skb: 182 callbacks suppressed [ 215.741794][ T26] audit: type=1326 audit(1730662119.494:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 215.848967][ T26] audit: type=1326 audit(1730662119.524:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 215.874280][ T8645] loop7: detected capacity change from 512 to 64 [ 215.921451][ T8657] syz.7.1567: attempt to access beyond end of device [ 215.921451][ T8657] loop7: rw=2051, sector=98, nr_sectors = 2 limit=64 [ 215.951802][ T26] audit: type=1326 audit(1730662119.524:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 216.011091][ T8657] EXT4-fs (loop7): discard request in group:0 block:48 count:1 failed with -5 [ 216.023513][ T8657] syz.7.1567: attempt to access beyond end of device [ 216.023513][ T8657] loop7: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 216.037594][ T8657] EXT4-fs (loop7): discard request in group:0 block:254 count:1 failed with -5 [ 216.054438][ T8657] syz.7.1567: attempt to access beyond end of device [ 216.054438][ T8657] loop7: rw=2049, sector=74, nr_sectors = 24 limit=64 [ 216.073954][ T8657] EXT4-fs warning (device loop7): ext4_end_bio:347: I/O error 10 writing to inode 19 starting block 37) [ 216.103186][ T26] audit: type=1326 audit(1730662119.524:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 216.130103][ T26] audit: type=1326 audit(1730662119.524:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.1.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 216.154453][ T26] audit: type=1800 audit(1730662119.544:2054): pid=8645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1567" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 216.234448][ T7557] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 216.265071][ T26] audit: type=1326 audit(1730662120.014:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 216.305163][ T7557] EXT4-fs (loop7): unmounting filesystem. [ 216.323875][ T8667] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1574'. [ 216.345091][ T26] audit: type=1326 audit(1730662120.034:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 216.414667][ T26] audit: type=1326 audit(1730662120.034:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 216.457723][ T26] audit: type=1326 audit(1730662120.034:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8666 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 216.541273][ T8674] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 216.547847][ T8674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.565417][ T8674] vhci_hcd vhci_hcd.0: Device attached [ 216.581075][ T8677] vhci_hcd: connection closed [ 216.582823][ T56] vhci_hcd: stop threads [ 216.588514][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 216.599468][ T56] vhci_hcd: release socket [ 216.612858][ T56] vhci_hcd: disconnect device [ 216.624360][ T8672] can0: slcan on ttyS3. [ 216.683743][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1580'. [ 216.724564][ T8679] can0 (unregistered): slcan off ttyS3. [ 216.738678][ T8679] Falling back ldisc for ttyS3. [ 216.822131][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.831766][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.840135][ T8651] device bridge_slave_0 entered promiscuous mode [ 216.849525][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.856982][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.865320][ T8651] device bridge_slave_1 entered promiscuous mode [ 217.046142][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.074552][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.328596][ T8651] team0: Port device team_slave_0 added [ 217.364621][ T8651] team0: Port device team_slave_1 added [ 217.413336][ T4265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.424261][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.435612][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.446686][ T2963] device hsr_slave_0 left promiscuous mode [ 217.453466][ T2963] device hsr_slave_1 left promiscuous mode [ 217.459644][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.471513][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.479331][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.486765][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.495066][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.502642][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.510277][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.549893][ T2963] device bridge_slave_1 left promiscuous mode [ 217.556566][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.567351][ T2963] device bridge_slave_0 left promiscuous mode [ 217.575413][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.609872][ T2963] device veth1_macvtap left promiscuous mode [ 217.616584][ T2963] device veth0_macvtap left promiscuous mode [ 217.622819][ T2963] device veth1_vlan left promiscuous mode [ 217.628864][ T2963] device veth0_vlan left promiscuous mode [ 217.642107][ T8698] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1587'. [ 217.864795][ T4265] Bluetooth: hci0: command tx timeout [ 217.918642][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 218.081904][ T8712] loop8: detected capacity change from 0 to 128 [ 218.280787][ T8719] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1597'. [ 218.346317][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1598'. [ 218.378592][ T8722] x_tables: ip_tables: udp match: only valid for protocol 17 [ 218.427772][ T8725] serio: Serial port ptm0 [ 219.538655][ T4265] Bluetooth: hci2: command tx timeout [ 219.583161][ T8743] __nla_validate_parse: 1 callbacks suppressed [ 219.583179][ T8743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1607'. [ 219.671592][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 219.746779][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 219.817584][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 219.895621][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.936979][ T4265] Bluetooth: hci0: command tx timeout [ 219.979591][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.854749][ T26] kauditd_printk_skb: 202 callbacks suppressed [ 220.854768][ T26] audit: type=1326 audit(1730662124.604:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 220.862278][ T8769] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1618'. [ 220.894229][ T2963] bond0 (unregistering): Released all slaves [ 220.930905][ T26] audit: type=1326 audit(1730662124.604:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 220.955331][ T26] audit: type=1326 audit(1730662124.604:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 220.982683][ T26] audit: type=1326 audit(1730662124.604:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 221.006890][ T26] audit: type=1326 audit(1730662124.604:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 221.029829][ T26] audit: type=1326 audit(1730662124.604:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 221.066897][ T26] audit: type=1326 audit(1730662124.604:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 221.103855][ T26] audit: type=1326 audit(1730662124.604:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 221.126860][ T26] audit: type=1326 audit(1730662124.604:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 221.203913][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.210913][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.241364][ T26] audit: type=1326 audit(1730662124.604:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8768 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 221.275579][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.296106][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 221.324104][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.331089][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.368031][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.468178][ T8651] device hsr_slave_0 entered promiscuous mode [ 221.481695][ T8651] device hsr_slave_1 entered promiscuous mode [ 221.502325][ T8651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.521363][ T8651] Cannot create hsr debugfs directory [ 221.533037][ T8785] tmpfs: Unknown parameter '¡Ô$íÅFZ“+w§N€*Æ¿%Ø¢B¼`™­#' [ 221.614022][ T4265] Bluetooth: hci2: command tx timeout [ 221.908555][ T8797] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1627'. [ 222.023467][ T4262] Bluetooth: hci0: command tx timeout [ 222.065871][ T8695] chnl_net:caif_netlink_parms(): no params data found [ 222.224587][ T8651] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 222.299360][ T8651] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 222.335167][ T8811] atomic_op ffff888073566198 conn xmit_atomic 0000000000000000 [ 222.365257][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.374146][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.382056][ T8695] device bridge_slave_0 entered promiscuous mode [ 222.389193][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 222.411218][ T8651] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 222.449319][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.469958][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.496916][ T8695] device bridge_slave_1 entered promiscuous mode [ 222.522015][ T8651] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 222.617741][ T2963] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.690003][ T8695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.761756][ T2963] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.796328][ T8695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.812273][ T8827] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1640'. [ 222.917950][ T2963] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.945585][ T8695] team0: Port device team_slave_0 added [ 222.978365][ T8695] team0: Port device team_slave_1 added [ 223.002870][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 223.077755][ T2963] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.100051][ T8832] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 223.113328][ T8832] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 223.150638][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.168786][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.183810][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.240956][ T8695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.256094][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.263080][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.313674][ T8695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.320238][ T8840] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 223.382948][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.405676][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.438135][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.493094][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.512552][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.572891][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.580099][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.612382][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.703514][ T4262] Bluetooth: hci2: command tx timeout [ 223.752074][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.781440][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.796335][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 223.804483][ T8853] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1653'. [ 223.821035][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.828265][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.850859][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.870124][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.895142][ T8695] device hsr_slave_0 entered promiscuous mode [ 223.911695][ T8695] device hsr_slave_1 entered promiscuous mode [ 223.928907][ T8695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.937167][ T8695] Cannot create hsr debugfs directory [ 224.024368][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.036119][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.045029][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.054738][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.093686][ T4262] Bluetooth: hci0: command tx timeout [ 224.101012][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.119616][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.131859][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.148451][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.160128][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.202191][ T8651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.752434][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 224.914303][ T8885] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1665'. [ 224.950751][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.969574][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.035216][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.103468][ T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 225.324715][ T126] usb 2-1: device descriptor read/64, error -71 [ 225.623577][ T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 225.685810][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 225.785024][ T4265] Bluetooth: hci2: command tx timeout [ 225.788007][ T8912] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1675'. [ 225.823655][ T126] usb 2-1: device descriptor read/64, error -71 [ 225.842085][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.871810][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.895518][ T26] kauditd_printk_skb: 262 callbacks suppressed [ 225.895536][ T26] audit: type=1326 audit(1730662129.644:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 225.926800][ T26] audit: type=1326 audit(1730662129.664:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 225.950439][ T126] usb usb2-port1: attempt power cycle [ 225.960433][ T26] audit: type=1326 audit(1730662129.664:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 225.983997][ T26] audit: type=1326 audit(1730662129.664:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 226.008219][ T26] audit: type=1326 audit(1730662129.664:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 226.032214][ T26] audit: type=1326 audit(1730662129.664:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 226.055441][ T26] audit: type=1326 audit(1730662129.664:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 226.084773][ T26] audit: type=1326 audit(1730662129.664:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 226.120546][ T26] audit: type=1326 audit(1730662129.664:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 226.143534][ T26] audit: type=1326 audit(1730662129.664:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 226.275283][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.295542][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.310986][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.332957][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.347304][ T8651] device veth0_vlan entered promiscuous mode [ 226.380772][ T8651] device veth1_vlan entered promiscuous mode [ 226.404726][ T126] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 226.429506][ T2963] device hsr_slave_0 left promiscuous mode [ 226.446993][ T2963] device hsr_slave_1 left promiscuous mode [ 226.475764][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.487100][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.504384][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1680'. [ 226.513632][ T126] usb 2-1: device descriptor read/8, error -71 [ 226.521164][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.543550][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.560181][ T2963] device bridge_slave_1 left promiscuous mode [ 226.567554][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.594463][ T2963] device bridge_slave_0 left promiscuous mode [ 226.607287][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.661074][ T2963] device veth1_macvtap left promiscuous mode [ 226.667363][ T2963] device veth0_macvtap left promiscuous mode [ 226.674041][ T2963] device veth1_vlan left promiscuous mode [ 226.679901][ T2963] device veth0_vlan left promiscuous mode [ 226.723287][ T8928] loop8: detected capacity change from 0 to 128 [ 226.776135][ T8930] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1684'. [ 226.803562][ T126] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 226.914066][ T126] usb 2-1: device descriptor read/8, error -71 [ 226.927321][ T8931] syz.8.1683: attempt to access beyond end of device [ 226.927321][ T8931] loop8: rw=2049, sector=129, nr_sectors = 840 limit=128 [ 227.041630][ T126] usb usb2-port1: unable to enumerate USB device [ 227.051197][ T4347] kworker/u4:8: attempt to access beyond end of device [ 227.051197][ T4347] loop8: rw=1, sector=969, nr_sectors = 72 limit=128 [ 227.161786][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1688'. [ 227.295145][ T8941] loop8: detected capacity change from 0 to 2048 [ 227.339417][ T8941] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 227.386892][ T8941] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1689: bg 0: block 234: padding at end of block bitmap is not set [ 227.402442][ T8941] EXT4-fs (loop8): Remounting filesystem read-only [ 227.436171][ T7858] EXT4-fs (loop8): unmounting filesystem. [ 227.577128][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 227.628624][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 227.676093][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.724308][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.978091][ T8952] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1693'. [ 228.527534][ T2963] bond0 (unregistering): Released all slaves [ 228.614648][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.628518][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.666411][ T8651] device veth0_macvtap entered promiscuous mode [ 228.699643][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.713643][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.726781][ T8651] device veth1_macvtap entered promiscuous mode [ 228.752385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.762437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.812884][ T8695] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.830328][ T8695] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.847198][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.863456][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.878802][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.890685][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.900778][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.911295][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.925564][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.940374][ T8695] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.960569][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.970569][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.991018][ T8695] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.011972][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.029937][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.041669][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.069518][ T8972] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1703'. [ 229.080103][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.099849][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.110754][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.153553][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.175662][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.204464][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.228919][ T8651] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.248728][ T8651] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.269749][ T8651] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.292485][ T8651] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.708957][ T5362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.732704][ T5362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.769223][ T8695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.816163][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.864993][ T8695] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.878155][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.894209][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.909072][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.936755][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.946930][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.962448][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.987121][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.994327][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.002171][ T8987] loop8: detected capacity change from 0 to 512 [ 230.003020][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.019365][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.029110][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.036320][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.048882][ T8987] ext4: Unknown parameter '' [ 230.095452][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.117518][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.139493][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.159383][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.184840][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.199877][ T8995] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1714'. [ 230.206760][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.261213][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.280506][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.292806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.308127][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.320318][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.332470][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.347906][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.364229][ T8695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.569292][ T9006] loop9: detected capacity change from 0 to 1024 [ 230.581524][ T9006] EXT4-fs: Ignoring removed nobh option [ 230.595503][ T9006] EXT4-fs: Ignoring removed orlov option [ 230.601206][ T9006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.718180][ T9006] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 230.721496][ T9014] loop8: detected capacity change from 0 to 512 [ 230.846551][ T9014] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:164: inode #12: comm syz.8.1719: inline data xattr refers to an external xattr inode [ 230.865112][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.877645][ T7424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.889908][ T9014] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1719: couldn't read orphan inode 12 (err -117) [ 230.917589][ T8695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.928224][ T8651] EXT4-fs (loop9): unmounting filesystem. [ 230.960041][ T9022] xt_TPROXY: Can be used only with -p tcp or -p udp [ 230.989671][ T9014] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 231.030035][ T9014] EXT4-fs error (device loop8): ext4_add_entry:2486: inode #2: comm syz.8.1719: Directory hole found for htree leaf block 0 [ 231.059662][ T26] kauditd_printk_skb: 171 callbacks suppressed [ 231.059678][ T26] audit: type=1326 audit(1730662135.805:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.106290][ T9026] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1724'. [ 231.189473][ T26] audit: type=1326 audit(1730662135.805:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.198167][ T7858] EXT4-fs (loop8): unmounting filesystem. [ 231.298516][ T26] audit: type=1326 audit(1730662135.805:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.346748][ T26] audit: type=1326 audit(1730662135.805:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.395746][ T26] audit: type=1326 audit(1730662135.805:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.483446][ T26] audit: type=1326 audit(1730662135.815:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.549901][ T26] audit: type=1326 audit(1730662135.815:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.628023][ T26] audit: type=1326 audit(1730662135.815:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.709979][ T26] audit: type=1326 audit(1730662135.815:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.780409][ T26] audit: type=1326 audit(1730662135.815:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9025 comm="syz.1.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 231.995943][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.016925][ T5362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.025645][ T9063] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1737'. [ 232.089481][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.115441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.150452][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.164435][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.201592][ T8695] device veth0_vlan entered promiscuous mode [ 232.230777][ T8695] device veth1_vlan entered promiscuous mode [ 232.295916][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.329851][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.355884][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.388686][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.410695][ T8695] device veth0_macvtap entered promiscuous mode [ 232.442642][ T8695] device veth1_macvtap entered promiscuous mode [ 232.511732][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.554873][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.594134][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.633521][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.670010][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.721407][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.790311][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.845054][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.256714][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.495896][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.536527][ T9088] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1748'. [ 233.549030][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.566424][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.606887][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.647666][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.677122][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.725197][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.739273][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.764089][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.788353][ T8695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.798308][ T8695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.807475][ T8695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.830345][ T8695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.860185][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.883886][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.924503][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.966305][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.979486][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.990084][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.052423][ T9102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1755'. [ 234.147072][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.166426][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.201077][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.222422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 234.233291][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.252059][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.378441][ T9116] syz.4.1583[9116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.378545][ T9116] syz.4.1583[9116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.396383][ T9114] loop8: detected capacity change from 0 to 512 [ 234.419432][ T9113] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1761'. [ 234.448754][ T9114] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 234.478755][ T9114] EXT4-fs (loop8): 1 truncate cleaned up [ 234.487688][ T9114] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 234.647377][ T7858] EXT4-fs (loop8): unmounting filesystem. [ 235.046768][ T9144] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1772'. [ 235.174828][ T9150] loop9: detected capacity change from 0 to 1024 [ 235.182865][ T9150] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 235.202395][ T9150] EXT4-fs error (device loop9): ext4_get_journal_inode:5734: inode #32: comm syz.9.1777: iget: special inode unallocated [ 235.224290][ T9150] EXT4-fs (loop9): no journal found [ 235.236609][ T9150] EXT4-fs (loop9): can't get journal size [ 235.253884][ T9150] EXT4-fs error (device loop9): ext4_protect_reserved_inode:160: inode #32: comm syz.9.1777: iget: special inode unallocated [ 235.272675][ T9150] EXT4-fs (loop9): failed to initialize system zone (-117) [ 235.282866][ T9150] EXT4-fs (loop9): mount failed [ 235.384641][ T9161] loop8: detected capacity change from 0 to 256 [ 235.428105][ T9161] netlink: 'syz.8.1781': attribute type 8 has an invalid length. [ 235.552694][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1784'. [ 235.601400][ T9171] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1786'. [ 235.712329][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1789'. [ 236.018972][ T9193] loop9: detected capacity change from 0 to 764 [ 236.041276][ T9193] rock: directory entry would overflow storage [ 236.057828][ T9193] rock: sig=0x4654, size=5, remaining=4 [ 236.201635][ T26] kauditd_printk_skb: 224 callbacks suppressed [ 236.201650][ T26] audit: type=1326 audit(1730662140.945:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.249290][ T9198] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1798'. [ 236.262584][ T26] audit: type=1326 audit(1730662140.985:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.344498][ T26] audit: type=1326 audit(1730662140.985:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.367941][ T26] audit: type=1326 audit(1730662140.985:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.423435][ T26] audit: type=1326 audit(1730662140.985:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.491402][ T26] audit: type=1326 audit(1730662140.985:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.562966][ T26] audit: type=1326 audit(1730662140.985:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.628243][ T26] audit: type=1326 audit(1730662140.985:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.668968][ T26] audit: type=1326 audit(1730662140.985:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.712863][ T9218] netlink: 'syz.1.1808': attribute type 2 has an invalid length. [ 236.729875][ T26] audit: type=1326 audit(1730662140.985:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9197 comm="syz.9.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d5d7e719 code=0x7ffc0000 [ 236.886744][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 236.892407][ T9227] loop8: detected capacity change from 0 to 1024 [ 236.921635][ T9226] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1814'. [ 236.932003][ T9227] EXT4-fs: Ignoring removed orlov option [ 236.951572][ T9227] EXT4-fs: Ignoring removed i_version option [ 236.996015][ T9227] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 238.342420][ T7858] EXT4-fs (loop8): unmounting filesystem. [ 238.409177][ T9256] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1827'. [ 238.429942][ T9258] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 238.481251][ T4347] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.620880][ T4347] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.728917][ T4347] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.808003][ T9268] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 238.878344][ T4347] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.898071][ T9272] syz.9.1833[9272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.898176][ T9272] syz.9.1833[9272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.913884][ T9269] netlink: 'syz.2.1830': attribute type 10 has an invalid length. [ 239.312850][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.324296][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.332518][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.348874][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.356722][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.382406][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.628446][ T9292] loop4: detected capacity change from 0 to 512 [ 239.876066][ T9292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.901805][ T9292] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.199671][ T9296] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1841'. [ 240.352473][ T8695] EXT4-fs (loop4): unmounting filesystem. [ 240.657587][ T9282] chnl_net:caif_netlink_parms(): no params data found [ 241.000089][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.026353][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.051621][ T9335] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1855'. [ 241.071187][ T9282] device bridge_slave_0 entered promiscuous mode [ 241.125345][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.132906][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.150853][ T9282] device bridge_slave_1 entered promiscuous mode [ 241.283963][ T9341] program syz.1.1858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.314104][ T9282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.337800][ T9282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.459557][ T4262] Bluetooth: hci1: command tx timeout [ 241.503252][ T9349] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1860'. [ 241.616809][ T9282] team0: Port device team_slave_0 added [ 241.640857][ T9282] team0: Port device team_slave_1 added [ 242.055837][ T4347] device hsr_slave_0 left promiscuous mode [ 242.163250][ T4347] device hsr_slave_1 left promiscuous mode [ 242.475661][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.503228][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.565134][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.572615][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.581759][ T4347] device bridge_slave_1 left promiscuous mode [ 242.588109][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.615132][ T4347] device bridge_slave_0 left promiscuous mode [ 242.640351][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.652288][ T9365] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1867'. [ 242.821795][ T4347] device veth1_macvtap left promiscuous mode [ 242.828253][ T4347] device veth0_macvtap left promiscuous mode [ 242.834875][ T4347] device veth1_vlan left promiscuous mode [ 242.842454][ T4347] device veth0_vlan left promiscuous mode [ 242.887019][ T9376] program syz.2.1871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.920596][ T9374] loop4: detected capacity change from 0 to 2048 [ 242.970131][ T9374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 243.016385][ T9374] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 243.050669][ T9374] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 243.054763][ T26] kauditd_printk_skb: 184 callbacks suppressed [ 243.054779][ T26] audit: type=1326 audit(1730662147.805:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.063949][ T9374] EXT4-fs (loop4): This should not happen!! Data will be lost [ 243.063949][ T9374] [ 243.085113][ T26] audit: type=1326 audit(1730662147.835:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.098441][ T9374] EXT4-fs (loop4): Total free blocks count 0 [ 243.132113][ T9374] EXT4-fs (loop4): Free/Dirty block details [ 243.139032][ T9374] EXT4-fs (loop4): free_blocks=66060288 [ 243.144870][ T9374] EXT4-fs (loop4): dirty_blocks=64 [ 243.150029][ T9374] EXT4-fs (loop4): Block reservation details [ 243.156129][ T26] audit: type=1326 audit(1730662147.855:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.156380][ T9383] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 243.178608][ T9374] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 243.179452][ T26] audit: type=1326 audit(1730662147.855:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.204490][ T9380] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1872'. [ 243.234447][ T26] audit: type=1326 audit(1730662147.875:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.264285][ T26] audit: type=1326 audit(1730662147.875:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.298345][ T26] audit: type=1326 audit(1730662147.885:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.344073][ T26] audit: type=1326 audit(1730662147.885:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.375013][ T26] audit: type=1326 audit(1730662147.885:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.404725][ T26] audit: type=1326 audit(1730662147.885:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9379 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 243.557559][ T4262] Bluetooth: hci1: command tx timeout [ 243.987072][ T9397] loop4: detected capacity change from 0 to 128 [ 244.720388][ T9399] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1879'. [ 245.020788][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 245.114623][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 245.624897][ T4262] Bluetooth: hci1: command tx timeout [ 246.032373][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.085033][ T9413] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1884'. [ 246.128638][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.155859][ T9415] program syz.1.1885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.832037][ T4347] bond0 (unregistering): Released all slaves [ 246.921771][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.930036][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.957784][ T9282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.969140][ T9366] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 246.982497][ T9372] netlink: 'syz.9.1866': attribute type 10 has an invalid length. [ 246.991337][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.998925][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.019177][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.026369][ T9372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.033885][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.041024][ T9372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.066759][ T9372] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 247.115266][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.122355][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.229422][ T9282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.290354][ T9428] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1894'. [ 247.358756][ T9282] device hsr_slave_0 entered promiscuous mode [ 247.375486][ T9282] device hsr_slave_1 entered promiscuous mode [ 247.390238][ T9282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.409765][ T9434] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1895'. [ 247.413532][ T9282] Cannot create hsr debugfs directory [ 247.430747][ T9432] netlink: 'syz.4.1892': attribute type 10 has an invalid length. [ 247.467595][ T9432] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.486090][ T9432] bond0: (slave team0): Enslaving as an active interface with an up link [ 247.584137][ T9438] program syz.9.1897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.703525][ T4262] Bluetooth: hci1: command tx timeout [ 248.160427][ T9451] loop4: detected capacity change from 0 to 1024 [ 248.170437][ T9451] EXT4-fs: Ignoring removed bh option [ 248.176575][ T9451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.421726][ T9451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 248.479362][ T9451] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 248.875482][ T8695] EXT4-fs (loop4): unmounting filesystem. [ 248.881846][ T9457] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1905'. [ 249.090540][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1907'. [ 249.172587][ T9469] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1909'. [ 249.178397][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 249.349539][ T9474] program syz.4.1911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.449521][ T9478] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1921'. [ 249.696269][ T9486] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1916'. [ 249.831066][ T9282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.924581][ T9282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.964919][ T9282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.020469][ T9282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.006659][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1920'. [ 251.029517][ T9503] loop4: detected capacity change from 0 to 128 [ 251.036798][ T9503] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.050929][ T9282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.067827][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.076671][ T9503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 251.086052][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.103849][ T9503] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.125105][ T9282] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.134427][ T9503] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.152258][ T9503] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.168821][ T9503] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.184545][ T9503] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.196828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.209907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.221111][ T9503] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.238249][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.245414][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.254677][ T9503] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.267594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.276644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.287800][ T9506] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.305399][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.312546][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.320380][ T9506] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.327835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.344839][ T9503] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.360685][ T9503] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.381645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.396317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.418034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.429226][ T9506] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.439320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.454033][ T9508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1933'. [ 251.464099][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1922'. [ 251.475131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.476319][ T9506] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.493309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.496008][ T9511] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.505604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.528733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.539176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.553625][ T9511] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.567122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.575979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.586596][ T9503] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.605643][ T9282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.630685][ T9503] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.644814][ T9506] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.675929][ T9516] program syz.2.1923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.688152][ T9506] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.715918][ T9511] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 251.734907][ T9511] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1919: checksumming directory block 0 [ 251.828585][ T9520] program syz.2.1937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.889932][ T8695] EXT4-fs (loop4): unmounting filesystem. [ 252.002743][ T9527] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1927'. [ 252.070701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.078922][ T9529] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1929'. [ 252.098868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.118538][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.169644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.191161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.298865][ T9538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1935'. [ 253.156791][ T9550] program syz.2.1941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.182505][ T9551] loop9: detected capacity change from 0 to 512 [ 253.241426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.250675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.260357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.276316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.299282][ T9282] device veth0_vlan entered promiscuous mode [ 253.308662][ T9551] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.1940: casefold flag without casefold feature [ 253.340622][ T9282] device veth1_vlan entered promiscuous mode [ 253.348510][ T9551] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1940: couldn't read orphan inode 15 (err -117) [ 253.368582][ T9551] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 253.385904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.413119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.439744][ T26] kauditd_printk_skb: 77 callbacks suppressed [ 253.439761][ T26] audit: type=1800 audit(1730662158.185:3229): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1940" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 253.471433][ T9282] device veth0_macvtap entered promiscuous mode [ 253.482810][ T9561] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1945'. [ 253.495942][ T9560] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1944'. [ 253.507716][ T9282] device veth1_macvtap entered promiscuous mode [ 253.559405][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.576159][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.589129][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.611857][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.632512][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.643260][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.653912][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.669074][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.697509][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.706438][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.729277][ T8651] EXT4-fs (loop9): unmounting filesystem. [ 253.741515][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 253.743010][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.793761][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.830609][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.842652][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.865522][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.875591][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.899518][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.913880][ T9575] program syz.2.1952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.928633][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.966140][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.989666][ T9282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.008904][ T9282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.019658][ T9579] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1955'. [ 254.040168][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.051689][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.076229][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.089750][ T9282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.110938][ T9282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.134372][ T9282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.162968][ T9282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.197686][ T9585] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1957'. [ 254.374292][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.403561][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.446410][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.467701][ T9297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.480079][ T9297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.512332][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.571213][ T9604] program syz.9.1966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.650953][ T9608] loop3: detected capacity change from 0 to 512 [ 254.766244][ T26] audit: type=1326 audit(1730662159.515:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5e57e719 code=0x7ffc0000 [ 254.772000][ T9614] loop4: detected capacity change from 0 to 512 [ 254.807665][ T9614] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1970: casefold flag without casefold feature [ 254.819848][ T26] audit: type=1326 audit(1730662159.535:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fda5e57e719 code=0x7ffc0000 [ 254.843639][ T9614] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1970: couldn't read orphan inode 15 (err -117) [ 254.856393][ T9614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 254.894028][ T26] audit: type=1326 audit(1730662159.535:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5e57e719 code=0x7ffc0000 [ 254.922653][ T26] audit: type=1326 audit(1730662159.535:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fda5e57e719 code=0x7ffc0000 [ 254.962235][ T8695] EXT4-fs (loop4): unmounting filesystem. [ 255.010971][ T26] audit: type=1326 audit(1730662159.535:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5e57e719 code=0x7ffc0000 [ 255.064792][ T26] audit: type=1326 audit(1730662159.535:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fda5e57e719 code=0x7ffc0000 [ 255.089644][ T26] audit: type=1326 audit(1730662159.535:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5e57e719 code=0x7ffc0000 [ 255.114328][ T26] audit: type=1326 audit(1730662159.535:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5e57e719 code=0x7ffc0000 [ 255.182046][ T26] audit: type=1326 audit(1730662159.535:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5e57e719 code=0x7ffc0000 [ 255.355914][ T9633] program syz.3.1979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.512847][ T9641] loop9: detected capacity change from 0 to 512 [ 255.559971][ T9641] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.1982: casefold flag without casefold feature [ 255.593811][ T9641] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1982: couldn't read orphan inode 15 (err -117) [ 255.617680][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.624081][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.643475][ T9641] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 256.250265][ T8651] EXT4-fs (loop9): unmounting filesystem. [ 256.796101][ T9673] program syz.9.1994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.021804][ T9686] __nla_validate_parse: 7 callbacks suppressed [ 257.021826][ T9686] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2000'. [ 257.206636][ T9690] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2003'. [ 257.251387][ T9694] loop9: detected capacity change from 0 to 512 [ 257.317758][ T9694] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.2005: casefold flag without casefold feature [ 257.364552][ T9694] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2005: couldn't read orphan inode 15 (err -117) [ 257.414155][ T9694] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 257.934669][ T8651] EXT4-fs (loop9): unmounting filesystem. [ 258.475009][ T9717] program syz.3.2013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.476925][ T9715] netlink: 'syz.9.2012': attribute type 21 has an invalid length. [ 258.522995][ T9715] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2012'. [ 258.571873][ T9721] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2016'. [ 258.704729][ T9725] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2017'. [ 259.186676][ T9751] program syz.1.2027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.235143][ T9753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'. [ 259.236114][ T9756] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2030'. [ 259.926735][ T9763] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2031'. [ 259.959549][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 259.959565][ T26] audit: type=1326 audit(1730662164.705:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 260.044116][ T26] audit: type=1326 audit(1730662164.735:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 260.142717][ T26] audit: type=1326 audit(1730662164.735:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 260.172606][ T26] audit: type=1326 audit(1730662164.735:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 260.200176][ T26] audit: type=1326 audit(1730662164.735:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 260.356416][ T9780] loop3: detected capacity change from 0 to 512 [ 260.384990][ T9780] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2040: casefold flag without casefold feature [ 260.402782][ T26] audit: type=1326 audit(1730662165.145:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b057e719 code=0x7ffc0000 [ 260.426839][ T9780] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2040: couldn't read orphan inode 15 (err -117) [ 260.439781][ T9780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 260.463786][ T26] audit: type=1326 audit(1730662165.145:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9b057e719 code=0x7ffc0000 [ 260.486637][ T26] audit: type=1800 audit(1730662165.205:3273): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2040" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 260.507385][ T26] audit: type=1326 audit(1730662165.205:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b057e719 code=0x7ffc0000 [ 260.530674][ T26] audit: type=1326 audit(1730662165.215:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b057e719 code=0x7ffc0000 [ 260.583147][ T9788] loop9: detected capacity change from 0 to 164 [ 260.602004][ T9282] EXT4-fs (loop3): unmounting filesystem. [ 260.616660][ T9790] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2044'. [ 260.617802][ T9788] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 260.703166][ T9792] program syz.3.2045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.804931][ T9796] netlink: 268 bytes leftover after parsing attributes in process `syz.9.2047'. [ 262.154727][ T9834] __nla_validate_parse: 1 callbacks suppressed [ 262.154749][ T9834] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2062'. [ 262.395395][ T9840] loop4: detected capacity change from 0 to 512 [ 262.472009][ T9840] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.2065: casefold flag without casefold feature [ 262.493928][ T9840] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2065: couldn't read orphan inode 15 (err -117) [ 262.507156][ T9840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.574100][ T9840] loop4: detected capacity change from 512 to 64 [ 262.714109][ T8695] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 262.781915][ T9854] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2070'. [ 263.037739][ T8695] EXT4-fs (loop4): unmounting filesystem. [ 263.442599][ T9862] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2074'. [ 263.615458][ T9868] loop9: detected capacity change from 0 to 1024 [ 263.755460][ T9868] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 264.281289][ T9297] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 264.570441][ T9297] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 264.637488][ T9297] EXT4-fs (loop9): This should not happen!! Data will be lost [ 264.637488][ T9297] [ 264.657029][ T9297] EXT4-fs (loop9): Total free blocks count 0 [ 264.663274][ T9297] EXT4-fs (loop9): Free/Dirty block details [ 264.737242][ T9297] EXT4-fs (loop9): free_blocks=68451041280 [ 264.757184][ T9297] EXT4-fs (loop9): dirty_blocks=32 [ 264.774177][ T9297] EXT4-fs (loop9): Block reservation details [ 264.803441][ T9297] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 264.821898][ T4305] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 28 [ 264.864321][ T9889] loop3: detected capacity change from 0 to 512 [ 264.869480][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.911524][ T9889] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2082: casefold flag without casefold feature [ 264.948161][ T9892] loop9: detected capacity change from 0 to 2048 [ 264.967796][ T9889] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2082: couldn't read orphan inode 15 (err -117) [ 264.980119][ T9889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 264.999597][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 264.999614][ T26] audit: type=1800 audit(1730662169.745:3281): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2082" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 265.084598][ T9889] loop3: detected capacity change from 512 to 64 [ 265.150996][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.194518][ T9282] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 265.211857][ T9899] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2086'. [ 265.358621][ T9282] EXT4-fs (loop3): unmounting filesystem. [ 265.438202][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.624445][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.738634][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.751635][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.760645][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.771495][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.782358][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.790569][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 266.405593][ T9913] chnl_net:caif_netlink_parms(): no params data found [ 266.552452][ T9922] loop9: detected capacity change from 0 to 512 [ 266.573808][ T9922] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.2097: casefold flag without casefold feature [ 266.650340][ T9922] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2097: couldn't read orphan inode 15 (err -117) [ 266.684157][ T9922] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 266.722417][ T9931] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2099'. [ 266.761547][ T26] audit: type=1800 audit(1730662171.505:3282): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2097" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 266.872548][ T4265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.899404][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.899942][ T26] audit: type=1326 audit(1730662171.645:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 266.935793][ T8651] EXT4-fs (loop9): unmounting filesystem. [ 266.947915][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.973889][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.981506][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.993798][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.103457][ T26] audit: type=1326 audit(1730662171.695:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 267.128311][ T26] audit: type=1326 audit(1730662171.695:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 267.142782][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.161882][ T26] audit: type=1326 audit(1730662171.695:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 267.213466][ T26] audit: type=1326 audit(1730662171.695:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 267.228422][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.251148][ T9913] device bridge_slave_0 entered promiscuous mode [ 267.253447][ T26] audit: type=1326 audit(1730662171.695:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 267.298012][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2100'. [ 267.323662][ T26] audit: type=1326 audit(1730662171.725:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 267.350539][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.350871][ T26] audit: type=1326 audit(1730662171.725:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 267.383212][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.396110][ T9913] device bridge_slave_1 entered promiscuous mode [ 267.517966][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.639118][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.738263][ T9913] team0: Port device team_slave_0 added [ 267.805055][ T9913] team0: Port device team_slave_1 added [ 267.862001][ T4262] Bluetooth: hci1: command tx timeout [ 267.902434][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.927705][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.966031][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.014973][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.023703][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.044604][ T9959] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2109'. [ 268.055576][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.350237][ T9913] device hsr_slave_0 entered promiscuous mode [ 268.357366][ T9913] device hsr_slave_1 entered promiscuous mode [ 268.383070][ T9913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.393106][ T9913] Cannot create hsr debugfs directory [ 268.538682][ T9933] chnl_net:caif_netlink_parms(): no params data found [ 268.913584][ T9978] ALSA: seq fatal error: cannot create timer (-22) [ 269.054226][ T4262] Bluetooth: hci2: command tx timeout [ 269.125436][ T9] device hsr_slave_0 left promiscuous mode [ 269.177858][ T9] device hsr_slave_1 left promiscuous mode [ 269.195247][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.223677][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.261305][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.269590][ T9988] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2118'. [ 269.298924][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.326855][ T4294] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 269.340994][ T9] device bridge_slave_1 left promiscuous mode [ 269.374076][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.383973][ T9] device bridge_slave_0 left promiscuous mode [ 269.401705][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.492750][ T9] device veth1_macvtap left promiscuous mode [ 269.509236][ T9] device veth0_macvtap left promiscuous mode [ 269.517928][ T9] device veth1_vlan left promiscuous mode [ 269.529764][ T9] device veth0_vlan left promiscuous mode [ 269.533451][ T4294] usb 3-1: device descriptor read/64, error -71 [ 269.823450][ T4294] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 269.935413][ T4262] Bluetooth: hci1: command tx timeout [ 270.065662][ T4294] usb 3-1: device descriptor read/64, error -71 [ 270.187023][ T4294] usb usb3-port1: attempt power cycle [ 270.331034][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 270.331052][ T26] audit: type=1326 audit(1730662175.075:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.390761][ T26] audit: type=1326 audit(1730662175.115:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.443548][ T26] audit: type=1326 audit(1730662175.115:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.499118][ T26] audit: type=1326 audit(1730662175.115:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.556118][ T26] audit: type=1326 audit(1730662175.115:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.582294][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2124'. [ 270.591890][ T26] audit: type=1326 audit(1730662175.115:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.622333][ T26] audit: type=1326 audit(1730662175.115:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.633426][ T4294] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 270.655082][ T26] audit: type=1326 audit(1730662175.115:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.686957][ T26] audit: type=1326 audit(1730662175.115:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.722998][ T26] audit: type=1326 audit(1730662175.115:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.1.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda397e719 code=0x7ffc0000 [ 270.803853][ T4294] usb 3-1: device descriptor read/8, error -71 [ 271.068557][T10007] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2128'. [ 271.078107][ T4294] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 271.142200][ T4262] Bluetooth: hci2: command tx timeout [ 271.269431][ T9] team0 (unregistering): Port device team_slave_1 removed [ 271.359637][ T4294] usb 3-1: device descriptor read/8, error -71 [ 271.402035][ T9] team0 (unregistering): Port device team_slave_0 removed [ 271.463108][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.488266][ T4294] usb usb3-port1: unable to enumerate USB device [ 271.534731][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.017132][ T4262] Bluetooth: hci1: command tx timeout [ 272.093321][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 272.403701][ T9] bond0 (unregistering): Released all slaves [ 272.422019][T10029] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2138'. [ 272.510894][ T9933] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.527466][ T9933] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.557666][ T9933] device bridge_slave_0 entered promiscuous mode [ 272.768555][ T9933] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.786539][ T9933] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.833586][ T9933] device bridge_slave_1 entered promiscuous mode [ 272.963879][ T9933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.141481][T10050] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2147'. [ 273.195380][ T9933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.214701][ T4262] Bluetooth: hci2: command tx timeout [ 274.009984][ T9933] team0: Port device team_slave_0 added [ 274.084393][ T9933] team0: Port device team_slave_1 added [ 274.093477][ T4262] Bluetooth: hci1: command tx timeout [ 274.132656][ T9933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.151273][ T9933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.196117][ T9933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.254172][ T9933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.261169][ T9933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.295891][ T9933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.439944][ T9933] device hsr_slave_0 entered promiscuous mode [ 274.449070][ T9933] device hsr_slave_1 entered promiscuous mode [ 274.456738][ T9933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.464651][ T9933] Cannot create hsr debugfs directory [ 274.543754][T10072] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2156'. [ 274.571855][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.621486][ T9913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.723768][ T9913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.842037][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.876650][ T9913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.899434][ T9913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 274.954052][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.102112][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.143738][ T4294] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 275.248587][ T9913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.293469][ T4262] Bluetooth: hci2: command tx timeout [ 275.297373][ T9913] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.310796][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.319476][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.352008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.375720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.385460][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.392615][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.422937][ T4294] usb 10-1: Using ep0 maxpacket: 16 [ 275.461016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.567520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.577079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.585756][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.592871][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.611508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.631566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.650882][ T4294] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.666275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.675441][ T4294] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.694060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.702249][ T4294] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 275.712579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.720675][ T4294] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.730262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.743793][ T4294] usb 10-1: config 0 descriptor?? [ 275.752321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.764854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.778978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.949467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.963595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.010695][ T9913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.103919][ T4294] usbhid 10-1:0.0: can't add hid device: -71 [ 276.110750][ T4294] usbhid: probe of 10-1:0.0 failed with error -71 [ 276.148491][ T4294] usb 10-1: USB disconnect, device number 2 [ 276.185789][ T9933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.207100][ T9933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.255388][ T9933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.277505][ T9933] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.292891][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 276.292909][ T26] audit: type=1326 audit(1730662181.035:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.364914][ T26] audit: type=1326 audit(1730662181.075:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.446276][ T26] audit: type=1326 audit(1730662181.075:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.528434][ T26] audit: type=1326 audit(1730662181.075:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.570476][ T26] audit: type=1326 audit(1730662181.075:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.600765][ T26] audit: type=1326 audit(1730662181.075:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.601648][T10105] loop9: detected capacity change from 0 to 1024 [ 276.636372][ T26] audit: type=1326 audit(1730662181.075:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.670358][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.683476][ T26] audit: type=1326 audit(1730662181.075:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.708625][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.728188][ T26] audit: type=1326 audit(1730662181.075:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.735339][ T9913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.791991][T10105] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 276.834203][ T26] audit: type=1326 audit(1730662181.075:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 276.879968][ T9933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.900469][ T9933] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.934309][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.964310][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.996825][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.030000][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.061821][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.069025][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.109604][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.161212][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.198556][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.205797][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.299387][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.464362][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.487119][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.502486][ T4409] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 277.516499][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.541004][ T4409] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 277.563396][ T4409] EXT4-fs (loop9): This should not happen!! Data will be lost [ 277.563396][ T4409] [ 277.566070][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.573062][ T4409] EXT4-fs (loop9): Total free blocks count 0 [ 277.573084][ T4409] EXT4-fs (loop9): Free/Dirty block details [ 277.573101][ T4409] EXT4-fs (loop9): free_blocks=68451041280 [ 277.591851][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.632751][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.643811][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.653294][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.664101][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.677473][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.693306][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.711729][ T4409] EXT4-fs (loop9): dirty_blocks=2544 [ 277.727392][ T9933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.733628][ T4409] EXT4-fs (loop9): Block reservation details [ 277.753309][ T4409] EXT4-fs (loop9): i_reserved_data_blocks=159 [ 277.780396][ T2963] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 278.139253][T10134] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2177'. [ 278.225900][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.261135][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.406264][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.423312][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.477971][ T9933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.488566][ T9913] device veth0_vlan entered promiscuous mode [ 278.496353][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.506172][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.515513][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.523078][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.540582][ T9] device hsr_slave_0 left promiscuous mode [ 278.548744][ T9] device hsr_slave_1 left promiscuous mode [ 278.562643][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.578646][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.589112][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.601060][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.611446][ T9] device bridge_slave_1 left promiscuous mode [ 278.622130][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.635557][ T9] device bridge_slave_0 left promiscuous mode [ 278.641878][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.703074][ T9] device veth1_macvtap left promiscuous mode [ 278.709304][ T9] device veth0_macvtap left promiscuous mode [ 278.722462][ T9] device veth1_vlan left promiscuous mode [ 278.729053][ T9] device veth0_vlan left promiscuous mode [ 279.650246][T10167] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2188'. [ 279.858497][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'. [ 279.878765][ T9] team0 (unregistering): Port device team_slave_1 removed [ 279.960394][ T9] team0 (unregistering): Port device team_slave_0 removed [ 280.010349][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.066928][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.703447][ T9] bond0 (unregistering): Released all slaves [ 280.799080][T10154] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 280.810825][T10161] device pim6reg1 entered promiscuous mode [ 280.870608][ T9913] device veth1_vlan entered promiscuous mode [ 280.870971][T10181] loop9: detected capacity change from 0 to 1024 [ 280.897512][T10181] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 280.996653][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.015086][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.067383][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.083073][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.101824][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.114162][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.151904][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.165190][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.192716][ T9933] device veth0_vlan entered promiscuous mode [ 281.239952][ T9913] device veth0_macvtap entered promiscuous mode [ 281.268921][ T9933] device veth1_vlan entered promiscuous mode [ 281.289315][ T9913] device veth1_macvtap entered promiscuous mode [ 281.371397][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.391105][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.399815][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.415986][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.446024][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.460206][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.487274][ T9933] device veth0_macvtap entered promiscuous mode [ 281.516028][ T9933] device veth1_macvtap entered promiscuous mode [ 281.582822][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.634238][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.674584][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.685293][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.699702][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.717350][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.731591][ T9933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.740729][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.752071][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.780400][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.808073][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.826663][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.841203][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.858624][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.870674][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.890943][ T2963] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 281.915160][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.940772][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.959482][ T2963] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 281.972055][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.990208][ T2963] EXT4-fs (loop9): This should not happen!! Data will be lost [ 281.990208][ T2963] [ 282.001054][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.019012][ T2963] EXT4-fs (loop9): Total free blocks count 0 [ 282.027699][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.042624][ T2963] EXT4-fs (loop9): Free/Dirty block details [ 282.051302][ T2963] EXT4-fs (loop9): free_blocks=68451041280 [ 282.062498][ T9913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.078431][ T2963] EXT4-fs (loop9): dirty_blocks=6048 [ 282.085586][ T2963] EXT4-fs (loop9): Block reservation details [ 282.093291][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.093466][ T2963] EXT4-fs (loop9): i_reserved_data_blocks=378 [ 282.112759][ T9297] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 282.115376][ T9913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.140019][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.156184][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.169132][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.185198][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.194843][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.203828][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.212965][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.222212][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.242029][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.260537][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.312306][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.323179][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.334125][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.344867][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.355178][ T9933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.365894][ T9933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.398481][ T9933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.430946][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.444447][T10194] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2197'. [ 282.454565][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.462741][T10196] netlink: 348 bytes leftover after parsing attributes in process `syz.9.2196'. [ 282.490400][ T9933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.507656][ T9933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.526720][ T9933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.538237][ T9933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.555255][ T9913] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.604167][ T9913] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.605237][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2199'. [ 282.612897][ T9913] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.612934][ T9913] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.862652][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.888320][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.900741][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.928969][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.952910][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.974050][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.015947][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.032020][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.047062][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.063730][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.081900][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.101431][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.468091][T10221] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2207'. [ 283.656431][T10227] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2208'. [ 283.771568][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2210'. [ 283.881121][T10231] loop0: detected capacity change from 0 to 1024 [ 283.888727][T10233] loop9: detected capacity change from 0 to 512 [ 283.914379][T10231] EXT4-fs: Ignoring removed orlov option [ 283.920116][T10231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.950619][T10233] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.2212: casefold flag without casefold feature [ 284.006677][T10231] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.045595][T10233] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2212: couldn't read orphan inode 15 (err -117) [ 284.063945][T10233] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 284.229804][ T9933] EXT4-fs (loop0): unmounting filesystem. [ 284.282359][ T8651] EXT4-fs (loop9): unmounting filesystem. [ 284.361852][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 284.361869][ T26] audit: type=1326 audit(1730662189.105:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 284.433120][ T26] audit: type=1326 audit(1730662189.145:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 284.492206][ T26] audit: type=1326 audit(1730662189.145:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 284.579711][T10254] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2220'. [ 284.693741][ T26] audit: type=1326 audit(1730662189.145:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 284.782235][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2223'. [ 284.790580][ T26] audit: type=1326 audit(1730662189.145:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2db437e719 code=0x7ffc0000 [ 284.916000][T10262] loop6: detected capacity change from 0 to 1024 [ 284.916205][T10265] loop9: detected capacity change from 0 to 512 [ 284.972559][T10262] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 285.000597][T10273] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2221'. [ 285.031533][T10265] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 285.109787][T10265] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.241205][T10265] ------------[ cut here ]------------ [ 285.246730][T10265] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key [ 285.260528][T10265] WARNING: CPU: 0 PID: 10265 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 285.270627][T10265] Modules linked in: [ 285.274558][T10265] CPU: 0 PID: 10265 Comm: syz.9.2225 Not tainted 6.1.115-syzkaller #0 [ 285.282739][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.292840][T10265] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 285.298606][T10265] Code: 8b 16 48 c7 c0 20 01 da 90 48 39 c2 74 46 f6 05 4a 77 de 03 01 75 3d c6 05 41 77 de 03 01 48 c7 c7 60 23 0c 8b e8 5e 75 ab f6 <0f> 0b eb 26 e8 15 56 8f f9 48 c7 c7 a0 22 0c 8b 89 de e8 07 f4 fd [ 285.318245][T10265] RSP: 0018:ffffc900052c7410 EFLAGS: 00010046 [ 285.324348][T10265] RAX: b99114edd44f4700 RBX: ffffffff90c0a320 RCX: 0000000000040000 [ 285.332352][T10265] RDX: ffffc900049f9000 RSI: 00000000000059d1 RDI: 00000000000059d2 [ 285.340355][T10265] RBP: ffffc900052c7510 R08: ffffffff8152afae R09: fffff52000a58de1 [ 285.348359][T10265] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 285.356365][T10265] R13: 1ffff92000a58e90 R14: ffff888057980c90 R15: ffffffff974c3f41 [ 285.364370][T10265] FS: 00007fc3d6b566c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 285.373336][T10265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.380129][T10265] CR2: 0000000000000900 CR3: 00000000654e8000 CR4: 00000000003506f0 [ 285.388144][T10265] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.396149][T10265] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.404154][T10265] Call Trace: [ 285.407457][T10265] [ 285.410411][T10265] ? __warn+0x15a/0x520 [ 285.414603][T10265] ? look_up_lock_class+0xc2/0x140 [ 285.419773][T10265] ? report_bug+0x2af/0x500 [ 285.424317][T10265] ? look_up_lock_class+0xc2/0x140 [ 285.429465][T10265] ? handle_bug+0x3d/0x70 [ 285.433928][T10265] ? exc_invalid_op+0x16/0x40 [ 285.438638][T10265] ? asm_exc_invalid_op+0x16/0x20 [ 285.443709][T10265] ? __warn_printk+0x28e/0x350 [ 285.448519][T10265] ? look_up_lock_class+0xc2/0x140 [ 285.453667][T10265] register_lock_class+0x100/0x990 [ 285.458827][T10265] ? is_dynamic_key+0x260/0x260 [ 285.463719][T10265] ? mark_lock+0x9a/0x340 [ 285.468102][T10265] __lock_acquire+0xd3/0x1f80 [ 285.472825][T10265] lock_acquire+0x1f8/0x5a0 [ 285.477463][T10265] ? ext4_move_extents+0x3a0/0xe10 [ 285.482622][T10265] ? read_lock_is_recursive+0x10/0x10 [ 285.488072][T10265] ? __might_sleep+0xb0/0xb0 [ 285.492694][T10265] ? rwsem_write_trylock+0x166/0x210 [ 285.498018][T10265] ? inode_owner_or_capable+0x210/0x210 [ 285.503619][T10265] ? clear_nonspinnable+0x60/0x60 [ 285.508689][T10265] down_write_nested+0x39/0x60 [ 285.513489][T10265] ? ext4_move_extents+0x3a0/0xe10 [ 285.518640][T10265] ext4_move_extents+0x3a0/0xe10 [ 285.523613][T10265] ? rcu_read_lock_any_held+0xb3/0x160 [ 285.529104][T10265] ? ext4_double_up_write_data_sem+0x30/0x30 [ 285.535119][T10265] ext4_ioctl+0x3a8d/0x5f60 [ 285.539662][T10265] ? kasan_set_track+0x4b/0x70 [ 285.544470][T10265] ? security_file_ioctl+0x6d/0xa0 [ 285.549608][T10265] ? __se_sys_ioctl+0x47/0x160 [ 285.554397][T10265] ? do_syscall_64+0x3b/0xb0 [ 285.559033][T10265] ? ext4_fileattr_set+0x1770/0x1770 [ 285.564371][T10265] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 285.569248][T10265] ? __x64_compat_sys_ioctl+0x80/0x80 [ 285.574650][T10265] ? __lock_acquire+0x1f80/0x1f80 [ 285.579712][T10265] ? lockdep_hardirqs_on+0x94/0x130 [ 285.584958][T10265] ? __kmem_cache_free+0x25c/0x3c0 [ 285.590107][T10265] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 285.595857][T10265] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 285.601529][T10265] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 285.607207][T10265] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 285.612709][T10265] ? __fget_files+0x28/0x4a0 [ 285.617315][T10265] ? __fget_files+0x28/0x4a0 [ 285.621911][T10265] ? __fget_files+0x435/0x4a0 [ 285.626592][T10265] ? __fget_files+0x28/0x4a0 [ 285.631182][T10265] ? bpf_lsm_file_ioctl+0x5/0x10 [ 285.636119][T10265] ? security_file_ioctl+0x7d/0xa0 [ 285.641233][T10265] ? ext4_fileattr_set+0x1770/0x1770 [ 285.646617][T10265] __se_sys_ioctl+0xf1/0x160 [ 285.651222][T10265] do_syscall_64+0x3b/0xb0 [ 285.655643][T10265] ? clear_bhb_loop+0x45/0xa0 [ 285.660321][T10265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.666413][T10265] RIP: 0033:0x7fc3d5d7e719 [ 285.670840][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.690442][T10265] RSP: 002b:00007fc3d6b56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.698867][T10265] RAX: ffffffffffffffda RBX: 00007fc3d5f35f80 RCX: 00007fc3d5d7e719 [ 285.706840][T10265] RDX: 0000000020000000 RSI: 00000000c028660f RDI: 0000000000000005 [ 285.714820][T10265] RBP: 00007fc3d5df132e R08: 0000000000000000 R09: 0000000000000000 [ 285.722799][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.730768][T10265] R13: 0000000000000000 R14: 00007fc3d5f35f80 R15: 00007ffd43069768 [ 285.738753][T10265] [ 285.741793][T10265] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 285.749070][T10265] CPU: 0 PID: 10265 Comm: syz.9.2225 Not tainted 6.1.115-syzkaller #0 [ 285.757225][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.767281][T10265] Call Trace: [ 285.770562][T10265] [ 285.773494][T10265] dump_stack_lvl+0x1e3/0x2cb [ 285.778179][T10265] ? nf_tcp_handle_invalid+0x642/0x642 [ 285.783642][T10265] ? panic+0x764/0x764 [ 285.787719][T10265] ? vscnprintf+0x59/0x80 [ 285.792061][T10265] panic+0x318/0x764 [ 285.795996][T10265] ? __warn+0x169/0x520 [ 285.800162][T10265] ? memcpy_page_flushcache+0xfc/0xfc [ 285.805547][T10265] __warn+0x348/0x520 [ 285.809537][T10265] ? look_up_lock_class+0xc2/0x140 [ 285.814692][T10265] report_bug+0x2af/0x500 [ 285.819042][T10265] ? look_up_lock_class+0xc2/0x140 [ 285.824160][T10265] handle_bug+0x3d/0x70 [ 285.828317][T10265] exc_invalid_op+0x16/0x40 [ 285.832818][T10265] asm_exc_invalid_op+0x16/0x20 [ 285.837679][T10265] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 285.843402][T10265] Code: 8b 16 48 c7 c0 20 01 da 90 48 39 c2 74 46 f6 05 4a 77 de 03 01 75 3d c6 05 41 77 de 03 01 48 c7 c7 60 23 0c 8b e8 5e 75 ab f6 <0f> 0b eb 26 e8 15 56 8f f9 48 c7 c7 a0 22 0c 8b 89 de e8 07 f4 fd [ 285.863010][T10265] RSP: 0018:ffffc900052c7410 EFLAGS: 00010046 [ 285.869100][T10265] RAX: b99114edd44f4700 RBX: ffffffff90c0a320 RCX: 0000000000040000 [ 285.877071][T10265] RDX: ffffc900049f9000 RSI: 00000000000059d1 RDI: 00000000000059d2 [ 285.885055][T10265] RBP: ffffc900052c7510 R08: ffffffff8152afae R09: fffff52000a58de1 [ 285.893027][T10265] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 285.901019][T10265] R13: 1ffff92000a58e90 R14: ffff888057980c90 R15: ffffffff974c3f41 [ 285.909083][T10265] ? __warn_printk+0x28e/0x350 [ 285.913858][T10265] register_lock_class+0x100/0x990 [ 285.919252][T10265] ? is_dynamic_key+0x260/0x260 [ 285.924110][T10265] ? mark_lock+0x9a/0x340 [ 285.928452][T10265] __lock_acquire+0xd3/0x1f80 [ 285.933229][T10265] lock_acquire+0x1f8/0x5a0 [ 285.937744][T10265] ? ext4_move_extents+0x3a0/0xe10 [ 285.942859][T10265] ? read_lock_is_recursive+0x10/0x10 [ 285.948241][T10265] ? __might_sleep+0xb0/0xb0 [ 285.952846][T10265] ? rwsem_write_trylock+0x166/0x210 [ 285.958151][T10265] ? inode_owner_or_capable+0x210/0x210 [ 285.963722][T10265] ? clear_nonspinnable+0x60/0x60 [ 285.968765][T10265] down_write_nested+0x39/0x60 [ 285.973541][T10265] ? ext4_move_extents+0x3a0/0xe10 [ 285.978671][T10265] ext4_move_extents+0x3a0/0xe10 [ 285.983618][T10265] ? rcu_read_lock_any_held+0xb3/0x160 [ 285.989102][T10265] ? ext4_double_up_write_data_sem+0x30/0x30 [ 285.995099][T10265] ext4_ioctl+0x3a8d/0x5f60 [ 285.999630][T10265] ? kasan_set_track+0x4b/0x70 [ 286.004408][T10265] ? security_file_ioctl+0x6d/0xa0 [ 286.009527][T10265] ? __se_sys_ioctl+0x47/0x160 [ 286.014294][T10265] ? do_syscall_64+0x3b/0xb0 [ 286.018911][T10265] ? ext4_fileattr_set+0x1770/0x1770 [ 286.024681][T10265] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 286.029546][T10265] ? __x64_compat_sys_ioctl+0x80/0x80 [ 286.034927][T10265] ? __lock_acquire+0x1f80/0x1f80 [ 286.039975][T10265] ? lockdep_hardirqs_on+0x94/0x130 [ 286.045194][T10265] ? __kmem_cache_free+0x25c/0x3c0 [ 286.050315][T10265] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 286.055967][T10265] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 286.061606][T10265] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 286.067271][T10265] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 286.072739][T10265] ? __fget_files+0x28/0x4a0 [ 286.077340][T10265] ? __fget_files+0x28/0x4a0 [ 286.081928][T10265] ? __fget_files+0x435/0x4a0 [ 286.086610][T10265] ? __fget_files+0x28/0x4a0 [ 286.091296][T10265] ? bpf_lsm_file_ioctl+0x5/0x10 [ 286.096237][T10265] ? security_file_ioctl+0x7d/0xa0 [ 286.101348][T10265] ? ext4_fileattr_set+0x1770/0x1770 [ 286.106642][T10265] __se_sys_ioctl+0xf1/0x160 [ 286.111231][T10265] do_syscall_64+0x3b/0xb0 [ 286.115646][T10265] ? clear_bhb_loop+0x45/0xa0 [ 286.120364][T10265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.126306][T10265] RIP: 0033:0x7fc3d5d7e719 [ 286.130732][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.150355][T10265] RSP: 002b:00007fc3d6b56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.158781][T10265] RAX: ffffffffffffffda RBX: 00007fc3d5f35f80 RCX: 00007fc3d5d7e719 [ 286.166752][T10265] RDX: 0000000020000000 RSI: 00000000c028660f RDI: 0000000000000005 [ 286.174723][T10265] RBP: 00007fc3d5df132e R08: 0000000000000000 R09: 0000000000000000 [ 286.182691][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.190662][T10265] R13: 0000000000000000 R14: 00007fc3d5f35f80 R15: 00007ffd43069768 [ 286.198644][T10265] [ 286.202054][T10265] Kernel Offset: disabled [ 286.206395][T10265] Rebooting in 86400 seconds..