last executing test programs: 1m13.440085753s ago: executing program 1 (id=17): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) getrandom(&(0x7f0000000640)=""/4, 0x4, 0x2) 1m13.260107325s ago: executing program 1 (id=20): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x9}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m11.197750709s ago: executing program 1 (id=32): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00611400000000000000000a00", @ANYBLOB="0fb6"], 0x1c}}, 0x0) 1m10.980023662s ago: executing program 1 (id=33): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0, 0x0, 0x8}, 0x18) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000980)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x36, 0x6a}, 0x0, 0x0, 0x7, 0x7, 0x2, 0x1000, 0xfffffffffffffff8, 0x9, 0x3, 0x8}) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)="88", 0x1, 0xd0, &(0x7f0000000480)={0xa, 0x4e60, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffff37}, 0x1c) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[], 0x381, 0x2) 1m9.675997973s ago: executing program 1 (id=40): symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 1m7.516323317s ago: executing program 1 (id=52): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) read$usbfs(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m6.611966862s ago: executing program 32 (id=52): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) read$usbfs(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 13.439116795s ago: executing program 3 (id=281): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x97, 0x2ae, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x73}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) pwrite64(r0, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) 12.45888228s ago: executing program 0 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 11.322440238s ago: executing program 3 (id=285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 11.154421901s ago: executing program 4 (id=286): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 10.483065422s ago: executing program 3 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 9.296048981s ago: executing program 3 (id=289): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000580)={'syz1\x00', {0x6ec6, 0x7, 0x5, 0x3c3c}, 0x3e, [0x9, 0x8, 0x8, 0x2, 0x5334, 0x400, 0x80000010, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffa9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x10001, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x8, 0x0, 0x0, 0x202, 0x8000, 0x1, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x6, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x9, 0x1, 0x104, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x7ffe, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffe9c, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xccf, 0x7, 0x8, 0x7, 0x4, 0x8, 0x10, 0x7, 0x7, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0x6, 0x4, 0x80000001, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x8, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x7, 0x9, 0x6, 0x1010000, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401], [0x108e, 0x7fff, 0xfffffffe, 0x4, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x401, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x8000002, 0x5, 0x2, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x3ff, 0x7, 0x4edf, 0xfffffffd, 0x7, 0x14e2, 0x2, 0xe, 0x7f, 0x133, 0x6]}, 0x45c) 8.268230068s ago: executing program 3 (id=294): getpgid(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8.150841059s ago: executing program 3 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0xa, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000073c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000007480)={0x0, 0x0, &(0x7f0000007440)={&(0x7f0000007400)={0x14, r4, 0x301}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000080), 0x10) socket$key(0xf, 0x3, 0x2) listen(r7, 0x0) accept4$llc(r7, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7.716272596s ago: executing program 0 (id=297): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x0, 0xfffffffc, 0x3, 0xff, 0x0, "4ae23ae17df2e98c00ed00000001000000d88f", 0x6, 0xffffffff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3a) 7.039042347s ago: executing program 0 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 7.024987927s ago: executing program 4 (id=300): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x0, 0x441, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) keyctl$link(0x8, r4, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r5, &(0x7f00000000c0), 0x0}, 0x20) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) 5.444416113s ago: executing program 0 (id=302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000002200)=""/4114, 0x1012}], 0x2, 0x800, 0x4000000) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYRES32=r3]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRESDEC=r1, @ANYRES32=0x0], &(0x7f0000000580)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, 0x0) tkill(r4, 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 4.456111059s ago: executing program 4 (id=305): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sync() unshare(0x64000600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) 4.400542269s ago: executing program 5 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000000025b22ae09fba21a25f5f1a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000400)={'wlan1\x00', {0x2, 0x0, @remote}}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) getpgid(r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000400)}) io_setup(0x40, &(0x7f0000000240)) 3.992233356s ago: executing program 5 (id=307): getpgid(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.928174187s ago: executing program 2 (id=308): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x97, 0x2ae, &(0x7f0000000400)="$eJzs3b9rO2UYAPDn0vQSdEgEJxE80MHpy7ff1SVFWihmUjKogxbbgjRBaKHgD4ydXF0cXV0Ewc1/wsX/QHAV3CxYOLnkrklqGpPatP74fJa+fe953nvet9eWDvf03ecHxwdZHJ1/8lM0m0nUOtGJiyTaUYvKZzGj80UAAP9mF3kev+Zjq+QlEdFcX1kAwBqt/Pv/u7WXBACs2RtvvvXadre783qWNWN38PlZr/jLvvg4vr59FO9HPw7jcbTiMiK/Mh7v5nk+rGeFdrw0GJ71iszBOz+U62//EjHK34pWtEdTs/l73Z2tbGwqf1jU8VR5/06R/yRa8eyc++91d57MyY9eGi+/OFX/o2jFj+/FB9GPtKxttEot4tOtLHs1//K3j98uZov8ZHjWa8TBzEnlG/f4ZQEAAAAAAAAAAAAAAAAAAAAA4D/uUdk7pxGj/j3FVNl/Z+Oy+GQzskp7tj/POD+pFrrWH2iYx1dVf57HWZblZeAkvx7P1aP+MLsGAAAAAAAAAAAAAAAAAACAf5bTDz863u/3D0/uZFB1A6he67/tOp2pmRdicXBjcq9aOVywcmxUMUnEwjKKTSxd8+9l24PbHd0zN9X8zbdLr/P1X++9HGwuEfM3B9XTdbyfzD/DRlQzzeoh+X46Jo0l75XedClf6fFL515qrbz39OnRYLggJpJFhb3y8/jkypnk+i7S0anOTd8sB1PpszHN5Z/n4jvlT5Krbh3J3f4QAgAAAAAAAAAAAAAAAAAARiYv/c65eL4wtZY31lYWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyryf//X2EwLJOXCE7j5PSBtwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wB8BAAD//+88YLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x73}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) pwrite64(r0, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) 3.841832858s ago: executing program 5 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rmdir(0x0) 3.600107932s ago: executing program 5 (id=310): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00001ad000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000580)={'syz1\x00', {0x6ec6, 0x7, 0x5, 0x3c3c}, 0x3e, [0x9, 0x8, 0x8, 0x2, 0x5334, 0x400, 0x80000010, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffa9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x10001, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x8, 0x0, 0x0, 0x202, 0x8000, 0x1, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x6, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x9, 0x1, 0x104, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x7ffe, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffe9c, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xccf, 0x7, 0x8, 0x7, 0x4, 0x8, 0x10, 0x7, 0x7, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0x6, 0x4, 0x80000001, 0x4, 0x4, 0x5, 0x5, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x8, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x7, 0x9, 0x6, 0x1010000, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401], [0x108e, 0x7fff, 0xfffffffe, 0x4, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x401, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x8000002, 0x5, 0x2, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x3ff, 0x7, 0x4edf, 0xfffffffd, 0x7, 0x14e2, 0x2, 0xe, 0x7f, 0x133, 0x6]}, 0x45c) 2.923680053s ago: executing program 2 (id=311): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) sendto$unix(r1, 0x0, 0x0, 0xc804, 0x0, 0x0) 2.638214177s ago: executing program 2 (id=312): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) close(r0) 2.432302741s ago: executing program 2 (id=313): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2.396251481s ago: executing program 4 (id=314): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x2) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40082102, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x8}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffb) accept4$inet(r4, 0x0, 0x0, 0xbca82cbd5e1361be) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x5) 2.192102355s ago: executing program 4 (id=315): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 1.545873015s ago: executing program 5 (id=316): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x0, 0x441, &(0x7f0000000d80)="$eJzs201oHFUcAPD/7EdrP2JiqR9Nq0arGPxImrTWHrwoCh4UBD3UY0zSErttpIlgS7BRpB6l4F08Ct4FT3oR9SR41bsUiuTS6mlldmeSzXY3TdJNNrq/H0zy3szbfe+/M2/3vXm7AfSsofRPErE/In6PiP56dnWBofq/W0sLk38vLUwmUa2+9VdSK3dzaWEyL5o/bl+eKUUUPk3icIt65y5dPjdRqUxfzPKj8+ffH527dPm5mfMTZ6fPTl8YP3XqxPGxF06OP9+RONO4bg5+NHvk0GvvXHtj8vS1d3/+Jsnjb4qjQ4bWOvhktdrh6rqrryGdlLrYEDakWO+mUa71//4oxsrJ649XP+lq44AtVa1Wqw+0P7xYBf7Hkuh2C4DuyD/o0/lvvm3T0GNHuPFSfQKUxn0r2+pHSlHIypSb5redNBQRpxf/+TLdYmvuQwAArPJ9Ov55ttX4rxCN94XuzdZQBiLivog4EBEnI+JgRNwfUSv7YEQ8tMH6mxdJbh//FK5vKrB1Ssd/L2ZrW6vHf/noLwaKWa6vFn85OTNTmT6WvSbDUd6d5sfWqOOHV377vN2xxvFfuqX152PBrB3XS7tXP2ZqYn7ibmJudOPjiMFSq/iT5ZWAJCIORcTgJuuYefrrI+2O3Tn+NXRgnan6VcRT9fO/GE3x55K11ydH74nK9LHR/Kq43S+/Xn2zXf13FX8HpOd/b8vrfzn+gaRxvXZu43Vc/eOztnOazV7/u5K3a+kr2b4PJ+bnL45F7Eperze6cf/4ymPzfF4+jX/46Or4y1nZA7HyShyOiPQifjgiHomIR7O2PxYRj0fE0TXi/+nlJ97bfPxbK41/akPnfyWxK5r3tE4Uz/34Xf5ktWcdWKn/2771nP8TtdRwtmc973/radfmrmYAAAD47ylExP5ICiPL6UJhZKT+Hf6DsbdQmZ2bf+bM7AcXpuq/ERiIciG/09XfcD90LJvW5/nxpvzx7L7xF8U9tfzI5GxlqtvBQ4/b16b/p/4sdrt1wJbzey3oXfo/9KTaF3P0f+hd+j/0rhb9f0832gFsv1af/1e60A5g+zX1f8t+0EPM/6F36f/Qu/R/6Elze+LOP5KX2PGJUmx3pVHYKbFLbEWi2+9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfFvAAAA//9Sb+dL") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) keyctl$link(0x8, r4, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r5, &(0x7f00000000c0), 0x0}, 0x20) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) 1.305487459s ago: executing program 0 (id=317): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x101000, 0x10) execveat(r1, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)={[0x0, &(0x7f0000000200)='kmem_cache_free\x00']}, &(0x7f0000000600)={[&(0x7f0000000280)='&}&\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='!^*.\\!%\x94\x00', &(0x7f0000000400)='\x00', &(0x7f0000000580)='-}-#,$\x00', &(0x7f00000005c0)='syzkaller\x00']}, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1.293495459s ago: executing program 2 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) iopl(0x2) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fcntl$notify(r3, 0x402, 0x8000003d) close_range(r2, r3, 0x0) 1.072791693s ago: executing program 0 (id=319): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$eJzs3c9vI1cdAPCvnV9OmjZp6QEQokspLGi1TuJto6oHKCeEUCVEjyBtQ+KNothxFDulCXvY/g9IVOIER/4Azj3xJyC4cYEDEj8iULMSSFPNeLzrzdob7yaxs/HnI41m3ryxv+/t7rzn+W7iF8DYuhYR9yJiOiI+iIiF/Hwh3+Ld9pZe99nR3fXjo7vrhUiS9/9VyOrTc9H1mtQL+XuWIuLH34/4WeHxuM2Dw+21Wq261y7OLrXqu0vNg8ObW/W1zepmdadSWV1ZXX771luVc+vra/Xp9sFE2sBv/yJt1nxe192Pc/T/JDP1IE5qMiJ+eAHBRmEi78/0qBvCMylGxCsR8Xp2/y/ERPa3CQBcZUmyEMlCdxkAuOqKWQ6sUCznuYD5KBbL5XYO79WYK9YazdaNO439nY12rmwxpop3tmrV5TxXuBhThbS8kh0/LFdOlG9FxMsR8cuZ2axcXm/UNkb5wQcAxtgLJ+b//860538A4IorjboBAMDQmf8BYPyY/wFg/Jj/AWD8mP8BYPyY/wFg/Jj/AWCs/Oi999ItOc6//3rjw4P97caHNzeqze1yfX+9vN7Y2y1vNhqb2Xf21E97v1qjsbvyZux/tPid3WZrqXlweLve2N9p3c6+1/t2dWoovQIAnuTl1z79cyEi7r0zm23RtZaDuRqutuJZXjx7fu0Ahm9i1A0ARsZqXzC+zvCMLz0AV0SPJXofUXrkcT+/OkmS5GKbBVyg61+S/4dx1ZX/91PAMGbk/2F8DZr/Py0/ADx/kqQw6Jr/MeiFAMDlJscP9Hm+fyXf/y7/z4Gfbpy84pOLbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbp31f8v5WuDzUSyWyxEvRsRiTBXubNWqyxHxUkT8aWZqJi2vjLjNAMBZFf9eyNf/ur7wxvzJ2unC/ZlsHxE///X7v/pordXa+2N6/t8Pzrc+yc9XRtF+AOA0nXk623c9yH92dHe9sw2zPf/4XkSU2vGPj6bj+EH8yZjM9qWYioi5/xTycluhK3dxFvc+jogv9up/IeazHEh75dOT8dPYLw41fvGR+MWsrr1P/yy+8NSRk4VzaD481z5Nx593e91/xbiW7Xvf/6VshDq7fPxL32r9OBsDH8bvjH8Tfca/a4PGePMPP2gfzT5e93HElycjOrGPu8afTvxCn/hvDBj/L1/56uv96pLfRFyP3vG7Yy216rtLzYPDm1v1tc3qZnWnUlldWV1++9ZblaUsR73Ufzb45zs3XupXl/Z/rk/80in9/8aA/f/t/z74ydeeEP9bX+8VvxivPiF+Oid+c8D4a3O/L/WrS+Nv9Ox/R//+3xgw/l//dvjYsuEAwOg0Dw6312q16t4wDzofJIYa1MEVOEj/1VyCZvQ8+O6wYk3HU70qSZ4pVr8R4zyybsBl0L7Xk+peRNwfdWMAAAAAAAAAAAAAAICehvEbS6PuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfX5wEAAP//90HVog==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 152.052247ms ago: executing program 5 (id=320): getpgid(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 0s ago: executing program 2 (id=321): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x97, 0x2ae, &(0x7f0000000400)="$eJzs3b9rO2UYAPDn0vQSdEgEJxE80MHpy7ff1SVFWihmUjKogxbbgjRBaKHgD4ydXF0cXV0Ewc1/wsX/QHAV3CxYOLnkrklqGpPatP74fJa+fe953nvet9eWDvf03ecHxwdZHJ1/8lM0m0nUOtGJiyTaUYvKZzGj80UAAP9mF3kev+Zjq+QlEdFcX1kAwBqt/Pv/u7WXBACs2RtvvvXadre783qWNWN38PlZr/jLvvg4vr59FO9HPw7jcbTiMiK/Mh7v5nk+rGeFdrw0GJ71iszBOz+U62//EjHK34pWtEdTs/l73Z2tbGwqf1jU8VR5/06R/yRa8eyc++91d57MyY9eGi+/OFX/o2jFj+/FB9GPtKxttEot4tOtLHs1//K3j98uZov8ZHjWa8TBzEnlG/f4ZQEAAAAAAAAAAAAAAAAAAAAA4D/uUdk7pxGj/j3FVNl/Z+Oy+GQzskp7tj/POD+pFrrWH2iYx1dVf57HWZblZeAkvx7P1aP+MLsGAAAAAAAAAAAAAAAAAACAf5bTDz863u/3D0/uZFB1A6he67/tOp2pmRdicXBjcq9aOVywcmxUMUnEwjKKTSxd8+9l24PbHd0zN9X8zbdLr/P1X++9HGwuEfM3B9XTdbyfzD/DRlQzzeoh+X46Jo0l75XedClf6fFL515qrbz39OnRYLggJpJFhb3y8/jkypnk+i7S0anOTd8sB1PpszHN5Z/n4jvlT5Krbh3J3f4QAgAAAAAAAAAAAAAAAAAARiYv/c65eL4wtZY31lYWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyryf//X2EwLJOXCE7j5PSBtwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wB8BAAD//+88YLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x73}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) pwrite64(r0, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. [ 60.212201][ T4158] cgroup: Unknown subsys name 'net' [ 60.345780][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.745157][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.602189][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 63.635612][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 63.722288][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 63.751000][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 63.836325][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.843850][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.852010][ T4169] device bridge_slave_0 entered promiscuous mode [ 63.860689][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.867768][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.875749][ T4168] device bridge_slave_0 entered promiscuous mode [ 63.886838][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.894287][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.902697][ T4168] device bridge_slave_1 entered promiscuous mode [ 63.928822][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.936155][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.944543][ T4169] device bridge_slave_1 entered promiscuous mode [ 63.951641][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 63.995949][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.032626][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.039987][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.047745][ T4173] device bridge_slave_0 entered promiscuous mode [ 64.057239][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.083659][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.095363][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.105402][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.113157][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.121318][ T4173] device bridge_slave_1 entered promiscuous mode [ 64.139835][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.146944][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.155359][ T4175] device bridge_slave_0 entered promiscuous mode [ 64.200604][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.207687][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.216110][ T4175] device bridge_slave_1 entered promiscuous mode [ 64.225627][ T4169] team0: Port device team_slave_0 added [ 64.242697][ T4168] team0: Port device team_slave_0 added [ 64.262412][ T4169] team0: Port device team_slave_1 added [ 64.277367][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.288571][ T4168] team0: Port device team_slave_1 added [ 64.311884][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.322652][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.356336][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.388095][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.395359][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.403617][ T4181] device bridge_slave_0 entered promiscuous mode [ 64.412457][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.419692][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.446638][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.466845][ T4173] team0: Port device team_slave_0 added [ 64.475309][ T4173] team0: Port device team_slave_1 added [ 64.481806][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.488768][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.515439][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.526787][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.534266][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.542359][ T4181] device bridge_slave_1 entered promiscuous mode [ 64.550452][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.557423][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.583448][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.616073][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.623111][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.649308][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.677618][ T4175] team0: Port device team_slave_0 added [ 64.693614][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.700798][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.726825][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.748681][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.759343][ T4175] team0: Port device team_slave_1 added [ 64.765583][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.772709][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.799220][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.827209][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.857229][ T4168] device hsr_slave_0 entered promiscuous mode [ 64.864349][ T4168] device hsr_slave_1 entered promiscuous mode [ 64.910817][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.917789][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.944242][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.958101][ T4181] team0: Port device team_slave_0 added [ 64.967882][ T4169] device hsr_slave_0 entered promiscuous mode [ 64.975248][ T4169] device hsr_slave_1 entered promiscuous mode [ 64.981943][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.990560][ T4169] Cannot create hsr debugfs directory [ 64.999882][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.006932][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.033229][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.053780][ T4181] team0: Port device team_slave_1 added [ 65.095720][ T4173] device hsr_slave_0 entered promiscuous mode [ 65.102598][ T4173] device hsr_slave_1 entered promiscuous mode [ 65.109751][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.117324][ T4173] Cannot create hsr debugfs directory [ 65.123822][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.130986][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.157249][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.194108][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.201995][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.228556][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.230383][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 65.239262][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 65.309326][ T4170] Bluetooth: hci1: command 0x0409 tx timeout [ 65.319608][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 65.325792][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 65.354472][ T4175] device hsr_slave_0 entered promiscuous mode [ 65.361309][ T4175] device hsr_slave_1 entered promiscuous mode [ 65.367857][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.375904][ T4175] Cannot create hsr debugfs directory [ 65.397480][ T4181] device hsr_slave_0 entered promiscuous mode [ 65.404844][ T4181] device hsr_slave_1 entered promiscuous mode [ 65.412647][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.420328][ T4181] Cannot create hsr debugfs directory [ 65.657265][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.670295][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.679700][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.692581][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.743650][ T4169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.754580][ T4169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.765504][ T4169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.779450][ T4169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.847019][ T4173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.857476][ T4173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.871405][ T4173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.892104][ T4173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.925456][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.957158][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.965005][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.974944][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.015157][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.022173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.032981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.042094][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.049353][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.057635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.066902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.075866][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.082990][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.091107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.106025][ T4175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.115531][ T4175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.147003][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.156045][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.164362][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.174440][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.184528][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.194262][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.204005][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.212745][ T4175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.223078][ T4175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.262170][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.269103][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.278513][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.287778][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.296677][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.310545][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.322139][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.342384][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.351627][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.366427][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.389918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.399128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.415024][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.422194][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.438440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.463733][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.500137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.516152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.524969][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.532100][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.543396][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.553459][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.565190][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.594660][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.605655][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.620401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.629552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.638339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.647345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.655137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.663500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.672545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.695559][ T4169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.706252][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.722662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.731744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.740506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.749005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.760028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.768312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.787559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.795942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.817918][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.839165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.847997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.886050][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.903226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.917640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.927648][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.934775][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.966983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.976141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.993261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.008213][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.015465][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.023961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.033207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.042169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.050754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.058586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.066851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.084190][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.092491][ T4168] device veth0_vlan entered promiscuous mode [ 67.110247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.120915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.128506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.145008][ T4168] device veth1_vlan entered promiscuous mode [ 67.159492][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.167724][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.177781][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.186764][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.196104][ T1209] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.203213][ T1209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.214612][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.223035][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.234497][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.254134][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.272621][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.282096][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.290861][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.300453][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.308823][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.315923][ T1209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.323807][ T4218] Bluetooth: hci3: command 0x041b tx timeout [ 67.327799][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.331052][ T4218] Bluetooth: hci0: command 0x041b tx timeout [ 67.345100][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.354125][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.389543][ T4215] Bluetooth: hci2: command 0x041b tx timeout [ 67.396023][ T4215] Bluetooth: hci4: command 0x041b tx timeout [ 67.396404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.402434][ T4215] Bluetooth: hci1: command 0x041b tx timeout [ 67.413967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.426336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.435573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.444521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.453076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.463069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.473518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.489717][ T4168] device veth0_macvtap entered promiscuous mode [ 67.504162][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.519039][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.546658][ T4168] device veth1_macvtap entered promiscuous mode [ 67.560420][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.576717][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.585413][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.600559][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.608991][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.618129][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.626988][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.636002][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.673871][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.689630][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.710779][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.721229][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.731011][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.740177][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.748714][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.756855][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.770050][ T4169] device veth0_vlan entered promiscuous mode [ 67.792481][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.812926][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.823675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.836921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.851432][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.858774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.886085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.896604][ T4169] device veth1_vlan entered promiscuous mode [ 67.915232][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.930781][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.943352][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.956323][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.975474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.987372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.002015][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.038029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.046569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.056626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.066038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.075479][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.082619][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.107483][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.116674][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.140007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.156915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.164800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.173497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.187507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.196426][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.203558][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.214025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.223639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.246238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.262046][ T4169] device veth0_macvtap entered promiscuous mode [ 68.301626][ T4169] device veth1_macvtap entered promiscuous mode [ 68.337814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.350180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.358301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.368664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.385208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.397274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.406946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.416189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.425640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.435292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.444700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.453985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.487251][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.501173][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.516162][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.530240][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.538850][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.553536][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.566408][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.577537][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.595637][ T4173] device veth0_vlan entered promiscuous mode [ 68.612927][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.617539][ T548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.637328][ T548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.641908][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.662353][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.688654][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.700282][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.712954][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.732148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.742021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.753596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.762961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.772088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.795705][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.810584][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.823817][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.839744][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.859764][ T4173] device veth1_vlan entered promiscuous mode [ 68.885169][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.892653][ T4175] device veth0_vlan entered promiscuous mode [ 68.901457][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.904685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.925664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.934870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.943597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.952375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.960661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.968414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.024206][ T4175] device veth1_vlan entered promiscuous mode [ 69.059026][ T4173] device veth0_macvtap entered promiscuous mode [ 69.068915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.078155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.090971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.100336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.107822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.116882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.125887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.147827][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.166896][ T4173] device veth1_macvtap entered promiscuous mode [ 69.262818][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.274227][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.286126][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.296683][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.308712][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.328297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.341167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.351139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.360284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.369791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.378724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.388980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.390382][ T4217] Bluetooth: hci0: command 0x040f tx timeout [ 69.417029][ T4217] Bluetooth: hci3: command 0x040f tx timeout [ 69.417041][ T4175] device veth0_macvtap entered promiscuous mode [ 69.434579][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.445604][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.455683][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.466445][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.469685][ T4215] Bluetooth: hci1: command 0x040f tx timeout [ 69.482560][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 69.487319][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.488773][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 69.522198][ T4181] device veth0_vlan entered promiscuous mode [ 69.536288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.544946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.554657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.564367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.572700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.581218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.589007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.600275][ T4173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.609016][ T4173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.618089][ T4173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.627235][ T4173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.651129][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.666153][ T4181] device veth1_vlan entered promiscuous mode [ 69.672438][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.698024][ T4175] device veth1_macvtap entered promiscuous mode [ 69.737671][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.747912][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.764745][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.812624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.834196][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.845571][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.856527][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.867240][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.877523][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.890091][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.901912][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.916149][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.929546][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.940162][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.956819][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.968171][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.980014][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.991427][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.000611][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.016575][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.040608][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.048680][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.057963][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.067633][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.076430][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.085423][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.094920][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.114870][ T4181] device veth0_macvtap entered promiscuous mode [ 70.180434][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.192917][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.202773][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.211837][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.240891][ T4181] device veth1_macvtap entered promiscuous mode [ 70.260585][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.268622][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.326781][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.340498][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.355446][ T4264] loop2: detected capacity change from 0 to 128 [ 70.368021][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.396775][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.423099][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.460294][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.480886][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.491792][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.502843][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.515773][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.542858][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.557170][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.585231][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.607862][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.643489][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.667861][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.681828][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.710177][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.724018][ T4275] loop1: detected capacity change from 0 to 128 [ 70.730423][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.741263][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.751625][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.763664][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.776182][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.780406][ T1276] attempt to access beyond end of device [ 70.780406][ T1276] loop2: rw=1, want=1041, limit=128 [ 70.805553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.815841][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.821486][ T4275] ======================================================= [ 70.821486][ T4275] WARNING: The mand mount option has been deprecated and [ 70.821486][ T4275] and is ignored by this kernel. Remove the mand [ 70.821486][ T4275] option from the mount to silence this warning. [ 70.821486][ T4275] ======================================================= [ 70.840333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.872799][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.886545][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.904937][ T4275] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 70.917378][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.926512][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.937707][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.011046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.055693][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.074648][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.137082][ T4281] loop1: detected capacity change from 0 to 256 [ 71.141143][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.194469][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.234034][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.288548][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.303827][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.336987][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.355739][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.444597][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.446049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.458938][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.501363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.503847][ T4224] Bluetooth: hci3: command 0x0419 tx timeout [ 72.259441][ T4224] Bluetooth: hci0: command 0x0419 tx timeout [ 72.268366][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 72.275431][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 72.282183][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 72.439853][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.647332][ T26] audit: type=1326 audit(1750504604.709:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 72.749723][ T26] audit: type=1326 audit(1750504604.709:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 72.851527][ T26] audit: type=1326 audit(1750504604.709:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 72.943293][ T26] audit: type=1326 audit(1750504604.709:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 72.987991][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 73.021699][ T4325] loop4: detected capacity change from 0 to 512 [ 73.031741][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.068343][ T26] audit: type=1326 audit(1750504604.709:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4308 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 73.128304][ T4325] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.178922][ T4325] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.226382][ T4325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 73.337313][ T4325] System zones: 1-12 [ 73.359034][ T4325] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.25: corrupted in-inode xattr [ 73.380751][ T4325] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.25: couldn't read orphan inode 15 (err -117) [ 73.399863][ T4325] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 73.448910][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.456903][ T4325] futex_wake_op: syz.4.25 tries to shift op by -1; fix this program [ 74.495683][ T4334] loop0: detected capacity change from 0 to 512 [ 74.806478][ T4334] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 74.856696][ T4334] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.927074][ T4356] syz.4.31 uses obsolete (PF_INET,SOCK_PACKET) [ 74.938454][ T4334] EXT4-fs (loop0): Ignoring removed orlov option [ 74.956272][ T4334] EXT4-fs (loop0): can't enable nombcache during remount [ 75.028956][ T4358] loop1: detected capacity change from 0 to 1024 [ 75.087412][ T4360] loop4: detected capacity change from 0 to 512 [ 75.105801][ T4358] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.155317][ T26] audit: type=1326 audit(1750504607.219:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 75.187171][ T26] audit: type=1326 audit(1750504607.219:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 75.241172][ T26] audit: type=1326 audit(1750504607.289:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 75.275746][ T4358] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,nojournal_checksum,barrier=0x0000000000010002,dioread_lock,data_err=ignore,mb_optimize_scan=0x0000000000000000,dioread_nolock,nobarrier,abort,user_xattr,norecovery,errors=remount-ro,. Quota mode: none. [ 75.348559][ T4360] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.433458][ T4372] usb usb8: usbfs: process 4372 (syz.3.34) did not claim interface 0 before use [ 75.505960][ T4360] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.784895][ T26] audit: type=1326 audit(1750504607.289:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 76.168247][ T26] audit: type=1326 audit(1750504607.289:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4362 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea1270929 code=0x7ffc0000 [ 76.456748][ T4387] loop2: detected capacity change from 0 to 512 [ 76.779069][ T4387] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.202582][ T4387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 77.292894][ T4387] System zones: 1-12 [ 77.298955][ T4387] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.41: corrupted in-inode xattr [ 77.329143][ T4397] syz.3.44[4397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.347355][ T4397] syz.3.44[4397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.361283][ T4387] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.41: couldn't read orphan inode 15 (err -117) [ 77.407884][ T4397] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 77.422408][ T4387] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 77.485745][ T4387] futex_wake_op: syz.2.41 tries to shift op by -1; fix this program [ 77.578088][ T4405] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.693473][ T4410] loop0: detected capacity change from 0 to 2048 [ 78.087733][ T4410] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 78.434907][ T4168] syz-executor (4168) used greatest stack depth: 20288 bytes left [ 78.458724][ T4419] loop4: detected capacity change from 0 to 2048 [ 78.548265][ T4421] usb usb8: usbfs: process 4421 (syz.3.49) did not claim interface 0 before use [ 79.210537][ T4390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.369878][ T4426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.51'. [ 79.457837][ T4431] loop3: detected capacity change from 0 to 512 [ 79.496374][ T4390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.497202][ T4433] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 79.532662][ T4435] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 79.540788][ T4435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.55'. [ 79.590199][ T4431] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.591347][ T4435] team0: Port device geneve0 added [ 79.641533][ T4431] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.669006][ T4390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.767087][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 79.767103][ T26] audit: type=1800 audit(1750504611.829:27): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.56" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 79.838629][ T26] audit: type=1800 audit(1750504611.839:28): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.56" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 79.839905][ T4390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.874759][ T4450] loop4: detected capacity change from 0 to 512 [ 79.935733][ T4450] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.030358][ T4450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 80.038418][ T4450] System zones: 1-12 [ 80.106642][ T4450] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.61: corrupted in-inode xattr [ 80.119771][ T4450] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.61: couldn't read orphan inode 15 (err -117) [ 80.143303][ T4450] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 80.191928][ T4450] futex_wake_op: syz.4.61 tries to shift op by -1; fix this program [ 80.338464][ T4451] chnl_net:caif_netlink_parms(): no params data found [ 80.580778][ T4463] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 81.144931][ T4464] bond1 (unregistering): Released all slaves [ 81.433651][ T4463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'. [ 81.522303][ T4477] usb usb8: usbfs: process 4477 (syz.4.66) did not claim interface 0 before use [ 82.262932][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 82.490394][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.497501][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.535525][ T4451] device bridge_slave_0 entered promiscuous mode [ 82.626679][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.659722][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.667916][ T4451] device bridge_slave_1 entered promiscuous mode [ 82.835300][ T26] audit: type=1326 audit(1750504614.899:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 82.919625][ T26] audit: type=1326 audit(1750504614.989:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 82.950812][ T4498] loop4: detected capacity change from 0 to 512 [ 82.971413][ T26] audit: type=1326 audit(1750504615.009:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 83.390471][ T4498] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.679450][ T4498] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 83.699233][ T26] audit: type=1326 audit(1750504615.009:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 83.747013][ T4498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0002] [ 83.829671][ T4498] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.855353][ T26] audit: type=1326 audit(1750504615.009:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 83.867201][ T4507] loop0: detected capacity change from 0 to 512 [ 83.878250][ T26] audit: type=1326 audit(1750504615.009:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 83.910209][ T4498] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.75: invalid indirect mapped block 2185560079 (level 1) [ 83.943360][ T4451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.988273][ T4498] EXT4-fs (loop4): Remounting filesystem read-only [ 84.005227][ T4498] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.75: bg 0: block 361: padding at end of block bitmap is not set [ 84.024940][ T26] audit: type=1326 audit(1750504615.009:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 84.050292][ T4507] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.062056][ T4511] 9pnet_virtio: no channels available for device 127.0.0.1 [ 84.085838][ T4498] EXT4-fs (loop4): Remounting filesystem read-only [ 84.123888][ T4507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 84.131025][ T4498] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 84.149869][ T4498] EXT4-fs (loop4): Remounting filesystem read-only [ 84.157178][ T4498] EXT4-fs (loop4): 1 truncate cleaned up [ 84.173305][ T4451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.188007][ T26] audit: type=1326 audit(1750504615.009:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 84.210778][ T4507] System zones: 1-12 [ 84.249635][ T4498] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,usrquota,errors=remount-ro,abort. Quota mode: writeback. [ 84.269502][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 84.280995][ T4507] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.76: corrupted in-inode xattr [ 84.341676][ T4507] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.76: couldn't read orphan inode 15 (err -117) [ 84.387418][ T4507] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 84.414038][ T4451] team0: Port device team_slave_0 added [ 84.441545][ T4451] team0: Port device team_slave_1 added [ 84.456111][ T4507] futex_wake_op: syz.0.76 tries to shift op by -1; fix this program [ 84.506559][ T4451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.594020][ T4451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.734402][ T4451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.026917][ T4451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.058376][ T4451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.172409][ T4451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.448427][ T4451] device hsr_slave_0 entered promiscuous mode [ 85.648749][ T4534] loop0: detected capacity change from 0 to 512 [ 85.771589][ T4535] usb usb8: usbfs: process 4535 (syz.4.79) did not claim interface 0 before use [ 86.746186][ T7] cfg80211: failed to load regulatory.db [ 86.883182][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 86.951941][ T4534] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 86.966364][ T4534] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.219182][ C1] sched: RT throttling activated [ 87.425660][ T4451] device hsr_slave_1 entered promiscuous mode [ 87.436563][ T4540] syz.2.82[4540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.436664][ T4540] syz.2.82[4540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.471913][ T4451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.574192][ T4451] Cannot create hsr debugfs directory [ 88.036432][ T4548] loop2: detected capacity change from 0 to 4096 [ 88.135233][ T4548] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.488717][ T4556] loop4: detected capacity change from 0 to 1024 [ 88.628503][ T4556] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.86: Invalid block bitmap block 0 in block_group 0 [ 88.678681][ T4556] EXT4-fs (loop4): Remounting filesystem read-only [ 88.694153][ T4451] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.700128][ T4556] __quota_error: 73 callbacks suppressed [ 88.700147][ T4556] Quota error (device loop4): write_blk: dquota write failed [ 88.729532][ T4556] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 88.759353][ T4556] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.86: Failed to acquire dquot type 0 [ 88.788995][ T4451] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.822026][ T4556] EXT4-fs (loop4): Remounting filesystem read-only [ 88.833726][ T4556] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.86: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.876726][ T4451] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.886962][ T4556] EXT4-fs (loop4): Remounting filesystem read-only [ 88.906655][ T4451] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.915464][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 88.927676][ T4556] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.86: Invalid inode bitmap blk 0 in block_group 0 [ 88.942103][ T4293] Quota error (device loop4): remove_tree: Getting block too big (0 >= 8) [ 88.972642][ T4293] EXT4-fs error (device loop4): ext4_release_dquot:6240: comm kworker/u4:6: Failed to release dquot type 0 [ 88.997071][ T4556] EXT4-fs (loop4): Remounting filesystem read-only [ 89.039984][ T4556] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 89.051445][ T4293] EXT4-fs (loop4): Remounting filesystem read-only [ 89.051912][ T4572] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 89.098098][ T4556] EXT4-fs (loop4): Remounting filesystem read-only [ 89.123365][ T4556] EXT4-fs (loop4): 1 orphan inode deleted [ 89.139399][ T4556] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; errors=remount-ro,grpid,. Quota mode: writeback. [ 89.177301][ T4583] loop2: detected capacity change from 0 to 1024 [ 89.191160][ T4390] device hsr_slave_0 left promiscuous mode [ 89.236064][ T4390] device hsr_slave_1 left promiscuous mode [ 89.254912][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.270535][ T4589] loop3: detected capacity change from 0 to 164 [ 89.277819][ T4556] EXT4-fs error (device loop4): ext4_remount:5855: comm syz.4.86: Abort forced by user [ 89.288989][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.307049][ T4390] device bridge_slave_1 left promiscuous mode [ 89.314535][ T4556] EXT4-fs (loop4): Remounting filesystem read-only [ 89.322518][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.334466][ T4556] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 89.346616][ T4583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.358925][ T4589] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.407260][ T26] audit: type=1800 audit(1750504621.469:110): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.91" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 89.491422][ T4390] device bridge_slave_0 left promiscuous mode [ 89.498190][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.521914][ T4589] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 89.547569][ T4597] sd 0:0:1:0: device reset [ 89.592170][ T4589] rock: directory entry would overflow storage [ 89.598868][ T4589] rock: sig=0x4f50, size=4, remaining=3 [ 89.622944][ T4599] 9pnet_virtio: no channels available for device 127.0.0.1 [ 89.641811][ T4556] syz.4.86 (4556) used greatest stack depth: 18912 bytes left [ 89.641858][ T1209] Quota error (device loop4): remove_tree: Getting block too big (0 >= 8) [ 89.676040][ T1209] EXT4-fs error (device loop4): ext4_release_dquot:6240: comm kworker/u4:4: Failed to release dquot type 0 [ 89.690181][ T4589] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 89.708674][ T4583] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.91: Allocating blocks 497-513 which overlap fs metadata [ 89.739491][ T1209] EXT4-fs (loop4): Remounting filesystem read-only [ 89.764784][ T4390] device veth1_macvtap left promiscuous mode [ 89.775171][ T4390] device veth0_macvtap left promiscuous mode [ 89.786615][ T4390] device veth1_vlan left promiscuous mode [ 89.807436][ T4390] device veth0_vlan left promiscuous mode [ 90.046198][ T4583] netlink: 108 bytes leftover after parsing attributes in process `syz.2.91'. [ 90.057049][ T4605] process 'syz.3.96' launched '/dev/fd/4/./bus' with NULL argv: empty string added [ 90.081839][ T4604] hub 8-0:1.0: USB hub found [ 90.087605][ T4604] hub 8-0:1.0: 1 port detected [ 90.127869][ T4583] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.91: Allocating blocks 497-513 which overlap fs metadata [ 91.397108][ T26] audit: type=1326 audit(1750504623.459:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 91.438511][ T26] audit: type=1326 audit(1750504623.499:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 91.464388][ T26] audit: type=1326 audit(1750504623.499:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 91.497367][ T26] audit: type=1326 audit(1750504623.499:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 91.529677][ T26] audit: type=1326 audit(1750504623.499:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4619 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 91.625303][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 91.691091][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 91.698823][ T4631] loop3: detected capacity change from 0 to 1024 [ 91.712219][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.722018][ T4632] 9pnet_virtio: no channels available for device 127.0.0.1 [ 91.743595][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.860128][ T4631] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.105: Invalid block bitmap block 0 in block_group 0 [ 91.880101][ T4631] EXT4-fs (loop3): Remounting filesystem read-only [ 91.886861][ T4631] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.105: Failed to acquire dquot type 0 [ 91.938953][ T4631] EXT4-fs (loop3): Remounting filesystem read-only [ 91.946930][ T4631] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.105: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.962603][ T4631] EXT4-fs (loop3): Remounting filesystem read-only [ 91.973223][ T4390] bond0 (unregistering): Released all slaves [ 91.978180][ T4631] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.105: Invalid inode bitmap blk 0 in block_group 0 [ 91.996346][ T4631] EXT4-fs (loop3): Remounting filesystem read-only [ 91.996829][ T154] EXT4-fs error (device loop3): ext4_release_dquot:6240: comm kworker/u4:2: Failed to release dquot type 0 [ 92.003122][ T4631] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 92.003508][ T4631] EXT4-fs (loop3): Remounting filesystem read-only [ 92.027050][ T154] EXT4-fs (loop3): Remounting filesystem read-only [ 92.032005][ T4631] EXT4-fs (loop3): 1 orphan inode deleted [ 92.042375][ T4631] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; errors=remount-ro,grpid,. Quota mode: writeback. [ 92.249470][ T4451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.297470][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.361478][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.391517][ T4451] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.435315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.456277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.549971][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.557213][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.379420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.387544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.469085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.528939][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.536103][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.588748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.608077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.618047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.640452][ T4663] hub 8-0:1.0: USB hub found [ 94.645309][ T4663] hub 8-0:1.0: 1 port detected [ 94.650828][ T4661] loop3: detected capacity change from 0 to 2048 [ 94.661412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.681097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.719910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.733887][ T4661] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.749620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.759933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.770275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.800393][ T4451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.871680][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.899651][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 94.899666][ T26] audit: type=1800 audit(1750504626.959:121): pid=4661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.114" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 94.942365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.963708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.135177][ T26] audit: type=1326 audit(1750504627.199:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5cc29929 code=0x7ffc0000 [ 95.210098][ T4683] device wireguard0 entered promiscuous mode [ 95.252343][ T26] audit: type=1326 audit(1750504627.199:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5cc29929 code=0x7ffc0000 [ 95.380882][ T26] audit: type=1326 audit(1750504627.229:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f1c5cc29929 code=0x7ffc0000 [ 95.634159][ T26] audit: type=1326 audit(1750504627.229:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5cc29929 code=0x7ffc0000 [ 95.748764][ T26] audit: type=1326 audit(1750504627.229:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5cc29929 code=0x7ffc0000 [ 95.775129][ T26] audit: type=1326 audit(1750504627.229:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5cc29929 code=0x7ffc0000 [ 95.822070][ T26] audit: type=1326 audit(1750504627.229:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5cc29929 code=0x7ffc0000 [ 95.953289][ T26] audit: type=1326 audit(1750504627.229:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5cc29929 code=0x7ffc0000 [ 96.242123][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.452942][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.520265][ T26] audit: type=1326 audit(1750504627.239:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4680 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1c5cc29929 code=0x7ffc0000 [ 96.550938][ T4451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.645735][ T4716] loop4: detected capacity change from 0 to 512 [ 96.735460][ T4716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.802134][ T4716] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 96.922864][ T4716] System zones: 1-12 [ 96.994932][ T4716] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.129: corrupted in-inode xattr [ 97.020185][ T4716] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.129: couldn't read orphan inode 15 (err -117) [ 97.044093][ T4716] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 97.061272][ T4729] hub 8-0:1.0: USB hub found [ 97.066898][ T4729] hub 8-0:1.0: 1 port detected [ 97.121284][ T4716] futex_wake_op: syz.4.129 tries to shift op by -1; fix this program [ 97.727480][ T4740] loop3: detected capacity change from 0 to 512 [ 97.897900][ T4745] loop0: detected capacity change from 0 to 512 [ 97.952922][ T4749] binfmt_misc: register: failed to install interpreter file ./file2 [ 97.995231][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.042213][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.069094][ T4740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.099823][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.111637][ T4745] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.124148][ T4751] loop2: detected capacity change from 0 to 256 [ 98.129891][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.152512][ T4759] capability: warning: `syz.4.136' uses 32-bit capabilities (legacy support in use) [ 98.183405][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.200985][ T4740] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.229326][ T4745] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.246002][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.269733][ T4761] loop4: detected capacity change from 0 to 1024 [ 98.283567][ T4451] device veth0_vlan entered promiscuous mode [ 98.348646][ T4451] device veth1_vlan entered promiscuous mode [ 98.389245][ T4761] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.506854][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.540325][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.603284][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.675551][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.717839][ T4451] device veth0_macvtap entered promiscuous mode [ 98.742538][ T4451] device veth1_macvtap entered promiscuous mode [ 99.001826][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.054243][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.064661][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.075316][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.085439][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.096513][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.107102][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.117807][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.141052][ T4451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.170533][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.178823][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.245343][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.338569][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.398941][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.505033][ T4786] loop2: detected capacity change from 0 to 2048 [ 99.558963][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.574509][ T4789] hub 8-0:1.0: USB hub found [ 99.579903][ T4789] hub 8-0:1.0: 1 port detected [ 99.607304][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.617228][ T4786] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.663168][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.742061][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.794858][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.828219][ T4451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.864635][ T4451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.904227][ T4451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.931878][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.951993][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.993445][ T4451] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.035570][ T4451] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.069262][ T4451] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.086957][ T4799] loop2: detected capacity change from 0 to 512 [ 100.118665][ T4451] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.165035][ T4799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.250691][ T4799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 100.322375][ T4799] System zones: 1-12 [ 100.359544][ T4799] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.146: corrupted in-inode xattr [ 100.428313][ T4805] loop3: detected capacity change from 0 to 2048 [ 100.438952][ T4799] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.146: couldn't read orphan inode 15 (err -117) [ 100.497430][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.506029][ T4799] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 100.529572][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.531242][ T4186] loop3: p1 < > p4 [ 100.583469][ T4186] loop3: p4 size 8388608 extends beyond EOD, truncated [ 100.597002][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.606060][ T4799] futex_wake_op: syz.2.146 tries to shift op by -1; fix this program [ 100.661589][ T4812] loop0: detected capacity change from 0 to 512 [ 100.700335][ T4805] loop3: p1 < > p4 [ 100.720597][ T4805] loop3: p4 size 8388608 extends beyond EOD, truncated [ 100.825312][ T548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.160909][ T548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.183040][ T4812] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.236414][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.289496][ T4812] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.384601][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 101.414302][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.519531][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 101.519545][ T26] audit: type=1800 audit(1750504633.559:165): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.149" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 101.615966][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.628949][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 101.717122][ T26] audit: type=1800 audit(1750504633.589:166): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.149" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 102.014824][ T4838] loop2: detected capacity change from 0 to 512 [ 102.555370][ T4838] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.864454][ T4838] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.954793][ T4838] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #2: comm syz.2.156: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 103.152603][ T4856] hub 8-0:1.0: USB hub found [ 103.157458][ T4856] hub 8-0:1.0: 1 port detected [ 103.518393][ T4869] loop4: detected capacity change from 0 to 512 [ 103.528609][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.164'. [ 103.619313][ T4869] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.015065][ T4213] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.480238][ T4213] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.534748][ T4213] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.675890][ T4213] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.695663][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.714127][ T4213] usb 5-1: SerialNumber: syz [ 105.485013][ T4213] usb 5-1: 0:2 : does not exist [ 105.491194][ T4213] usb 5-1: unit 5: unexpected type 0x0a [ 105.532849][ T4213] usb 5-1: USB disconnect, device number 2 [ 105.753580][ T4865] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.762268][ T4865] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.982297][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.859125][ T4901] 9pnet_virtio: no channels available for device 127.0.0.1 [ 106.992144][ T4845] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 264: padding at end of block bitmap is not set [ 108.460817][ T4865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.569339][ T4865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.597606][ T4917] mmap: syz.0.174 (4917) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 109.851679][ T4928] loop5: detected capacity change from 0 to 512 [ 109.930017][ T4928] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 109.949845][ T4928] EXT4-fs (loop5): orphan cleanup on readonly fs [ 109.987521][ T4928] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.180: corrupted inode contents [ 110.011079][ T4928] EXT4-fs error (device loop5): ext4_dirty_inode:6039: inode #16: comm syz.5.180: mark_inode_dirty error [ 110.046715][ T4928] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.180: corrupted inode contents [ 110.075139][ T4928] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.180: mark_inode_dirty error [ 110.090266][ T4928] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.180: corrupted inode contents [ 110.104258][ T4928] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 110.124742][ T4928] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.180: corrupted inode contents [ 110.137349][ T4928] EXT4-fs error (device loop5): ext4_truncate:4273: inode #16: comm syz.5.180: mark_inode_dirty error [ 110.155062][ T4928] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 110.167646][ T4928] EXT4-fs (loop5): 1 truncate cleaned up [ 110.192347][ T4928] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000010000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 110.659350][ T4865] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.668281][ T4865] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.689231][ T4865] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.698804][ T4865] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.783028][ T4937] 9pnet_virtio: no channels available for device 127.0.0.1 [ 110.822613][ T4936] loop0: detected capacity change from 0 to 512 [ 111.004851][ T4945] netlink: 'syz.2.184': attribute type 39 has an invalid length. [ 111.010689][ T4936] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6). [ 111.133365][ T4936] EXT4-fs warning (device loop0): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.172799][ T4936] EXT4-fs (loop0): mount failed [ 112.239927][ T4961] netlink: 16 bytes leftover after parsing attributes in process `syz.5.188'. [ 112.332241][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 113.402838][ T4978] loop4: detected capacity change from 0 to 256 [ 113.421398][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 113.461127][ T4981] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.470515][ T4981] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.479287][ T4981] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.488045][ T4981] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.529375][ T26] audit: type=1800 audit(1750504645.589:167): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.194" name="file2" dev="loop4" ino=1048594 res=0 errno=0 [ 113.614687][ T4981] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.623817][ T4981] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.632835][ T4981] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.641890][ T4981] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.884474][ T5002] 9pnet_virtio: no channels available for device 127.0.0.1 [ 115.024696][ T5005] hub 8-0:1.0: USB hub found [ 115.030088][ T5005] hub 8-0:1.0: 1 port detected [ 116.483990][ T26] audit: type=1326 audit(1750504648.549:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 116.546785][ T5018] tipc: Started in network mode [ 116.554627][ T5016] 9pnet: p9_fd_create_unix (5016): problem connecting socket: ./file0: -40 [ 116.569501][ T5018] tipc: Node identity 8, cluster identity 3 [ 116.575465][ T5018] tipc: Node number set to 8 [ 116.581976][ T26] audit: type=1326 audit(1750504648.549:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 116.696784][ T26] audit: type=1326 audit(1750504648.589:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 116.889425][ T26] audit: type=1326 audit(1750504648.589:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 116.912216][ T26] audit: type=1326 audit(1750504648.589:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 116.934721][ T26] audit: type=1326 audit(1750504648.599:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 116.957779][ T26] audit: type=1326 audit(1750504648.599:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 116.992525][ T26] audit: type=1326 audit(1750504648.599:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 117.015885][ T26] audit: type=1326 audit(1750504648.599:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 117.059240][ T26] audit: type=1326 audit(1750504648.599:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5013 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb0058929 code=0x7ffc0000 [ 117.362553][ T5043] loop3: detected capacity change from 0 to 256 [ 117.748568][ T5050] 9pnet: Insufficient options for proto=fd [ 118.479604][ T5066] hub 8-0:1.0: USB hub found [ 118.485669][ T5066] hub 8-0:1.0: 1 port detected [ 118.864533][ T5072] syz.0.215[5072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.864759][ T5072] syz.0.215[5072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.266285][ T5083] netlink: 96 bytes leftover after parsing attributes in process `syz.2.219'. [ 119.479459][ T5083] netlink: 'syz.2.219': attribute type 5 has an invalid length. [ 119.519968][ T5083] netlink: 44 bytes leftover after parsing attributes in process `syz.2.219'. [ 119.867507][ T5098] loop2: detected capacity change from 0 to 256 [ 120.740588][ T5114] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.204711][ T5127] netlink: '+}[@': attribute type 4 has an invalid length. [ 121.285357][ T5128] hub 8-0:1.0: USB hub found [ 121.291219][ T5128] hub 8-0:1.0: 1 port detected [ 122.351982][ T5150] loop3: detected capacity change from 0 to 256 [ 122.377062][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 122.377077][ T26] audit: type=1800 audit(1750504654.439:193): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.237" name="file2" dev="loop3" ino=1048597 res=0 errno=0 [ 122.662889][ T5118] loop0: detected capacity change from 0 to 40427 [ 123.394797][ T5118] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 123.423054][ T5118] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 123.454349][ T26] audit: type=1326 audit(1750504655.519:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 123.555289][ T26] audit: type=1326 audit(1750504655.529:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 123.585418][ T5164] capability: warning: `syz.3.241' uses deprecated v2 capabilities in a way that may be insecure [ 123.618531][ T5118] F2FS-fs (loop0): invalid crc value [ 123.679295][ T5165] loop8: detected capacity change from 0 to 16384 [ 123.702783][ T5118] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 123.740751][ T26] audit: type=1326 audit(1750504655.529:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 123.879912][ T26] audit: type=1326 audit(1750504655.529:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 123.909893][ T5175] loop2: detected capacity change from 0 to 256 [ 123.975373][ T26] audit: type=1326 audit(1750504655.609:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 124.118155][ T5177] hub 8-0:1.0: USB hub found [ 124.123081][ T5177] hub 8-0:1.0: 1 port detected [ 124.222453][ T26] audit: type=1326 audit(1750504655.609:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 124.250844][ T26] audit: type=1326 audit(1750504655.649:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 124.254244][ T5165] loop_set_status: loop8 () has still dirty pages (nrpages=95) [ 124.275464][ T26] audit: type=1326 audit(1750504655.649:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 124.990652][ T26] audit: type=1326 audit(1750504655.649:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5163 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f0c7b2c4929 code=0x7ffc0000 [ 125.116832][ T5191] program syz.4.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.844049][ T5210] loop5: detected capacity change from 0 to 256 [ 126.876961][ T5222] hub 8-0:1.0: USB hub found [ 126.882403][ T5222] hub 8-0:1.0: 1 port detected [ 127.079101][ T5231] loop5: detected capacity change from 0 to 256 [ 128.818290][ T5262] loop4: detected capacity change from 0 to 256 [ 128.862152][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 128.862166][ T26] audit: type=1800 audit(1750504660.929:213): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.268" name="file2" dev="loop4" ino=1048601 res=0 errno=0 [ 129.663059][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.269'. [ 130.114302][ T5272] hub 8-0:1.0: USB hub found [ 130.119388][ T5272] hub 8-0:1.0: 1 port detected [ 131.343549][ T5291] loop5: detected capacity change from 0 to 256 [ 131.361592][ T5294] loop3: detected capacity change from 0 to 512 [ 131.475928][ T26] audit: type=1800 audit(1750504663.539:214): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.276" name="file2" dev="loop5" ino=1048602 res=0 errno=0 [ 131.685782][ T5294] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.194407][ T5294] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.383107][ T26] audit: type=1800 audit(1750504664.449:215): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.277" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 132.505809][ T26] audit: type=1800 audit(1750504664.479:216): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.277" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 132.741849][ T5309] loop5: detected capacity change from 0 to 512 [ 132.758669][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781378][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.928089][ T5309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.281395][ T5309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 133.541580][ T5319] loop3: detected capacity change from 0 to 256 [ 133.582237][ T5309] System zones: 1-12 [ 133.620331][ T5309] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.279: corrupted in-inode xattr [ 133.674096][ T26] audit: type=1800 audit(1750504665.739:217): pid=5319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.281" name="file2" dev="loop3" ino=1048603 res=0 errno=0 [ 133.849759][ T5309] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.279: couldn't read orphan inode 15 (err -117) [ 133.905421][ T5309] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 134.658254][ T5309] futex_wake_op: syz.5.279 tries to shift op by -1; fix this program [ 135.302072][ T5341] loop4: detected capacity change from 0 to 512 [ 135.534714][ T5341] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.679361][ T5341] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.740245][ T26] audit: type=1800 audit(1750504667.799:218): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.286" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 136.250263][ T26] audit: type=1800 audit(1750504668.299:219): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.286" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 137.106236][ T5364] 9pnet_virtio: no channels available for device 127.0.0.1 [ 137.810779][ T5384] hub 8-0:1.0: USB hub found [ 137.815685][ T5384] hub 8-0:1.0: 1 port detected [ 137.922264][ T5389] loop2: detected capacity change from 0 to 256 [ 138.017640][ T26] audit: type=1800 audit(1750504670.079:220): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.295" name="file2" dev="loop2" ino=1048604 res=0 errno=0 [ 138.049221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 138.058221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 138.067688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 138.076727][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 138.085715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 138.094796][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 138.103776][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 138.112748][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 138.121723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 138.130706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 139.114117][ T5403] loop4: detected capacity change from 0 to 512 [ 140.150845][ T5395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.330717][ T5403] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.523723][ T5403] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 140.535566][ T5403] System zones: 1-12 [ 140.628154][ T5403] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.300: corrupted in-inode xattr [ 140.697290][ T5403] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.300: couldn't read orphan inode 15 (err -117) [ 140.719971][ T5395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.752972][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 140.841569][ T5403] futex_wake_op: syz.4.300 tries to shift op by -1; fix this program [ 141.021081][ T5424] loop2: detected capacity change from 0 to 512 [ 141.633225][ T5424] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.700504][ T5424] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.744929][ T5395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.819860][ T26] audit: type=1800 audit(1750504673.889:221): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.304" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 141.907345][ T26] audit: type=1800 audit(1750504673.909:222): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.304" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 142.121407][ T5442] hub 8-0:1.0: USB hub found [ 142.126241][ T5442] hub 8-0:1.0: 1 port detected [ 142.256899][ T5395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.289304][ T5447] loop2: detected capacity change from 0 to 256 [ 142.395898][ T26] audit: type=1800 audit(1750504674.459:223): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.308" name="file2" dev="loop2" ino=1048605 res=0 errno=0 [ 143.551104][ T5468] 9pnet_virtio: no channels available for device 127.0.0.1 [ 144.175655][ T5395] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.229544][ T5395] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.469691][ T5395] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.502388][ T5492] loop5: detected capacity change from 0 to 512 [ 144.553149][ T5395] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.564565][ T5492] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.642817][ T5492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 144.682065][ T5492] System zones: 1-12 [ 144.883720][ T5492] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.316: corrupted in-inode xattr [ 144.925801][ T5492] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.316: couldn't read orphan inode 15 (err -117) [ 144.959787][ T5492] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 145.044679][ T5502] loop0: detected capacity change from 0 to 512 [ 145.101306][ T5492] futex_wake_op: syz.5.316 tries to shift op by -1; fix this program [ 145.197275][ T5502] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.298972][ T5502] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.382519][ T26] audit: type=1800 audit(1750504677.449:224): pid=5502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.319" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 146.030534][ T26] audit: type=1800 audit(1750504677.919:225): pid=5502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.319" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 146.079185][ T5511] [ 146.081565][ T5511] ====================================================== [ 146.088586][ T5511] WARNING: possible circular locking dependency detected [ 146.095626][ T5511] 5.15.185-syzkaller #0 Not tainted [ 146.100851][ T5511] ------------------------------------------------------ [ 146.107883][ T5511] syz.0.319/5511 is trying to acquire lock: [ 146.113787][ T5511] ffff88805f9d07a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 146.122819][ T5511] [ 146.122819][ T5511] but task is already holding lock: [ 146.130199][ T5511] ffff8880727cd238 (&ei->i_data_sem/1){+.+.}-{3:3}, at: move_extent_per_page+0x179d/0x2e10 [ 146.140246][ T5511] [ 146.140246][ T5511] which lock already depends on the new lock. [ 146.140246][ T5511] [ 146.150755][ T5511] [ 146.150755][ T5511] the existing dependency chain (in reverse order) is: [ 146.159801][ T5511] [ 146.159801][ T5511] -> #3 (&ei->i_data_sem/1){+.+.}-{3:3}: [ 146.167667][ T5511] down_write_nested+0x3b/0x60 [ 146.172986][ T5511] ext4_move_extents+0x31e/0xbd0 [ 146.178495][ T5511] ext4_ioctl+0x2cc5/0x3570 [ 146.183546][ T5511] __se_sys_ioctl+0xfa/0x170 [ 146.188684][ T5511] do_syscall_64+0x4c/0xa0 [ 146.193647][ T5511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.200097][ T5511] [ 146.200097][ T5511] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 146.207942][ T5511] down_read+0x44/0x2e0 [ 146.212638][ T5511] ext4_map_blocks+0x32f/0x1b30 [ 146.218032][ T5511] ext4_getblk+0x16d/0x630 [ 146.222992][ T5511] ext4_bread+0x26/0x180 [ 146.227781][ T5511] ext4_quota_write+0x230/0x570 [ 146.233186][ T5511] get_free_dqblk+0x387/0x7d0 [ 146.238399][ T5511] do_insert_tree+0x214/0x1970 [ 146.243714][ T5511] do_insert_tree+0x5b1/0x1970 [ 146.249015][ T5511] do_insert_tree+0x5b1/0x1970 [ 146.254299][ T5511] do_insert_tree+0x5b1/0x1970 [ 146.259597][ T5511] qtree_write_dquot+0x361/0x4b0 [ 146.265082][ T5511] v2_write_dquot+0x108/0x190 [ 146.270309][ T5511] dquot_acquire+0x2d5/0x520 [ 146.275445][ T5511] ext4_acquire_dquot+0x2d9/0x4a0 [ 146.281019][ T5511] dqget+0x778/0xeb0 [ 146.285465][ T5511] __dquot_initialize+0x3b6/0xcb0 [ 146.291043][ T5511] ext4_file_open+0x2d1/0x6a0 [ 146.294938][ T5516] loop2: detected capacity change from 0 to 256 [ 146.296261][ T5511] do_dentry_open+0x7ff/0xf80 [ 146.296283][ T5511] path_openat+0x2682/0x2f30 [ 146.312850][ T5511] do_filp_open+0x1b3/0x3e0 [ 146.317902][ T5511] do_sys_openat2+0x142/0x4a0 [ 146.323111][ T5511] __x64_sys_open+0x11b/0x140 [ 146.328318][ T5511] do_syscall_64+0x4c/0xa0 [ 146.333262][ T5511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.339689][ T5511] [ 146.339689][ T5511] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 146.347774][ T5511] down_read+0x44/0x2e0 [ 146.352465][ T5511] v2_read_dquot+0x4a/0x110 [ 146.357490][ T5511] dquot_acquire+0x152/0x520 [ 146.362613][ T5511] ext4_acquire_dquot+0x2d9/0x4a0 [ 146.368162][ T5511] dqget+0x778/0xeb0 [ 146.372583][ T5511] __dquot_initialize+0x3b6/0xcb0 [ 146.378132][ T5511] ext4_create+0x8c/0x460 [ 146.382981][ T5511] path_openat+0x11e1/0x2f30 [ 146.388099][ T5511] do_filp_open+0x1b3/0x3e0 [ 146.393128][ T5511] do_sys_openat2+0x142/0x4a0 [ 146.398333][ T5511] __x64_sys_openat+0x135/0x160 [ 146.403705][ T5511] do_syscall_64+0x4c/0xa0 [ 146.408648][ T5511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.415069][ T5511] [ 146.415069][ T5511] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 146.422719][ T5511] __lock_acquire+0x2c33/0x7c60 [ 146.428094][ T5511] lock_acquire+0x197/0x3f0 [ 146.433122][ T5511] __mutex_lock_common+0x1eb/0x2390 [ 146.439019][ T5511] mutex_lock_nested+0x17/0x20 [ 146.444315][ T5511] dquot_commit+0x5a/0x410 [ 146.449257][ T5511] ext4_write_dquot+0x1f0/0x360 [ 146.454636][ T5511] mark_all_dquot_dirty+0xf9/0x400 [ 146.460272][ T5511] __dquot_alloc_space+0x5d0/0xe20 [ 146.465920][ T5511] ext4_mb_new_blocks+0xf68/0x4940 [ 146.471556][ T5511] ext4_new_meta_blocks+0x151/0x3a0 [ 146.477281][ T5511] ext4_ext_insert_extent+0x1075/0x47e0 [ 146.483351][ T5511] ext4_split_extent_at+0x788/0xeb0 [ 146.489076][ T5511] ext4_swap_extents+0x10df/0x1c50 [ 146.494713][ T5511] move_extent_per_page+0x17c5/0x2e10 [ 146.500618][ T5511] ext4_move_extents+0x8b4/0xbd0 [ 146.506090][ T5511] ext4_ioctl+0x2cc5/0x3570 [ 146.511118][ T5511] __se_sys_ioctl+0xfa/0x170 [ 146.516235][ T5511] do_syscall_64+0x4c/0xa0 [ 146.521178][ T5511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.527617][ T5511] [ 146.527617][ T5511] other info that might help us debug this: [ 146.527617][ T5511] [ 146.537849][ T5511] Chain exists of: [ 146.537849][ T5511] &dquot->dq_lock --> &ei->i_data_sem/2 --> &ei->i_data_sem/1 [ 146.537849][ T5511] [ 146.551240][ T5511] Possible unsafe locking scenario: [ 146.551240][ T5511] [ 146.558688][ T5511] CPU0 CPU1 [ 146.564054][ T5511] ---- ---- [ 146.569413][ T5511] lock(&ei->i_data_sem/1); [ 146.574030][ T5511] lock(&ei->i_data_sem/2); [ 146.581145][ T5511] lock(&ei->i_data_sem/1); [ 146.588257][ T5511] lock(&dquot->dq_lock); [ 146.592677][ T5511] [ 146.592677][ T5511] *** DEADLOCK *** [ 146.592677][ T5511] [ 146.600814][ T5511] 6 locks held by syz.0.319/5511: [ 146.605833][ T5511] #0: ffff888018f9e460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 146.615501][ T5511] #1: ffff8880727cabd0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: lock_two_nondirectories+0xd5/0x150 [ 146.626735][ T5511] #2: ffff8880727cd3b0 (&sb->s_type->i_mutex_key#9/4){+.+.}-{3:3}, at: ext4_move_extents+0x303/0xbd0 [ 146.637736][ T5511] #3: ffff8880727caa58 (&ei->i_data_sem){++++}-{3:3}, at: move_extent_per_page+0x178b/0x2e10 [ 146.648008][ T5511] #4: ffff8880727cd238 (&ei->i_data_sem/1){+.+.}-{3:3}, at: move_extent_per_page+0x179d/0x2e10 [ 146.658451][ T5511] #5: ffffffff8c23fd58 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 146.667512][ T5511] [ 146.667512][ T5511] stack backtrace: [ 146.673412][ T5511] CPU: 0 PID: 5511 Comm: syz.0.319 Not tainted 5.15.185-syzkaller #0 [ 146.681475][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.691537][ T5511] Call Trace: [ 146.694852][ T5511] [ 146.697788][ T5511] dump_stack_lvl+0x168/0x230 [ 146.702468][ T5511] ? load_image+0x3b0/0x3b0 [ 146.706972][ T5511] ? show_regs_print_info+0x20/0x20 [ 146.712185][ T5511] ? print_circular_bug+0x12b/0x1a0 [ 146.717403][ T5511] check_noncircular+0x274/0x310 [ 146.722352][ T5511] ? add_chain_block+0x940/0x940 [ 146.727296][ T5511] ? lockdep_lock+0xdc/0x1e0 [ 146.731896][ T5511] ? mark_lock+0x94/0x320 [ 146.736230][ T5511] __lock_acquire+0x2c33/0x7c60 [ 146.741093][ T5511] ? check_noncircular+0x16f/0x310 [ 146.746208][ T5511] ? verify_lock_unused+0x140/0x140 [ 146.751439][ T5511] ? mark_lock+0x94/0x320 [ 146.755775][ T5511] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 146.761762][ T5511] ? lock_chain_count+0x20/0x20 [ 146.766646][ T5511] lock_acquire+0x197/0x3f0 [ 146.771187][ T5511] ? dquot_commit+0x5a/0x410 [ 146.775792][ T5511] ? finish_task_switch+0x12f/0x640 [ 146.780992][ T5511] ? __might_sleep+0xf0/0xf0 [ 146.785586][ T5511] ? read_lock_is_recursive+0x10/0x10 [ 146.790974][ T5511] ? __schedule+0x11c0/0x43b0 [ 146.795663][ T5511] ? dquot_commit+0x5a/0x410 [ 146.800265][ T5511] __mutex_lock_common+0x1eb/0x2390 [ 146.805464][ T5511] ? dquot_commit+0x5a/0x410 [ 146.810061][ T5511] ? __might_sleep+0xf0/0xf0 [ 146.814656][ T5511] ? mutex_lock_io_nested+0x60/0x60 [ 146.819864][ T5511] ? preempt_schedule+0xa7/0xb0 [ 146.824720][ T5511] mutex_lock_nested+0x17/0x20 [ 146.829487][ T5511] dquot_commit+0x5a/0x410 [ 146.833921][ T5511] ? __ext4_journal_start_sb+0x1bd/0x360 [ 146.839585][ T5511] ext4_write_dquot+0x1f0/0x360 [ 146.844449][ T5511] mark_all_dquot_dirty+0xf9/0x400 [ 146.849572][ T5511] __dquot_alloc_space+0x5d0/0xe20 [ 146.854696][ T5511] ext4_mb_new_blocks+0xf68/0x4940 [ 146.859818][ T5511] ? __might_sleep+0xf0/0xf0 [ 146.864411][ T5511] ? rcu_lock_release+0x5/0x20 [ 146.869184][ T5511] ? ext4_mb_pa_callback+0xd0/0xd0 [ 146.874296][ T5511] ext4_new_meta_blocks+0x151/0x3a0 [ 146.879499][ T5511] ? ext4_should_retry_alloc+0x2c0/0x2c0 [ 146.885136][ T5511] ? mark_buffer_dirty+0x2aa/0x490 [ 146.890248][ T5511] ? ext4_inode_to_goal_block+0x313/0x450 [ 146.895983][ T5511] ext4_ext_insert_extent+0x1075/0x47e0 [ 146.901555][ T5511] ? ext4_ext_next_allocated_block+0x2b0/0x2b0 [ 146.907812][ T5511] ext4_split_extent_at+0x788/0xeb0 [ 146.913032][ T5511] ? memset+0x1e/0x40 [ 146.917022][ T5511] ? ext4_ext_try_to_merge_right+0x840/0x840 [ 146.923011][ T5511] ext4_swap_extents+0x10df/0x1c50 [ 146.928139][ T5511] move_extent_per_page+0x17c5/0x2e10 [ 146.933530][ T5511] ? mext_check_arguments+0x850/0x850 [ 146.938906][ T5511] ? memset+0x1e/0x40 [ 146.942894][ T5511] ? preempt_count_add+0x8d/0x190 [ 146.947931][ T5511] ? up_write+0x1bb/0x420 [ 146.952266][ T5511] ext4_move_extents+0x8b4/0xbd0 [ 146.957211][ T5511] ? ext4_double_up_write_data_sem+0x30/0x30 [ 146.963195][ T5511] ? sb_start_write+0x112/0x1c0 [ 146.968052][ T5511] ? mnt_want_write_file+0x166/0x200 [ 146.973344][ T5511] ext4_ioctl+0x2cc5/0x3570 [ 146.977855][ T5511] ? ext4_fileattr_set+0x16a0/0x16a0 [ 146.983144][ T5511] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 146.988784][ T5511] ? rcu_lock_release+0x5/0x20 [ 146.993552][ T5511] ? __lock_acquire+0x7c60/0x7c60 [ 146.998589][ T5511] ? kfree+0xef/0x2a0 [ 147.002576][ T5511] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 147.008214][ T5511] ? verify_lock_unused+0x140/0x140 [ 147.013416][ T5511] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 147.018898][ T5511] ? bpf_lsm_file_ioctl+0x5/0x10 [ 147.023835][ T5511] ? security_file_ioctl+0x7c/0xa0 [ 147.028952][ T5511] ? ext4_fileattr_set+0x16a0/0x16a0 [ 147.034240][ T5511] __se_sys_ioctl+0xfa/0x170 [ 147.038834][ T5511] do_syscall_64+0x4c/0xa0 [ 147.043255][ T5511] ? clear_bhb_loop+0x30/0x80 [ 147.047931][ T5511] ? clear_bhb_loop+0x30/0x80 [ 147.052615][ T5511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.058547][ T5511] RIP: 0033:0x7f1c5cc29929 [ 147.062967][ T5511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.082574][ T5511] RSP: 002b:00007f1c5aa70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.090986][ T5511] RAX: ffffffffffffffda RBX: 00007f1c5ce51080 RCX: 00007f1c5cc29929 [ 147.098956][ T5511] RDX: 0000200000000080 RSI: 00000000c028660f RDI: 0000000000000005 [ 147.106938][ T5511] RBP: 00007f1c5ccabb39 R08: 0000000000000000 R09: 0000000000000000 [ 147.114919][ T5511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.122899][ T5511] R13: 0000000000000001 R14: 00007f1c5ce51080 R15: 00007ffd7c29ddb8 [ 147.130884][ T5511] [ 147.165518][ T5518] hub 8-0:1.0: USB hub found [ 147.230184][ T26] audit: type=1800 audit(1750504679.299:226): pid=5516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.321" name="file2" dev="loop2" ino=1048606 res=0 errno=0 [ 147.331767][ T5518] hub 8-0:1.0: 1 port detected