last executing test programs: 5.680959363s ago: executing program 2 (id=32): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa2000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fadvise64(0xffffffffffffffff, 0x1, 0xff, 0x0) 5.60596114s ago: executing program 2 (id=33): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x3fa, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 5.469407114s ago: executing program 2 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 5.169387612s ago: executing program 4 (id=39): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="640a000000000000633297000000000895"], &(0x7f0000000000)='GPL\x00'}, 0x94) 4.98529175s ago: executing program 4 (id=41): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) utime(&(0x7f0000000040)='./file2\x00', 0x0) 3.574480175s ago: executing program 4 (id=50): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 3.521424141s ago: executing program 2 (id=51): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0xd144, 0x100, 0xffffffff, 0x289}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x0) 3.388379393s ago: executing program 2 (id=54): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) socket$key(0xf, 0x3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r3, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x488, 0x30, 0x400, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x63, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x8000005, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x800, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x46, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0xff, 0x9, 0xfffffff2, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfffffffe, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r5, &(0x7f00000004c0)={0x6, 0x20, 0x4c, 0x20, 0xbc4}, 0x48) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.127825669s ago: executing program 2 (id=57): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.985225762s ago: executing program 0 (id=59): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20010000) 2.740207826s ago: executing program 0 (id=62): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) 2.48891904s ago: executing program 4 (id=66): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x1033c0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0x5, 0x3ff]) 2.375198601s ago: executing program 4 (id=67): socket$kcm(0x10, 0x0, 0x4) ioperm(0x4, 0x200000d1, 0x1f94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000001cc0), 0x80000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000000400", @ANYRES32=0x1, @ANYBLOB="000000000100000000000000000000000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000f80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)={0x2000, 0x1, 0x36}, 0x18) mknodat$loop(r5, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 1.844689652s ago: executing program 0 (id=71): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.686080867s ago: executing program 1 (id=74): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000", @ANYRES32=0x0, @ANYBLOB="00020000000000001c0012800b00010047766500000c00028005000d0095000000"], 0x3c}}, 0x4040004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104020000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) 1.629498013s ago: executing program 0 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.531616302s ago: executing program 0 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x651}, 0x18) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x400, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.488424106s ago: executing program 1 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYRES32], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.309143753s ago: executing program 1 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1.215346752s ago: executing program 0 (id=81): syz_socket_connect_nvme_tcp() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000400)=""/245, 0xf5, 0x0, &(0x7f0000000500)=""/70, 0x46}}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000840)="7dc6c1e4019550edc59b2d768d0b", 0x0, 0x2f02, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)='%pI4 \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 1.162063278s ago: executing program 3 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1.124021212s ago: executing program 1 (id=84): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040), 0xfe, 0x563, &(0x7f00000007c0)="$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") r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r2, 0x0, 0x0, 0x1001f0) fallocate(r2, 0x3, 0xf00, 0x10000) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1b, 0x1a, 0x13e, &(0x7f0000000d40)="511c77aa30b5ccfe0e4ff99e9c1487809eb07203b78a09b0bffa17a5e92d713ce2b553ebaeae872c3e21f9d73c387c43a7d9aa2cfa43446f794b12d7fd08668ce077afa0be7a8fca76811058c1342c751a2f30679d97d3020145c9e17c125ea03928c253d3320e0a46fbcd1007cfd521c545b7efadf84d7f8280c3cd69d9e8902c179d9ba28bd798c9d1b492d46efc2307f1a95a2610abe785e145cd4100e5262d128b7450c70684b10265cbd0fe3ab6a7fa5e9a8cbcc68de0bd473095c831aeb9bebdc9440a18f74c528d550333924960c1004d88868d503a036e6af0690fe145c2fa545bb865e49f2addaf6a3f60eb0e577a1a75b6238cecbeadad93c06ed3e89f02618d53fa45601c6caa30bfefe08c29673d1a8305f0196d6f4d1bf6e5177383681eeb4257c1dd57a147719015585c318a00f0c89c293c4e626d5d586c438e8f42ed264fbf7e7a48cbc5ebb5b235808d03d14b9f5e2e35c69f267861e547bb662bd0f83d74acabe9aaf23065ddc8b75ed9545984f954059db307e1c4d3cde117594248553f971a6740debedf7cf6b67462f3a859f1980df8ecfdc62fd010b2a4ca6c948408953f7761b004aafd462dd0be8431e6c6776e9f5b3b0f0d7c7f5986273f9061b58dece1095efad4246a6d3c8cb949092708a76d19ffef1c6ecdb02bb1bb836b08764cfe4d1aa3724860a32c936c0c06343072c4c6f600b8a724f810d1ab4024b644e6d68e6aa3979dcab533f676b3bd50c83bab885444cc0a7b701f80ff3f550916732bc4c1b19343adea8f23e8f9436aad30dd68eb16088998c4b6cd7f8051abb52775533f797d14662ad155ef4b5410ae7797184e48c0980352f8383386189e6c7e2e643c3a00e283f82d69e35b02ed34a6c38e941fa2a1c07e0b498803e1b03775fe75f03f5e077aa78b4353858dc4b9e32c3f3ee7246c5c6e6615216d3724681a1e50ad32f2a5eb3fe20b680467860ada0959ddc3624a376fef2492b640f10c723cb0620ae52f41c41076d437dde0370dafae7337e36550810bd82e4521a2f0d95b00ee6eec3f76bf5985d7cb2f528d5791cb8e1b899976732ea0e334138ae532d79097f53b6f4f1e56ab5e6806b197022e072333d545568972fc3a81ccb59d1bc9018c87d6166b3d716d0885cca54319e295b42bc174896fe4e47fa05f270ad70d8cd22b76f498f03ed14235a3de9873d423e7ffe850fc062d32e342469a71cbe441480e37a1242cb93552b68c09b8daee7c80321f175606614c5525b2c3ca8c480b002534fbfdf2090b3a509f0bed86d86cd248aca2960ae97969a2440c3e01aef22af4995aece9713761c0cc66592eb944c90f173a60526bb304a5781331f384fb8a43a12b029548447e17af94f6aa26449126deb211581d52bf297774fb9f4e8e6c52b4d91bc4e4fe808836b9afe9c658c61d3ffcf1"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r4, 0x0, 0x0, 0xfff, 0xc, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 553.417366ms ago: executing program 3 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) 473.464884ms ago: executing program 1 (id=86): inotify_init() r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) 439.789947ms ago: executing program 3 (id=87): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) 281.374882ms ago: executing program 3 (id=88): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) close(r0) 267.060324ms ago: executing program 1 (id=89): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 153.686265ms ago: executing program 3 (id=90): utimensat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 389.25µs ago: executing program 3 (id=91): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=92): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x4020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x14010, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000004c0)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 54.421797][ T4170] cgroup: Unknown subsys name 'net' [ 54.553076][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.052032][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.068275][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 58.126622][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 58.190639][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 58.206175][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.252272][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.260143][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.268513][ T4189] device bridge_slave_0 entered promiscuous mode [ 58.293371][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 58.304738][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.312186][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.320804][ T4189] device bridge_slave_1 entered promiscuous mode [ 58.399329][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.406491][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.415307][ T4183] device bridge_slave_0 entered promiscuous mode [ 58.425050][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.437659][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.474641][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.482075][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.490408][ T4183] device bridge_slave_1 entered promiscuous mode [ 58.509067][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.516146][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.524886][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.532376][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.539658][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.547638][ T4180] device bridge_slave_0 entered promiscuous mode [ 58.579319][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.586437][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.595303][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.603774][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.611151][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.619593][ T4180] device bridge_slave_1 entered promiscuous mode [ 58.636575][ T4189] team0: Port device team_slave_0 added [ 58.650234][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.657316][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.665320][ T4190] device bridge_slave_0 entered promiscuous mode [ 58.687321][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.698422][ T4189] team0: Port device team_slave_1 added [ 58.705520][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.714836][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.722015][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.730279][ T4190] device bridge_slave_1 entered promiscuous mode [ 58.773631][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.785305][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.817058][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.828328][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.844558][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.852735][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.879626][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.893925][ T4183] team0: Port device team_slave_0 added [ 58.902338][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.932441][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.939884][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.966021][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.978555][ T4183] team0: Port device team_slave_1 added [ 58.989553][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.001450][ T4180] team0: Port device team_slave_0 added [ 59.009493][ T4185] team0: Port device team_slave_0 added [ 59.046048][ T4180] team0: Port device team_slave_1 added [ 59.053610][ T4185] team0: Port device team_slave_1 added [ 59.067291][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.074518][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.100821][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.114850][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.121879][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.148247][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.191474][ T4190] team0: Port device team_slave_0 added [ 59.213428][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.220964][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.247476][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.260737][ T4190] team0: Port device team_slave_1 added [ 59.272806][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.280128][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.306401][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.320862][ T4189] device hsr_slave_0 entered promiscuous mode [ 59.328145][ T4189] device hsr_slave_1 entered promiscuous mode [ 59.335327][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.342447][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.368806][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.394695][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.401827][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.427846][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.457403][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.464762][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.491578][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.515293][ T4183] device hsr_slave_0 entered promiscuous mode [ 59.522494][ T4183] device hsr_slave_1 entered promiscuous mode [ 59.529450][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.537275][ T4183] Cannot create hsr debugfs directory [ 59.543280][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.550539][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.576577][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.646739][ T4180] device hsr_slave_0 entered promiscuous mode [ 59.654252][ T4180] device hsr_slave_1 entered promiscuous mode [ 59.661190][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.669095][ T4180] Cannot create hsr debugfs directory [ 59.691366][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.698685][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.705280][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.713348][ T4185] Cannot create hsr debugfs directory [ 59.728449][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 59.735335][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 59.755763][ T4190] device hsr_slave_0 entered promiscuous mode [ 59.762473][ T4190] device hsr_slave_1 entered promiscuous mode [ 59.769447][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.777008][ T4190] Cannot create hsr debugfs directory [ 59.807682][ T4192] Bluetooth: hci2: command 0x0409 tx timeout [ 59.817812][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 59.823013][ T4192] Bluetooth: hci4: command 0x0409 tx timeout [ 60.074937][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.088214][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.098561][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.108120][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.170625][ T4180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.184140][ T4180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.195467][ T4180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.212635][ T4180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.253753][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.264728][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.305956][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.317004][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.338108][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.348824][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.369936][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.402347][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.414595][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.456102][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.470804][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.492375][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.502530][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.511524][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.520824][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.530261][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.537654][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.553461][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.562119][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.571009][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.579615][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.586752][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.595088][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.605489][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.617212][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.640982][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.651260][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.678154][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.687262][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.697005][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.708380][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.717022][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.735998][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.759201][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.769507][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.784320][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.796124][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.816411][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.825748][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.859026][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.869233][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.884274][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.924412][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.934796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.944367][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.956228][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.963404][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.973043][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.981981][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.991030][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.998233][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.006401][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.021074][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.031125][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.075658][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.083668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.100898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.116336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.125561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.138244][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.157367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.165472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.175008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.185033][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.192269][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.200364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.209650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.218436][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.225480][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.233600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.252211][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.274990][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.293204][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.305928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.315568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.325185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.335067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.343500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.351636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.359245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.368279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.376537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.392346][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.401328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.412348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.436769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.445608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.454492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.462840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.473497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.482141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.492039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.501056][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.508271][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.515893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.535630][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.546390][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.553847][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.565526][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.575288][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.582479][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.623578][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.637867][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.656222][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.666071][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.681062][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.689905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.699182][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.708105][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.716646][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.726326][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.735716][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.744855][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.752056][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.761711][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.770515][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.778983][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.786101][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.794068][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.804267][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.808367][ T4249] Bluetooth: hci1: command 0x041b tx timeout [ 61.812815][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 61.824414][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.832893][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.864400][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.887889][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 61.888182][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 61.893947][ T4249] Bluetooth: hci2: command 0x041b tx timeout [ 61.900973][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.915992][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.925038][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.936696][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.946723][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.992299][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.002151][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.012066][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.020896][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.030731][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.040117][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.049513][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.057826][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.066137][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.074312][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.082237][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.098731][ T4189] device veth0_vlan entered promiscuous mode [ 62.112266][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.134685][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.145101][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.156405][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.170566][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.180140][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.189480][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.204515][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.212467][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.225101][ T4189] device veth1_vlan entered promiscuous mode [ 62.255586][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.270976][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.285505][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.305230][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.327215][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.355784][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.380684][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.408716][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.422360][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.442347][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.459950][ T4189] device veth0_macvtap entered promiscuous mode [ 62.471479][ T4189] device veth1_macvtap entered promiscuous mode [ 62.499226][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.508575][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.516488][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.526866][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.549465][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.562043][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.576294][ T4180] device veth0_vlan entered promiscuous mode [ 62.592824][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.604578][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.615907][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.632871][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.644525][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.654427][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.663692][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.672687][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.683193][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.692145][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.706381][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.721337][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.730466][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.740954][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.765026][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.781835][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.790903][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.801872][ T4180] device veth1_vlan entered promiscuous mode [ 62.826551][ T4190] device veth0_vlan entered promiscuous mode [ 62.837325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.846992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.857183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.865413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.873631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.882657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.891191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.899170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.917935][ T4190] device veth1_vlan entered promiscuous mode [ 62.934269][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.016600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.025150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.034054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.043685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.093654][ T4180] device veth0_macvtap entered promiscuous mode [ 63.102093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.112419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.125545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.138248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.148016][ T4190] device veth0_macvtap entered promiscuous mode [ 63.164024][ T4190] device veth1_macvtap entered promiscuous mode [ 63.175731][ T4180] device veth1_macvtap entered promiscuous mode [ 63.187516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.196179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.220504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.232128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.260796][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.277673][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.283771][ T4183] device veth0_vlan entered promiscuous mode [ 63.296075][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.308275][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.321264][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.331635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.339849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.348602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.356717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.366064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.378882][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.390343][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.400519][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.412778][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.425120][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.436867][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.448138][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.459244][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.470407][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.470904][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.479884][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.496789][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.497820][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.506746][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.521678][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.534672][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.546190][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.556397][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.567121][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.578605][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.594964][ T4180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.605186][ T4180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.614319][ T4180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.624427][ T4180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.641512][ T4183] device veth1_vlan entered promiscuous mode [ 63.659689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.668346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.676393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.686400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.698898][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.708600][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.717535][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.726445][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.771125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.783960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.805816][ T4183] device veth0_macvtap entered promiscuous mode [ 63.888433][ T4249] Bluetooth: hci1: command 0x040f tx timeout [ 63.889675][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 63.909096][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.923071][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.939128][ T4183] device veth1_macvtap entered promiscuous mode [ 63.962627][ T4185] device veth0_vlan entered promiscuous mode [ 63.975838][ T4250] Bluetooth: hci2: command 0x040f tx timeout [ 63.982065][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 63.989959][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 64.015411][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.026712][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.035245][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.044085][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.090722][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.101693][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.109885][ T4185] device veth1_vlan entered promiscuous mode [ 64.124643][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.132722][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.141613][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.150465][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.163144][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.173889][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.184493][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.195252][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.205504][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.216812][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.229072][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.243705][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.258001][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.261778][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.270730][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.284358][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.295121][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.306513][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.317430][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.328454][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.338708][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.349580][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.361390][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.383665][ T4185] device veth0_macvtap entered promiscuous mode [ 64.445288][ T4293] loop1: detected capacity change from 0 to 1024 [ 64.464235][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.475140][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.485562][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.495911][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.498387][ T4293] EXT4-fs (loop1): Ignoring removed bh option [ 64.506330][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.529661][ T4185] device veth1_macvtap entered promiscuous mode [ 64.546972][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.553313][ T4293] EXT4-fs (loop1): inline encryption not supported [ 64.564115][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.576391][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.585680][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.588818][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.602380][ T4293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 64.614907][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.631017][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.645031][ T4293] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.2: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.656897][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.666954][ T4293] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 64.675700][ T4293] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.2: lblock 0 mapped to illegal pblock 48 (length 1) [ 64.684280][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.696721][ T4293] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 64.711109][ T4293] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.2: Failed to acquire dquot type 0 [ 64.711617][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.733110][ T4293] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 64.735218][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.751345][ T4293] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.2: mark_inode_dirty error [ 64.759101][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.771255][ T4293] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 64.777905][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.787125][ T4293] EXT4-fs (loop1): 1 orphan inode deleted [ 64.801682][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.801698][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.801714][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.802981][ T156] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.815630][ T4293] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 64.832066][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.881387][ T7] cfg80211: failed to load regulatory.db [ 64.894890][ T156] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 64.935874][ T156] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:3: Failed to release dquot type 0 [ 64.981391][ T4180] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 64.989236][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.002847][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.010867][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.013402][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.033931][ T4180] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 65.034602][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.049255][ T4180] EXT4-fs error (device loop1): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 65.086042][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.098192][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.108451][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.119704][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.130047][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.130066][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.150839][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.161406][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.173939][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.193903][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.225746][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.280815][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.294753][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.305479][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.314700][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.615392][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.650509][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.670867][ T4316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 65.692433][ T26] audit: type=1326 audit(1766370870.024:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 65.714689][ T4316] device syz_tun entered promiscuous mode [ 65.734203][ T26] audit: type=1326 audit(1766370870.024:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 65.764157][ T26] audit: type=1326 audit(1766370870.044:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 65.790222][ T4316] syz_tun: refused to change device tx_queue_len [ 65.799718][ T26] audit: type=1326 audit(1766370870.044:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 65.835913][ T26] audit: type=1326 audit(1766370870.044:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 65.874824][ T26] audit: type=1326 audit(1766370870.054:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 65.898146][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.915035][ T26] audit: type=1326 audit(1766370870.054:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 65.947156][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.973064][ T4324] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16'. [ 65.975191][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.997739][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 66.006199][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 66.049613][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 66.064379][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 66.073635][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.089132][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 66.107019][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.160977][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.181930][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.200881][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.225449][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.252734][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.266979][ T4327] loop0: detected capacity change from 0 to 1024 [ 66.401407][ T4327] EXT4-fs (loop0): Ignoring removed bh option [ 66.433794][ T4327] EXT4-fs (loop0): inline encryption not supported [ 66.452696][ T4327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 66.490320][ T4327] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.17: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.628083][ T4327] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.17: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.704366][ T4327] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.17: Failed to acquire dquot type 0 [ 66.744022][ T4327] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 66.785314][ T4327] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.17: mark_inode_dirty error [ 66.810105][ T4327] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 66.869201][ T4327] EXT4-fs (loop0): 1 orphan inode deleted [ 66.880249][ T4327] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 66.906313][ T4296] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.934975][ T4362] loop3: detected capacity change from 0 to 512 [ 66.961580][ T4296] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:6: Failed to release dquot type 0 [ 66.984441][ T4327] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.17: Invalid inode table block 1 in block_group 0 [ 67.044833][ T4362] EXT4-fs (loop3): Unrecognized mount option "seclabel" or missing value [ 67.054475][ T4327] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 67.093887][ T4327] EXT4-fs error (device loop0): ext4_quota_off:6515: inode #3: comm syz.0.17: mark_inode_dirty error [ 67.195155][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 67.315043][ T4366] syz.2.28 (4366) used greatest stack depth: 17456 bytes left [ 67.575776][ T4383] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 67.629264][ T4383] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 67.669180][ T4386] loop0: detected capacity change from 0 to 128 [ 67.704234][ T4384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 67.726943][ T4386] ======================================================= [ 67.726943][ T4386] WARNING: The mand mount option has been deprecated and [ 67.726943][ T4386] and is ignored by this kernel. Remove the mand [ 67.726943][ T4386] option from the mount to silence this warning. [ 67.726943][ T4386] ======================================================= [ 67.767088][ T4389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 68.367698][ T4407] process 'syz.0.43' launched '/dev/fd/6' with NULL argv: empty string added [ 68.457244][ T4401] loop4: detected capacity change from 0 to 8192 [ 68.550283][ T4409] loop1: detected capacity change from 0 to 1024 [ 69.324897][ T4412] can: request_module (can-proto-3) failed. [ 69.336738][ T4409] EXT4-fs (loop1): Ignoring removed bh option [ 69.520009][ T4409] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,bsdgroups,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 69.610708][ T4425] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 69.862823][ T4437] loop1: detected capacity change from 0 to 128 [ 70.026307][ T4437] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.039175][ T4437] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.200791][ T4449] syz.0.59[4449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.200898][ T4449] syz.0.59[4449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.219066][ T145] Bluetooth: hci5: Frame reassembly failed (-84) [ 70.255039][ T4449] netlink: 'syz.0.59': attribute type 21 has an invalid length. [ 70.278726][ T4449] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 70.303916][ T4449] netlink: 144 bytes leftover after parsing attributes in process `syz.0.59'. [ 70.511477][ T4458] loop1: detected capacity change from 0 to 1024 [ 70.526073][ T26] kauditd_printk_skb: 245 callbacks suppressed [ 70.526088][ T26] audit: type=1326 audit(1766370874.854:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 70.585820][ T4458] EXT4-fs (loop1): inline encryption not supported [ 70.610606][ T4458] EXT4-fs (loop1): Ignoring removed orlov option [ 70.673900][ T26] audit: type=1326 audit(1766370874.894:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 70.676426][ T4462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.65'. [ 70.697394][ T26] audit: type=1326 audit(1766370874.904:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 70.749975][ T4458] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c018, mo2=0002] [ 70.777803][ T4458] System zones: 0-1, 3-12 [ 70.783571][ T4458] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,min_batch_time=0x00000000000004ab,data_err=ignore,nobarrier,inlinecrypt,orlov,nogrpid,discard,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 70.807765][ T26] audit: type=1326 audit(1766370874.904:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 70.834209][ T26] audit: type=1326 audit(1766370874.904:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 70.978452][ T26] audit: type=1800 audit(1766370875.304:256): pid=4458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.64" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 71.031843][ T4462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 71.332388][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.339201][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492699][ T4486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.74'. [ 71.547317][ T4486] unsupported nla_type 52263 [ 71.722380][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'. [ 72.064064][ T26] audit: type=1326 audit(1766370876.394:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 72.104469][ T4510] loop1: detected capacity change from 0 to 1024 [ 72.130142][ T26] audit: type=1326 audit(1766370876.394:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 72.221084][ T26] audit: type=1326 audit(1766370876.424:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 72.297990][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 72.306640][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 72.311823][ T26] audit: type=1326 audit(1766370876.424:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28477bb749 code=0x7ffc0000 [ 72.348994][ T4510] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.569457][ T4514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.85'. [ 72.623407][ T4514] netem: unknown loss type 13 [ 72.638693][ T4514] netem: change failed [ 72.947230][ T4522] loop1: detected capacity change from 0 to 512 [ 73.146756][ T4522] [ 73.149138][ T4522] ====================================================== [ 73.156435][ T4522] WARNING: possible circular locking dependency detected [ 73.163524][ T4522] syzkaller #0 Not tainted [ 73.168129][ T4522] ------------------------------------------------------ [ 73.175419][ T4522] syz.1.89/4522 is trying to acquire lock: [ 73.181250][ T4522] ffff88807e21ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1c0/0x2d20 [ 73.191388][ T4522] [ 73.191388][ T4522] but task is already holding lock: [ 73.198908][ T4522] ffff888077d50650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 73.208164][ T4522] [ 73.208164][ T4522] which lock already depends on the new lock. [ 73.208164][ T4522] [ 73.218758][ T4522] [ 73.218758][ T4522] the existing dependency chain (in reverse order) is: [ 73.227875][ T4522] [ 73.227875][ T4522] -> #1 (sb_internal){.+.+}-{0:0}: [ 73.235208][ T4522] percpu_down_read+0x46/0x1b0 [ 73.240528][ T4522] ext4_evict_inode+0x444/0x1080 [ 73.246101][ T4522] evict+0x485/0x870 [ 73.250534][ T4522] ext4_ext_migrate+0xc0a/0xe50 [ 73.255930][ T4522] ext4_ioctl+0x18a5/0x3590 [ 73.261199][ T4522] __se_sys_ioctl+0xfa/0x170 [ 73.266335][ T4522] do_syscall_64+0x4c/0xa0 [ 73.271385][ T4522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.277817][ T4522] [ 73.277817][ T4522] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 73.286268][ T4522] __lock_acquire+0x2c33/0x7c60 [ 73.291784][ T4522] lock_acquire+0x197/0x3f0 [ 73.296836][ T4522] percpu_down_read+0x46/0x1b0 [ 73.302229][ T4522] ext4_writepages+0x1c0/0x2d20 [ 73.307706][ T4522] do_writepages+0x48d/0x6d0 [ 73.313017][ T4522] __writeback_single_inode+0x153/0xda0 [ 73.319106][ T4522] writeback_single_inode+0x221/0x8b0 [ 73.325326][ T4522] write_inode_now+0x217/0x280 [ 73.330862][ T4522] iput+0x5ab/0x8a0 [ 73.335216][ T4522] ext4_xattr_set_entry+0x10ff/0x3d30 [ 73.341136][ T4522] ext4_xattr_block_set+0x4f7/0x2d30 [ 73.346970][ T4522] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 73.353416][ T4522] __ext4_expand_extra_isize+0x301/0x3e0 [ 73.359683][ T4522] __ext4_mark_inode_dirty+0x469/0x700 [ 73.365774][ T4522] ext4_evict_inode+0xa81/0x1080 [ 73.371249][ T4522] evict+0x485/0x870 [ 73.375685][ T4522] ext4_orphan_cleanup+0xaa9/0x12e0 [ 73.381421][ T4522] ext4_fill_super+0x92f0/0x9a60 [ 73.386925][ T4522] mount_bdev+0x287/0x3c0 [ 73.391953][ T4522] legacy_get_tree+0xe6/0x180 [ 73.397168][ T4522] vfs_get_tree+0x88/0x270 [ 73.402116][ T4522] do_new_mount+0x24a/0xa40 [ 73.407153][ T4522] __se_sys_mount+0x2d6/0x3c0 [ 73.412458][ T4522] do_syscall_64+0x4c/0xa0 [ 73.417625][ T4522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.424257][ T4522] [ 73.424257][ T4522] other info that might help us debug this: [ 73.424257][ T4522] [ 73.434621][ T4522] Possible unsafe locking scenario: [ 73.434621][ T4522] [ 73.442086][ T4522] CPU0 CPU1 [ 73.447459][ T4522] ---- ---- [ 73.452836][ T4522] lock(sb_internal); [ 73.456925][ T4522] lock(&sbi->s_writepages_rwsem); [ 73.464660][ T4522] lock(sb_internal); [ 73.471357][ T4522] lock(&sbi->s_writepages_rwsem); [ 73.476661][ T4522] [ 73.476661][ T4522] *** DEADLOCK *** [ 73.476661][ T4522] [ 73.484814][ T4522] 3 locks held by syz.1.89/4522: [ 73.489772][ T4522] #0: ffff888077d500e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 73.500004][ T4522] #1: ffff888077d50650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 73.509570][ T4522] #2: ffff88805e4bda80 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 73.519830][ T4522] [ 73.519830][ T4522] stack backtrace: [ 73.525709][ T4522] CPU: 1 PID: 4522 Comm: syz.1.89 Not tainted syzkaller #0 [ 73.532988][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.543378][ T4522] Call Trace: [ 73.546650][ T4522] [ 73.549661][ T4522] dump_stack_lvl+0x168/0x230 [ 73.554329][ T4522] ? load_image+0x3b0/0x3b0 [ 73.558824][ T4522] ? show_regs_print_info+0x20/0x20 [ 73.564017][ T4522] ? print_circular_bug+0x12b/0x1a0 [ 73.569304][ T4522] check_noncircular+0x274/0x310 [ 73.574265][ T4522] ? add_chain_block+0x940/0x940 [ 73.579270][ T4522] ? _find_first_zero_bit+0xce/0xf0 [ 73.584631][ T4522] ? add_lock_to_list+0x18d/0x280 [ 73.589667][ T4522] __lock_acquire+0x2c33/0x7c60 [ 73.594554][ T4522] ? verify_lock_unused+0x140/0x140 [ 73.599782][ T4522] lock_acquire+0x197/0x3f0 [ 73.604455][ T4522] ? ext4_writepages+0x1c0/0x2d20 [ 73.609500][ T4522] ? check_path+0x40/0x40 [ 73.613920][ T4522] ? __might_sleep+0xf0/0xf0 [ 73.618594][ T4522] ? read_lock_is_recursive+0x10/0x10 [ 73.623991][ T4522] ? mark_lock+0x94/0x320 [ 73.628329][ T4522] ? __lock_acquire+0x13ad/0x7c60 [ 73.633396][ T4522] percpu_down_read+0x46/0x1b0 [ 73.640054][ T4522] ? ext4_writepages+0x1c0/0x2d20 [ 73.645589][ T4522] ext4_writepages+0x1c0/0x2d20 [ 73.650544][ T4522] ? rcu_is_watching+0x11/0xa0 [ 73.655329][ T4522] ? lock_release+0xba/0x870 [ 73.660037][ T4522] ? rcu_lock_release+0x5/0x20 [ 73.665162][ T4522] ? mark_lock+0x94/0x320 [ 73.669574][ T4522] ? verify_lock_unused+0x140/0x140 [ 73.674795][ T4522] ? mark_lock+0x94/0x320 [ 73.679127][ T4522] ? ext4_readpage+0x2e0/0x2e0 [ 73.683982][ T4522] ? __lock_acquire+0x13ad/0x7c60 [ 73.689091][ T4522] ? rcu_lock_release+0x5/0x20 [ 73.693874][ T4522] ? lock_chain_count+0x20/0x20 [ 73.698792][ T4522] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 73.704213][ T4522] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 73.710251][ T4522] ? mark_lock+0x94/0x320 [ 73.714724][ T4522] ? ext4_readpage+0x2e0/0x2e0 [ 73.719606][ T4522] do_writepages+0x48d/0x6d0 [ 73.724352][ T4522] ? __writepage+0x130/0x130 [ 73.729005][ T4522] ? writeback_single_inode+0x216/0x8b0 [ 73.734609][ T4522] ? __lock_acquire+0x7c60/0x7c60 [ 73.739647][ T4522] ? do_raw_spin_lock+0x11d/0x280 [ 73.744779][ T4522] __writeback_single_inode+0x153/0xda0 [ 73.750325][ T4522] writeback_single_inode+0x221/0x8b0 [ 73.755799][ T4522] ? write_inode_now+0x280/0x280 [ 73.760819][ T4522] write_inode_now+0x217/0x280 [ 73.765588][ T4522] ? bdi_split_work_to_wbs+0x820/0x820 [ 73.771056][ T4522] ? do_raw_spin_unlock+0x11d/0x230 [ 73.776352][ T4522] iput+0x5ab/0x8a0 [ 73.780155][ T4522] ext4_xattr_set_entry+0x10ff/0x3d30 [ 73.785546][ T4522] ? ext4_xattr_ibody_set+0x330/0x330 [ 73.790912][ T4522] ? rcu_is_watching+0x11/0xa0 [ 73.795671][ T4522] ? kmem_cache_free+0x14c/0x210 [ 73.800616][ T4522] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 73.806688][ T4522] ext4_xattr_block_set+0x4f7/0x2d30 [ 73.812013][ T4522] ? do_raw_spin_unlock+0x11d/0x230 [ 73.817210][ T4522] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 73.823102][ T4522] ? ext4_xattr_block_find+0x500/0x500 [ 73.828574][ T4522] ? ext4_xattr_block_find+0x433/0x500 [ 73.834048][ T4522] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 73.839855][ T4522] __ext4_expand_extra_isize+0x301/0x3e0 [ 73.845485][ T4522] __ext4_mark_inode_dirty+0x469/0x700 [ 73.850938][ T4522] ext4_evict_inode+0xa81/0x1080 [ 73.855871][ T4522] ? _raw_spin_unlock+0x24/0x40 [ 73.860722][ T4522] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 73.866694][ T4522] ? do_raw_spin_unlock+0x11d/0x230 [ 73.871980][ T4522] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 73.877865][ T4522] evict+0x485/0x870 [ 73.881758][ T4522] ? __lock_acquire+0x7c60/0x7c60 [ 73.886949][ T4522] ? proc_nr_inodes+0x320/0x320 [ 73.892065][ T4522] ? do_raw_spin_unlock+0x11d/0x230 [ 73.897271][ T4522] ? _raw_spin_unlock+0x24/0x40 [ 73.902120][ T4522] ? iput+0x706/0x8a0 [ 73.906199][ T4522] ext4_orphan_cleanup+0xaa9/0x12e0 [ 73.911576][ T4522] ? ext4_orphan_del+0xb90/0xb90 [ 73.916509][ T4522] ? errseq_check_and_advance+0x62/0x120 [ 73.922228][ T4522] ext4_fill_super+0x92f0/0x9a60 [ 73.927378][ T4522] ? ext4_mount+0x40/0x40 [ 73.931798][ T4522] ? set_blocksize+0x1f1/0x370 [ 73.936651][ T4522] ? sb_set_blocksize+0xa5/0xe0 [ 73.941513][ T4522] mount_bdev+0x287/0x3c0 [ 73.946010][ T4522] ? ext4_mount+0x40/0x40 [ 73.950330][ T4522] legacy_get_tree+0xe6/0x180 [ 73.955000][ T4522] ? ext4_errno_to_code+0x160/0x160 [ 73.960297][ T4522] vfs_get_tree+0x88/0x270 [ 73.965074][ T4522] do_new_mount+0x24a/0xa40 [ 73.969697][ T4522] __se_sys_mount+0x2d6/0x3c0 [ 73.974414][ T4522] ? __x64_sys_mount+0xc0/0xc0 [ 73.979197][ T4522] ? lockdep_hardirqs_on+0x94/0x140 [ 73.984473][ T4522] ? __x64_sys_mount+0x1c/0xc0 [ 73.989234][ T4522] do_syscall_64+0x4c/0xa0 [ 73.993736][ T4522] ? clear_bhb_loop+0x30/0x80 [ 73.998515][ T4522] ? clear_bhb_loop+0x30/0x80 [ 74.003185][ T4522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.009192][ T4522] RIP: 0033:0x7fb00cbe5eea [ 74.013729][ T4522] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.033697][ T4522] RSP: 002b:00007fb00ae4ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.044305][ T4522] RAX: ffffffffffffffda RBX: 00007fb00ae4aef0 RCX: 00007fb00cbe5eea [ 74.052615][ T4522] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb00ae4aeb0 [ 74.060660][ T4522] RBP: 0000200000000180 R08: 00007fb00ae4aef0 R09: 0000000000800700 [ 74.068637][ T4522] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 74.076628][ T4522] R13: 00007fb00ae4aeb0 R14: 000000000000046f R15: 000000000000002c [ 74.084714][ T4522] [ 74.110443][ T4522] ------------[ cut here ]------------ [ 74.121520][ T4522] EA inode 11 i_nlink=2 [ 74.121742][ T4522] WARNING: CPU: 0 PID: 4522 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 74.145947][ T4522] Modules linked in: [ 74.159748][ T4522] CPU: 1 PID: 4522 Comm: syz.1.89 Not tainted syzkaller #0 [ 74.166996][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.178288][ T4522] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 74.184925][ T4522] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 df a2 ff 49 8b 37 48 c7 c7 c0 8c 1d 8a 89 da e8 d2 d2 7d 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 74.205640][ T4522] RSP: 0018:ffffc9000303f140 EFLAGS: 00010246 [ 74.212128][ T4522] RAX: e4b02aea263a3600 RBX: 0000000000000002 RCX: 0000000000080000 [ 74.221610][ T4522] RDX: ffffc90005669000 RSI: 000000000007ffff RDI: 0000000000080000 [ 74.231098][ T4522] RBP: ffffc9000303f230 R08: dffffc0000000000 R09: ffffed1017204f2c [ 74.240936][ T4522] R10: ffffed1017204f2c R11: 1ffff11017204f2b R12: ffffc9000303f1a0 [ 74.249149][ T4522] R13: ffff888060962088 R14: dffffc0000000000 R15: ffff8880609620c8 [ 74.257232][ T4522] FS: 00007fb00ae4b6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 74.268204][ T4522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.274922][ T4522] CR2: 000055558500c5c8 CR3: 000000005f30d000 CR4: 00000000003506e0 [ 74.284124][ T4522] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.293620][ T4522] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.302802][ T4522] Call Trace: [ 74.306103][ T4522] [ 74.310868][ T4522] ? ext4_xattr_block_csum+0x500/0x500 [ 74.316357][ T4522] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 74.323453][ T4522] ? mb_cache_entry_create+0x62e/0x890 [ 74.330198][ T4522] ext4_xattr_set_entry+0xed0/0x3d30 [ 74.336388][ T4522] ? rcu_is_watching+0x11/0xa0 [ 74.342586][ T4522] ? mb_cache_entry_create+0x676/0x890 [ 74.349547][ T4522] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 74.355070][ T4522] ? ext4_xattr_ibody_set+0x330/0x330 [ 74.361613][ T4522] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 74.367809][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 74.374980][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 74.382039][ T4522] ? ext4_xattr_block_find+0x500/0x500 [ 74.388834][ T4522] ext4_xattr_ibody_set+0x112/0x330 [ 74.394159][ T4522] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 74.400835][ T4522] __ext4_expand_extra_isize+0x301/0x3e0 [ 74.406529][ T4522] __ext4_mark_inode_dirty+0x469/0x700 [ 74.412231][ T4522] ext4_evict_inode+0xa81/0x1080 [ 74.417242][ T4522] ? _raw_spin_unlock+0x24/0x40 [ 74.422165][ T4522] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 74.428583][ T4522] ? do_raw_spin_unlock+0x11d/0x230 [ 74.433852][ T4522] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 74.440452][ T4522] evict+0x485/0x870 [ 74.444376][ T4522] ? __lock_acquire+0x7c60/0x7c60 [ 74.449777][ T4522] ? proc_nr_inodes+0x320/0x320 [ 74.454707][ T4522] ? do_raw_spin_unlock+0x11d/0x230 [ 74.459966][ T4522] ? _raw_spin_unlock+0x24/0x40 [ 74.465062][ T4522] ? iput+0x706/0x8a0 [ 74.469218][ T4522] ext4_orphan_cleanup+0xaa9/0x12e0 [ 74.474443][ T4522] ? ext4_orphan_del+0xb90/0xb90 [ 74.479471][ T4522] ? errseq_check_and_advance+0x62/0x120 [ 74.485125][ T4522] ext4_fill_super+0x92f0/0x9a60 [ 74.490202][ T4522] ? ext4_mount+0x40/0x40 [ 74.494552][ T4522] ? set_blocksize+0x1f1/0x370 [ 74.499395][ T4522] ? sb_set_blocksize+0xa5/0xe0 [ 74.504492][ T4522] mount_bdev+0x287/0x3c0 [ 74.508895][ T4522] ? ext4_mount+0x40/0x40 [ 74.513245][ T4522] legacy_get_tree+0xe6/0x180 [ 74.518038][ T4522] ? ext4_errno_to_code+0x160/0x160 [ 74.523263][ T4522] vfs_get_tree+0x88/0x270 [ 74.530653][ T4522] do_new_mount+0x24a/0xa40 [ 74.535482][ T4522] __se_sys_mount+0x2d6/0x3c0 [ 74.541211][ T4522] ? __x64_sys_mount+0xc0/0xc0 [ 74.546029][ T4522] ? lockdep_hardirqs_on+0x94/0x140 [ 74.551349][ T4522] ? __x64_sys_mount+0x1c/0xc0 [ 74.556135][ T4522] do_syscall_64+0x4c/0xa0 [ 74.560673][ T4522] ? clear_bhb_loop+0x30/0x80 [ 74.565537][ T4522] ? clear_bhb_loop+0x30/0x80 [ 74.570722][ T4522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.576798][ T4522] RIP: 0033:0x7fb00cbe5eea [ 74.581461][ T4522] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.601202][ T4522] RSP: 002b:00007fb00ae4ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.609754][ T4522] RAX: ffffffffffffffda RBX: 00007fb00ae4aef0 RCX: 00007fb00cbe5eea [ 74.619938][ T4522] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb00ae4aeb0 [ 74.628101][ T4522] RBP: 0000200000000180 R08: 00007fb00ae4aef0 R09: 0000000000800700 [ 74.636255][ T4522] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 74.645479][ T4522] R13: 00007fb00ae4aeb0 R14: 000000000000046f R15: 000000000000002c [ 74.654214][ T4522] [ 74.657255][ T4522] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.664542][ T4522] CPU: 1 PID: 4522 Comm: syz.1.89 Not tainted syzkaller #0 [ 74.671770][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.681839][ T4522] Call Trace: [ 74.685133][ T4522] [ 74.688194][ T4522] dump_stack_lvl+0x168/0x230 [ 74.693169][ T4522] ? show_regs_print_info+0x20/0x20 [ 74.698391][ T4522] ? load_image+0x3b0/0x3b0 [ 74.703011][ T4522] panic+0x2c9/0x7f0 [ 74.706924][ T4522] ? bpf_jit_dump+0xd0/0xd0 [ 74.711447][ T4522] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 74.717457][ T4522] __warn+0x248/0x2b0 [ 74.721565][ T4522] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 74.727589][ T4522] report_bug+0x1b7/0x2e0 [ 74.732008][ T4522] handle_bug+0x3a/0x70 [ 74.736194][ T4522] exc_invalid_op+0x16/0x40 [ 74.740718][ T4522] asm_exc_invalid_op+0x16/0x20 [ 74.745592][ T4522] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 74.752219][ T4522] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 df a2 ff 49 8b 37 48 c7 c7 c0 8c 1d 8a 89 da e8 d2 d2 7d 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 74.771956][ T4522] RSP: 0018:ffffc9000303f140 EFLAGS: 00010246 [ 74.778052][ T4522] RAX: e4b02aea263a3600 RBX: 0000000000000002 RCX: 0000000000080000 [ 74.786137][ T4522] RDX: ffffc90005669000 RSI: 000000000007ffff RDI: 0000000000080000 [ 74.794247][ T4522] RBP: ffffc9000303f230 R08: dffffc0000000000 R09: ffffed1017204f2c [ 74.802448][ T4522] R10: ffffed1017204f2c R11: 1ffff11017204f2b R12: ffffc9000303f1a0 [ 74.810713][ T4522] R13: ffff888060962088 R14: dffffc0000000000 R15: ffff8880609620c8 [ 74.818728][ T4522] ? ext4_xattr_block_csum+0x500/0x500 [ 74.824422][ T4522] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 74.829904][ T4522] ? mb_cache_entry_create+0x62e/0x890 [ 74.835383][ T4522] ext4_xattr_set_entry+0xed0/0x3d30 [ 74.840699][ T4522] ? rcu_is_watching+0x11/0xa0 [ 74.845492][ T4522] ? mb_cache_entry_create+0x676/0x890 [ 74.851063][ T4522] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 74.856560][ T4522] ? ext4_xattr_ibody_set+0x330/0x330 [ 74.861963][ T4522] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 74.867700][ T4522] ? ext4_xattr_block_find+0x500/0x500 [ 74.873182][ T4522] ext4_xattr_ibody_set+0x112/0x330 [ 74.878411][ T4522] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 74.884335][ T4522] __ext4_expand_extra_isize+0x301/0x3e0 [ 74.890082][ T4522] __ext4_mark_inode_dirty+0x469/0x700 [ 74.895644][ T4522] ext4_evict_inode+0xa81/0x1080 [ 74.900678][ T4522] ? _raw_spin_unlock+0x24/0x40 [ 74.905549][ T4522] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 74.911467][ T4522] ? do_raw_spin_unlock+0x11d/0x230 [ 74.916856][ T4522] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 74.922768][ T4522] evict+0x485/0x870 [ 74.926684][ T4522] ? __lock_acquire+0x7c60/0x7c60 [ 74.931730][ T4522] ? proc_nr_inodes+0x320/0x320 [ 74.936604][ T4522] ? do_raw_spin_unlock+0x11d/0x230 [ 74.941924][ T4522] ? _raw_spin_unlock+0x24/0x40 [ 74.946804][ T4522] ? iput+0x706/0x8a0 [ 74.950810][ T4522] ext4_orphan_cleanup+0xaa9/0x12e0 [ 74.956125][ T4522] ? ext4_orphan_del+0xb90/0xb90 [ 74.961092][ T4522] ? errseq_check_and_advance+0x62/0x120 [ 74.967070][ T4522] ext4_fill_super+0x92f0/0x9a60 [ 74.972301][ T4522] ? ext4_mount+0x40/0x40 [ 74.976644][ T4522] ? set_blocksize+0x1f1/0x370 [ 74.981439][ T4522] ? sb_set_blocksize+0xa5/0xe0 [ 74.986306][ T4522] mount_bdev+0x287/0x3c0 [ 74.990743][ T4522] ? ext4_mount+0x40/0x40 [ 74.995085][ T4522] legacy_get_tree+0xe6/0x180 [ 74.999780][ T4522] ? ext4_errno_to_code+0x160/0x160 [ 75.005011][ T4522] vfs_get_tree+0x88/0x270 [ 75.009457][ T4522] do_new_mount+0x24a/0xa40 [ 75.013985][ T4522] __se_sys_mount+0x2d6/0x3c0 [ 75.018686][ T4522] ? __x64_sys_mount+0xc0/0xc0 [ 75.023560][ T4522] ? lockdep_hardirqs_on+0x94/0x140 [ 75.028777][ T4522] ? __x64_sys_mount+0x1c/0xc0 [ 75.033626][ T4522] do_syscall_64+0x4c/0xa0 [ 75.038226][ T4522] ? clear_bhb_loop+0x30/0x80 [ 75.042917][ T4522] ? clear_bhb_loop+0x30/0x80 [ 75.047701][ T4522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.053615][ T4522] RIP: 0033:0x7fb00cbe5eea [ 75.058137][ T4522] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.077928][ T4522] RSP: 002b:00007fb00ae4ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.086469][ T4522] RAX: ffffffffffffffda RBX: 00007fb00ae4aef0 RCX: 00007fb00cbe5eea [ 75.094615][ T4522] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb00ae4aeb0 [ 75.102579][ T4522] RBP: 0000200000000180 R08: 00007fb00ae4aef0 R09: 0000000000800700 [ 75.110549][ T4522] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 75.118593][ T4522] R13: 00007fb00ae4aeb0 R14: 000000000000046f R15: 000000000000002c [ 75.126663][ T4522] [ 75.129942][ T4522] Kernel Offset: disabled [ 75.134280][ T4522] Rebooting in 86400 seconds..