last executing test programs: 1.816416537s ago: executing program 4 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r3 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x72, 0x0, 0x0, 0x0) 1.575178655s ago: executing program 4 (id=238): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1.49943345s ago: executing program 0 (id=239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008819}, 0x0) 1.358494641s ago: executing program 0 (id=242): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r2, 0x0, 0x408cd, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.247702319s ago: executing program 3 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30001a00000500040000000000050005000a0000000500010006"], 0x4c}, 0x1, 0x7000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000000fffc0500010007"], 0x1c}}, 0x8000) 1.247442979s ago: executing program 1 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r1, 0x0}, 0x20) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.238351789s ago: executing program 3 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xffff, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) shutdown(r2, 0x0) 1.173195184s ago: executing program 2 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0505000000000000000001"], 0x30}}, 0x10) 1.107812919s ago: executing program 1 (id=249): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c2b3a8000", 'erspan0\x00'}}, 0x1e) 1.062388462s ago: executing program 3 (id=250): mlockall(0x1) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) mlockall(0x1) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.015822176s ago: executing program 1 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) 955.6043ms ago: executing program 2 (id=252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000190c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x2003001, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x1c45b1, &(0x7f0000002080)=ANY=[], 0x1, 0x120e, &(0x7f00000004c0)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r1, 0x0, 0x0, 0x1400, 0x0, 0x3) 793.835972ms ago: executing program 1 (id=253): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x20c0c0, &(0x7f0000000000)=ANY=[], 0x1, 0x1233, &(0x7f0000002a00)="$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") 651.156982ms ago: executing program 4 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008819}, 0x0) 558.017849ms ago: executing program 3 (id=255): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) 557.24956ms ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20000}, 0x0, {[0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x8, 0x1]}}, 0x5c) 507.881473ms ago: executing program 2 (id=257): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x7, 0x3, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x720, 0x7800, 0x59, 0x200}}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x51}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005"], 0xe4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x2001}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 456.322927ms ago: executing program 4 (id=258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f646500000000000000000000000500000000000000000000000000000000050003000500000010000400ce7b7eac62616c616e"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 442.991478ms ago: executing program 1 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 383.839732ms ago: executing program 0 (id=260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000054"], 0x14}}, 0x0) 322.853137ms ago: executing program 1 (id=261): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) pipe(&(0x7f0000000200)) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='io_uring_fail_link\x00', r0}, 0x18) io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 291.731019ms ago: executing program 4 (id=262): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020017b1234b65252d00fcffffff0000000000000000850000004100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@i_version}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") 243.898662ms ago: executing program 0 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = gettid() tkill(r2, 0xd) 243.642903ms ago: executing program 2 (id=264): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24048080}, 0x24000004) 185.756456ms ago: executing program 3 (id=265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 174.919537ms ago: executing program 0 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) 99.894993ms ago: executing program 2 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008819}, 0x0) 61.051586ms ago: executing program 3 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) syz_usbip_server_init(0x4) 45.563657ms ago: executing program 2 (id=269): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0xd885}, 0x40) 0s ago: executing program 0 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') kernel console output (not intermixed with test programs): DUID 00:04:f2:4c:aa:b0:96:74:e7:72:58:13:44:6d:8f:a8:ad:79 forked to background, child pid 3838 [ 37.832383][ T3839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.850984][ T3839] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. syzkaller login: [ 60.243780][ T4157] cgroup: Unknown subsys name 'net' [ 60.347429][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.847271][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.679647][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 63.778242][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.785369][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.794293][ T4169] device bridge_slave_0 entered promiscuous mode [ 63.808100][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.815202][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.823798][ T4169] device bridge_slave_1 entered promiscuous mode [ 63.911138][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.952290][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.015374][ T4169] team0: Port device team_slave_0 added [ 64.029782][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 64.044544][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 64.055037][ T4169] team0: Port device team_slave_1 added [ 64.061158][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 64.110498][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.117560][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.143733][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.186023][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.193499][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.219884][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.286735][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 64.318969][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.326110][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.334501][ T4168] device bridge_slave_0 entered promiscuous mode [ 64.345974][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.353176][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.361337][ T4168] device bridge_slave_1 entered promiscuous mode [ 64.420722][ T4169] device hsr_slave_0 entered promiscuous mode [ 64.428201][ T4169] device hsr_slave_1 entered promiscuous mode [ 64.450885][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.463331][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.474312][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.482289][ T4176] device bridge_slave_0 entered promiscuous mode [ 64.494079][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.501218][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.509563][ T4176] device bridge_slave_1 entered promiscuous mode [ 64.516392][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.523608][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.535575][ T4179] device bridge_slave_0 entered promiscuous mode [ 64.544619][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.575593][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.582834][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.591526][ T4179] device bridge_slave_1 entered promiscuous mode [ 64.628238][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.661409][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.668668][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.676576][ T4167] device bridge_slave_0 entered promiscuous mode [ 64.686044][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.704043][ T4168] team0: Port device team_slave_0 added [ 64.718230][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.725371][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.734098][ T4167] device bridge_slave_1 entered promiscuous mode [ 64.750772][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.761254][ T4168] team0: Port device team_slave_1 added [ 64.794467][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.831756][ T4176] team0: Port device team_slave_0 added [ 64.844581][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.851785][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.877855][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.896023][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.906635][ T4176] team0: Port device team_slave_1 added [ 64.923646][ T4179] team0: Port device team_slave_0 added [ 64.930191][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.937420][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.963471][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.976715][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.003064][ T4179] team0: Port device team_slave_1 added [ 65.074937][ T4167] team0: Port device team_slave_0 added [ 65.081407][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.088747][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.115170][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.126771][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.133739][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.159699][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.182260][ T4168] device hsr_slave_0 entered promiscuous mode [ 65.189429][ T4168] device hsr_slave_1 entered promiscuous mode [ 65.196050][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.203951][ T4168] Cannot create hsr debugfs directory [ 65.220157][ T4167] team0: Port device team_slave_1 added [ 65.230613][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.237628][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.264013][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.276283][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.283501][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.309524][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.372541][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.379777][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.406024][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.444045][ T4179] device hsr_slave_0 entered promiscuous mode [ 65.451060][ T4179] device hsr_slave_1 entered promiscuous mode [ 65.458048][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.465620][ T4179] Cannot create hsr debugfs directory [ 65.475970][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.483066][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.510116][ T1346] Bluetooth: hci4: command 0x0409 tx timeout [ 65.513459][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.517109][ T1346] Bluetooth: hci0: command 0x0409 tx timeout [ 65.532948][ T1346] Bluetooth: hci3: command 0x0409 tx timeout [ 65.544696][ T1346] Bluetooth: hci2: command 0x0409 tx timeout [ 65.550981][ T1346] Bluetooth: hci1: command 0x0409 tx timeout [ 65.569438][ T4176] device hsr_slave_0 entered promiscuous mode [ 65.576372][ T4176] device hsr_slave_1 entered promiscuous mode [ 65.583735][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.591541][ T4176] Cannot create hsr debugfs directory [ 65.710958][ T4167] device hsr_slave_0 entered promiscuous mode [ 65.717833][ T4167] device hsr_slave_1 entered promiscuous mode [ 65.724479][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.732406][ T4167] Cannot create hsr debugfs directory [ 65.829159][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.865376][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.875129][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.889924][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.975614][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.007967][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.036298][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.046129][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.103101][ T4176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.133761][ T4176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.146608][ T4176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.160598][ T4176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.182568][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.218577][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.229793][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.240480][ T4179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.251612][ T4179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.263790][ T4179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.275764][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.298924][ T4179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.317997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.328128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.337332][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.344594][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.387243][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.395447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.417061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.425826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.435166][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.442290][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.450833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.460248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.469513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.478560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.487165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.495729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.504303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.512758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.522934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.566260][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.578498][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.595757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.603751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.613611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.622495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.644129][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.679742][ T4167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.690893][ T4167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.705003][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.717889][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.726454][ T3049] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.733602][ T3049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.748266][ T4167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.796182][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.805305][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.814280][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.823757][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.833157][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.840276][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.854619][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.863576][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.873990][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.883285][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.892532][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.901502][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.911046][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.920733][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.929575][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.938219][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.946575][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.955476][ T4167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.966667][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.986354][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.008260][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.018970][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.027889][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.035376][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.049494][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.086177][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.095153][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.104278][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.111403][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.121077][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.130229][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.139578][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.146680][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.154599][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.163436][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.174764][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.213264][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.228062][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.238827][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.249808][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.261702][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.270752][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.280279][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.290288][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.299192][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.309028][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.318760][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.336474][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.347245][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.371637][ T4169] device veth0_vlan entered promiscuous mode [ 67.382509][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.392779][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.402551][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.411016][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.421344][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.458947][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.467164][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.475069][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.485225][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.495342][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.502489][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.510902][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.527390][ T4169] device veth1_vlan entered promiscuous mode [ 67.550814][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.559283][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.567757][ T4213] Bluetooth: hci1: command 0x041b tx timeout [ 67.574609][ T4213] Bluetooth: hci2: command 0x041b tx timeout [ 67.575765][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.581489][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 67.595720][ T4213] Bluetooth: hci0: command 0x041b tx timeout [ 67.595782][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.602260][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 67.617467][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.624553][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.632623][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.647878][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.660042][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.667878][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.712222][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.721201][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.734790][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.743501][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.753468][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.764292][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.773739][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.782685][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.794735][ T4169] device veth0_macvtap entered promiscuous mode [ 67.813695][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.823446][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.832078][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.842157][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.850913][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.880841][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.896299][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.911494][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.928723][ T4169] device veth1_macvtap entered promiscuous mode [ 67.945744][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.960371][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.968281][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.977825][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.006133][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.019936][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.039343][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.048589][ T4168] device veth0_vlan entered promiscuous mode [ 68.055273][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.064907][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.074574][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.084619][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.094190][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.103361][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.116565][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.125064][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.133443][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.142640][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.153753][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.162839][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.172427][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.181585][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.218559][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.229142][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.239046][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.246111][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.254242][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.262673][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.270229][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.279075][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.290280][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.297669][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.305521][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.314646][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.323704][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.344614][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.357164][ T4168] device veth1_vlan entered promiscuous mode [ 68.373293][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.383467][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.391976][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.402381][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.432578][ T4176] device veth0_vlan entered promiscuous mode [ 68.444017][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.453423][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.463972][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.472755][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.481359][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.490019][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.499268][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.507898][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.515719][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.550220][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.561015][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.584891][ T4176] device veth1_vlan entered promiscuous mode [ 68.598026][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.606132][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.615028][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.624249][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.655291][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.667940][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.723629][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.732538][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.743919][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.752955][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.763579][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.773077][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.781836][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.790265][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.800621][ T4168] device veth0_macvtap entered promiscuous mode [ 68.819855][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.828128][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.843659][ T4179] device veth0_vlan entered promiscuous mode [ 68.856364][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.865239][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.875324][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.886572][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.897859][ T4176] device veth0_macvtap entered promiscuous mode [ 68.943294][ T4179] device veth1_vlan entered promiscuous mode [ 68.954314][ T4168] device veth1_macvtap entered promiscuous mode [ 68.964149][ T4176] device veth1_macvtap entered promiscuous mode [ 68.992506][ T3049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.009485][ T3049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.041217][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.059012][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.072282][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.081207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.090410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.098895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.106715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.115800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.132088][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.147046][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.158931][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.170055][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.182170][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.200038][ T4179] device veth0_macvtap entered promiscuous mode [ 69.209745][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.221360][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.233483][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.255516][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.265931][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.275463][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.286192][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.295212][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.304426][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.313685][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.321556][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.331214][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.343950][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.354158][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.363079][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.372965][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.419512][ T4179] device veth1_macvtap entered promiscuous mode [ 69.427654][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.450048][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.461055][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.474259][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.486081][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.504178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.521732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.533083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.545318][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.566494][ T4176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576626][ T4176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.588359][ T4176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.598451][ T4176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.615721][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.630188][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.645278][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.658289][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 69.663645][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.665256][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 69.675376][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.692301][ T4213] Bluetooth: hci3: command 0x040f tx timeout [ 69.692925][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.703816][ T4213] Bluetooth: hci2: command 0x040f tx timeout [ 69.710423][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.722134][ T4213] Bluetooth: hci1: command 0x040f tx timeout [ 69.747915][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.779104][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.790682][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.835569][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.849746][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.860766][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.871027][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.876138][ T4250] loop3: detected capacity change from 0 to 512 [ 69.882051][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.901357][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.920512][ T4179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.929397][ T4179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.940135][ T4179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.948999][ T4179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.965990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.002886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.046595][ T4250] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 70.072718][ T4250] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.107361][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.147050][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.155881][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.164524][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.204482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.243921][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.254229][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.285035][ T4167] device veth0_vlan entered promiscuous mode [ 70.292168][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.302439][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.322741][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.333318][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.359119][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.394567][ T4257] loop3: detected capacity change from 0 to 512 [ 70.418145][ T4167] device veth1_vlan entered promiscuous mode [ 70.424713][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.437518][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.445497][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.451670][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.507003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.515225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.520247][ T4257] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,bsddf,,errors=continue. Quota mode: writeback. [ 70.544548][ T4257] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.557338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.565366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.597154][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.608485][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.652786][ T4262] loop1: detected capacity change from 0 to 128 [ 70.669845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.693668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.706001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.743774][ T4167] device veth0_macvtap entered promiscuous mode [ 70.745107][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.755289][ T4167] device veth1_macvtap entered promiscuous mode [ 70.796731][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.819009][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.833821][ T3049] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.865558][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.886470][ T3049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.914878][ T3049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.922367][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.945144][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.961786][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.971920][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.987018][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.997979][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.014145][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.028294][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.028629][ T4265] attempt to access beyond end of device [ 71.028629][ T4265] loop1: rw=34817, want=137, limit=128 [ 71.043187][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.059373][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.069352][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.079945][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.091629][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.102216][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.112434][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.123257][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.138287][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.151739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.161008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.171843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.181682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.191195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.209333][ T4167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.221394][ T4167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.232193][ T4167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.241771][ T4271] loop3: detected capacity change from 0 to 2048 [ 71.249929][ T4167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.300026][ T4271] loop3: p1 < > p4 [ 71.330568][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.336077][ T4271] loop3: p4 size 8388608 extends beyond EOD, truncated [ 71.337830][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.521556][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.552785][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.587036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.600362][ T4277] bridge0: port 3(syz_tun) entered blocking state [ 71.625534][ T3547] loop3: p1 < > p4 [ 71.631745][ T4277] bridge0: port 3(syz_tun) entered disabled state [ 71.632749][ T3547] loop3: p4 size 8388608 extends beyond EOD, [ 71.651681][ T4277] device syz_tun entered promiscuous mode [ 71.658055][ T3547] truncated [ 71.665114][ T4277] bridge0: port 3(syz_tun) entered blocking state [ 71.673554][ T4277] bridge0: port 3(syz_tun) entered forwarding state [ 71.694366][ T4285] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.722380][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.732385][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 71.748377][ T4213] Bluetooth: hci3: command 0x0419 tx timeout [ 71.769065][ T4213] Bluetooth: hci0: command 0x0419 tx timeout [ 71.779030][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.791536][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 71.816074][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 71.835555][ T3028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.848382][ T4216] Bluetooth: hci1: command 0x0419 tx timeout [ 71.943554][ T4293] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 71.950350][ T4293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 72.010741][ T4293] vhci_hcd vhci_hcd.0: Device attached [ 72.103544][ T4294] vhci_hcd: connection closed [ 72.112052][ T3028] vhci_hcd: stop threads [ 72.121504][ T3028] vhci_hcd: release socket [ 72.141964][ T3028] vhci_hcd: disconnect device [ 72.197536][ T4218] vhci_hcd: vhci_device speed not set [ 72.222529][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 72.239072][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 72.399556][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 72.412513][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 72.459328][ T4314] loop4: detected capacity change from 0 to 128 [ 72.490852][ T4315] loop2: detected capacity change from 0 to 512 [ 72.535714][ T4315] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 72.563879][ T4315] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 72.579056][ T4314] FAT-fs (loop4): Directory bread(block 32) failed [ 72.600430][ T4314] FAT-fs (loop4): Directory bread(block 33) failed [ 72.626306][ T4315] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 72.637591][ T4315] System zones: 1-12 [ 72.650751][ T4315] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.19: corrupted in-inode xattr [ 72.683041][ T4314] FAT-fs (loop4): Directory bread(block 34) failed [ 72.691925][ T4314] FAT-fs (loop4): Directory bread(block 35) failed [ 72.699212][ T4314] FAT-fs (loop4): Directory bread(block 36) failed [ 72.705911][ T4314] FAT-fs (loop4): Directory bread(block 37) failed [ 72.713514][ T4314] FAT-fs (loop4): Directory bread(block 38) failed [ 72.720583][ T4314] FAT-fs (loop4): Directory bread(block 39) failed [ 72.728415][ T4314] FAT-fs (loop4): Directory bread(block 40) failed [ 72.735114][ T4314] FAT-fs (loop4): Directory bread(block 41) failed [ 72.749884][ T4315] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.19: couldn't read orphan inode 15 (err -117) [ 72.831902][ T4321] xt_CT: No such helper "pptp" [ 72.843677][ T4315] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,auto_da_alloc,discard,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 73.176336][ T4345] mmap: syz.3.27 (4345) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 73.533933][ T4362] loop4: detected capacity change from 0 to 1024 [ 73.573781][ T26] audit: type=1326 audit(1739077226.722:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 73.649673][ T26] audit: type=1326 audit(1739077226.752:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 73.717480][ T26] audit: type=1326 audit(1739077226.762:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 73.762464][ T4362] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,noauto_da_alloc,debug_want_extra_isize=0x000000000000007c,nouid32,resgid=0x0000000000000000,grpquota,sysvgroups,,errors=continue. Quota mode: writeback. [ 73.862354][ T26] audit: type=1326 audit(1739077226.762:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 73.884556][ T26] audit: type=1326 audit(1739077226.762:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 73.947888][ T26] audit: type=1326 audit(1739077226.762:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 73.964291][ T4377] loop0: detected capacity change from 0 to 2048 [ 74.074193][ T26] audit: type=1326 audit(1739077226.762:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 74.170090][ T4377] EXT4-fs (loop0): mounted filesystem without journal. Opts: dax=inode,,errors=continue. Quota mode: none. [ 74.188341][ T26] audit: type=1326 audit(1739077226.762:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 74.188715][ T4377] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.212443][ T26] audit: type=1326 audit(1739077226.762:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 74.244021][ T26] audit: type=1326 audit(1739077226.762:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 74.687301][ T9] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 345: padding at end of block bitmap is not set [ 74.707592][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 947 with error 117 [ 74.730288][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.730288][ T9] [ 74.782520][ T4409] loop3: detected capacity change from 0 to 4096 [ 74.891731][ T4409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.027541][ T4426] netlink: 'syz.0.59': attribute type 13 has an invalid length. [ 75.035345][ T4426] netlink: 'syz.0.59': attribute type 27 has an invalid length. [ 75.108438][ T4424] Zero length message leads to an empty skb [ 75.304715][ T4437] loop3: detected capacity change from 0 to 512 [ 75.382368][ T4438] loop4: detected capacity change from 0 to 2048 [ 75.456037][ T4437] EXT4-fs (loop3): Ignoring removed oldalloc option [ 75.464502][ T4438] loop4: p1 < > p4 [ 75.478499][ T4438] loop4: p4 size 8388608 extends beyond EOD, truncated [ 75.521893][ T4437] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.62: Parent and EA inode have the same ino 15 [ 75.545436][ T4437] EXT4-fs (loop3): Remounting filesystem read-only [ 75.557865][ T4437] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.587340][ T4437] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.62: Parent and EA inode have the same ino 15 [ 75.612092][ T4437] EXT4-fs (loop3): Remounting filesystem read-only [ 75.620306][ T4437] EXT4-fs (loop3): 1 orphan inode deleted [ 75.626067][ T4437] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,noinit_itable,oldalloc,stripe=0x0000000000000002,. Quota mode: none. [ 75.725379][ T4458] loop0: detected capacity change from 0 to 512 [ 75.851486][ T4467] netlink: 'syz.1.79': attribute type 29 has an invalid length. [ 75.857716][ T4458] EXT4-fs (loop0): invalid journal inode [ 75.861502][ T4462] loop3: detected capacity change from 0 to 2048 [ 75.877336][ T4467] netlink: 'syz.1.79': attribute type 29 has an invalid length. [ 75.902318][ T4462] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 75.914538][ T4467] netlink: 'syz.1.79': attribute type 29 has an invalid length. [ 75.926294][ T4469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.80'. [ 75.938044][ T4466] loop2: detected capacity change from 0 to 2048 [ 75.962669][ T4462] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 75.996473][ T4473] loop4: detected capacity change from 0 to 512 [ 76.031075][ T4466] loop2: p1 < > p4 [ 76.036135][ T4466] loop2: p4 size 8388608 extends beyond EOD, truncated [ 76.091407][ T4473] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 76.117567][ T3547] loop2: p1 < > p4 [ 76.127111][ T4473] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 76.135931][ T3547] loop2: p4 size 8388608 extends beyond EOD, truncated [ 76.155652][ T4473] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.81: bad orphan inode 13 [ 76.249745][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.268398][ T4473] EXT4-fs (loop4): Remounting filesystem read-only [ 76.299459][ T4473] ext4_test_bit(bit=12, block=4) = 1 [ 76.304791][ T4473] is_bad_inode(inode)=0 [ 76.313510][ T3028] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 234: padding at end of block bitmap is not set [ 76.331272][ T4473] NEXT_ORPHAN(inode)=17694720 [ 76.341310][ T3028] EXT4-fs (loop3): Remounting filesystem read-only [ 76.348610][ T4473] max_ino=32 [ 76.362125][ T4473] i_nlink=0 [ 76.365428][ T4473] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="journal_dev=0x0000000000000002,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 76.470900][ T4491] loop0: detected capacity change from 0 to 512 [ 76.558962][ T4491] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 76.600409][ T4491] EXT4-fs (loop0): 1 truncate cleaned up [ 76.616397][ T4491] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,data_err=ignore,grpjquota="noacl,usrjquota=,minixdf,sysvgroups,norecovery,,errors=continue. Quota mode: writeback. [ 76.692176][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 76.729827][ T4498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.91'. [ 76.835702][ T4503] loop3: detected capacity change from 0 to 1024 [ 76.918254][ T4503] ======================================================= [ 76.918254][ T4503] WARNING: The mand mount option has been deprecated and [ 76.918254][ T4503] and is ignored by this kernel. Remove the mand [ 76.918254][ T4503] option from the mount to silence this warning. [ 76.918254][ T4503] ======================================================= [ 76.972329][ T4505] loop4: detected capacity change from 0 to 2048 [ 77.005212][ T4511] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.076574][ T4505] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.093835][ T4515] program syz.0.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.105516][ T4515] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 77.409992][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 77.452928][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 77.508744][ T4522] loop3: detected capacity change from 0 to 512 [ 77.561900][ T4522] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.600632][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 77.608642][ T4522] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.101: bg 0: block 248: padding at end of block bitmap is not set [ 77.611890][ T4522] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.101: Failed to acquire dquot type 1 [ 77.623896][ T4533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'. [ 77.628810][ T4522] EXT4-fs (loop3): 1 truncate cleaned up [ 77.658774][ T4528] syz.0.103 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.700111][ T4161] udevd[4161]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 77.705198][ T4528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 77.721658][ T4522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.744987][ T4522] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 77.884055][ T4522] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 77.898592][ T4541] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.101: Failed to acquire dquot type 1 [ 78.116401][ T4554] loop4: detected capacity change from 0 to 512 [ 78.244731][ T4554] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.112: bg 0: block 248: padding at end of block bitmap is not set [ 78.317922][ T4554] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.112: Failed to acquire dquot type 1 [ 78.400939][ T4554] EXT4-fs (loop4): 1 truncate cleaned up [ 78.406996][ T4554] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.435017][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 78.461634][ T4554] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.483052][ T4568] loop2: detected capacity change from 0 to 1024 [ 78.571625][ T4568] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 78.582591][ T26] kauditd_printk_skb: 420 callbacks suppressed [ 78.582610][ T26] audit: type=1326 audit(1739077231.732:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17ec6ceda7 code=0x7ffc0000 [ 78.626109][ T26] audit: type=1326 audit(1739077231.732:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f17ec673fb9 code=0x7ffc0000 [ 78.648559][ T26] audit: type=1326 audit(1739077231.732:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f17ec6d7de9 code=0x7ffc0000 [ 78.671563][ T26] audit: type=1326 audit(1739077231.752:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17ec6ceda7 code=0x7ffc0000 [ 78.694445][ T26] audit: type=1326 audit(1739077231.752:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f17ec673fb9 code=0x7ffc0000 [ 78.716903][ T26] audit: type=1326 audit(1739077231.752:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f17ec6d7de9 code=0x7ffc0000 [ 78.749522][ T26] audit: type=1326 audit(1739077231.752:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17ec6ceda7 code=0x7ffc0000 [ 78.822058][ T26] audit: type=1326 audit(1739077231.752:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f17ec673fb9 code=0x7ffc0000 [ 78.868909][ T26] audit: type=1326 audit(1739077231.752:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f17ec6d7de9 code=0x7ffc0000 [ 78.910009][ T26] audit: type=1326 audit(1739077231.752:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17ec6ceda7 code=0x7ffc0000 [ 80.118565][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 80.181597][ T4600] syz.3.130 uses obsolete (PF_INET,SOCK_PACKET) [ 80.660987][ T4623] netlink: 'syz.1.141': attribute type 3 has an invalid length. [ 80.683829][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 80.852133][ T4638] loop0: detected capacity change from 0 to 128 [ 81.048949][ T4648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'. [ 81.074975][ T4648] tipc: Started in network mode [ 81.105406][ T4648] tipc: Node identity 7, cluster identity 5 [ 81.121633][ T4648] tipc: Node number set to 7 [ 81.386476][ T4669] loop2: detected capacity change from 0 to 512 [ 81.428124][ T4669] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.444530][ T4669] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.486622][ T4670] device wireguard0 entered promiscuous mode [ 81.493819][ T4669] EXT4-fs (loop2): 1 truncate cleaned up [ 81.500675][ T4669] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,block_validity,quota,. Quota mode: writeback. [ 81.583925][ T21] cfg80211: failed to load regulatory.db [ 81.750171][ T4677] loop4: detected capacity change from 0 to 2048 [ 81.804942][ T4679] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 81.840395][ T4679] netlink: 'syz.2.164': attribute type 2 has an invalid length. [ 81.850336][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 81.910717][ T4685] loop0: detected capacity change from 0 to 256 [ 81.931961][ T4677] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.085880][ T4685] FAT-fs (loop0): Directory bread(block 1285) failed [ 82.119816][ T4685] tipc: Started in network mode [ 82.120387][ T4689] Invalid ELF header magic: != ELF [ 82.124703][ T4685] tipc: Node identity , cluster identity 4711 [ 82.152671][ T4685] tipc: Failed to obtain node identity [ 82.161014][ T4685] tipc: Enabling of bearer rejected, failed to enable media [ 82.265927][ T4685] FAT-fs (loop0): Directory bread(block 1285) failed [ 82.381177][ T4698] loop3: detected capacity change from 0 to 128 [ 82.506904][ T4698] FAT-fs (loop3): bogus number of FAT sectors [ 82.513062][ T4698] FAT-fs (loop3): Can't find a valid FAT filesystem [ 82.862856][ T4725] serio: Serial port ttyS3 [ 83.194231][ T4741] loop3: detected capacity change from 0 to 1024 [ 83.246292][ T4743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'. [ 83.284942][ T4743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'. [ 83.333603][ T4741] EXT4-fs (loop3): Ignoring removed orlov option [ 83.542954][ T4741] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 83.744034][ T26] kauditd_printk_skb: 133 callbacks suppressed [ 83.744050][ T26] audit: type=1804 audit(1739077236.892:569): pid=4739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.187" name="/newroot/33/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 83.980337][ T4769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.197'. [ 84.015290][ T4775] netlink: 'syz.2.199': attribute type 39 has an invalid length. [ 84.238548][ T4782] loop0: detected capacity change from 0 to 1024 [ 84.353694][ T4782] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 84.374531][ T4782] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.391240][ T4782] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #3: comm syz.0.201: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 84.469468][ T4782] EXT4-fs (loop0): Remounting filesystem read-only [ 84.483508][ T26] audit: type=1326 audit(1739077237.632:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 84.514468][ T4782] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.201: Bad quota inode: 3, type: 0 [ 84.536200][ T4782] EXT4-fs (loop0): Remounting filesystem read-only [ 84.561126][ T4782] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 84.617012][ T26] audit: type=1326 audit(1739077237.692:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 84.621275][ T4782] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 84.707897][ T4782] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,i_version,stripe=0x0000000000000009,barrier,journal_dev=0x0000000000000f35,. Quota mode: writeback. [ 84.736066][ T26] audit: type=1326 audit(1739077237.692:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 84.775436][ T4812] netlink: 68 bytes leftover after parsing attributes in process `syz.3.211'. [ 84.913723][ T26] audit: type=1326 audit(1739077237.692:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 84.969338][ T4818] netlink: 'syz.1.212': attribute type 10 has an invalid length. [ 85.017124][ T4818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.212'. [ 85.042283][ T26] audit: type=1326 audit(1739077237.692:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 85.125034][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 85.125341][ T26] audit: type=1326 audit(1739077237.692:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 85.151927][ T4818] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 85.180463][ T26] audit: type=1326 audit(1739077237.692:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 85.215250][ T4818] team0: Failed to send options change via netlink (err -105) [ 85.233374][ T26] audit: type=1326 audit(1739077237.692:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 85.240126][ T4818] team0: Port device geneve0 added [ 85.288407][ T4824] netlink: 'syz.4.215': attribute type 10 has an invalid length. [ 85.296418][ T4824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.215'. [ 85.365366][ T26] audit: type=1326 audit(1739077237.692:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56dd04de9 code=0x7ffc0000 [ 85.390457][ T4824] team0: Port device geneve0 added [ 85.838973][ T4855] loop3: detected capacity change from 0 to 128 [ 85.956393][ T4855] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.973396][ T4862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 85.975719][ T4855] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.190134][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 86.317271][ T4885] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.436379][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 86.456171][ T4894] loop2: detected capacity change from 0 to 512 [ 86.506452][ T4894] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 86.527241][ T4894] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 86.638329][ T4906] netlink: 96 bytes leftover after parsing attributes in process `syz.1.246'. [ 86.758348][ T4912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 87.144931][ T4918] loop2: detected capacity change from 0 to 8192 [ 87.203526][ T4925] loop1: detected capacity change from 0 to 8192 [ 87.257556][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 87.479826][ T4934] team0: No ports can be present during mode change [ 87.676508][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 87.713840][ T4949] loop4: detected capacity change from 0 to 512 [ 87.723022][ T4942] device vlan2 entered promiscuous mode [ 87.774613][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 87.794758][ T4949] EXT4-fs (loop4): Ignoring removed oldalloc option [ 87.873974][ T4949] ------------[ cut here ]------------ [ 87.895858][ T4949] WARNING: CPU: 0 PID: 4949 at mm/page_alloc.c:5440 __alloc_pages+0x5cf/0x700 [ 87.926270][ T4949] Modules linked in: [ 87.930776][ T4949] CPU: 1 PID: 4949 Comm: syz.4.262 Not tainted 5.15.178-syzkaller #0 [ 88.066962][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.077451][ T4963] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 88.083994][ T4963] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.110086][ T4949] RIP: 0010:__alloc_pages+0x5cf/0x700 [ 88.118457][ T4949] Code: 00 48 ba 00 00 00 00 00 fc ff df e9 1d fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 2e fd ff ff e8 e6 49 0a 00 e9 24 fd ff ff <0f> 0b 45 31 e4 e9 70 fd ff ff 48 8d 4c 24 50 80 e1 07 80 c1 03 38 [ 88.122379][ T4963] vhci_hcd vhci_hcd.0: Device attached [ 88.141696][ T4949] RSP: 0018:ffffc9000319f100 EFLAGS: 00010246 [ 88.150454][ T4949] RAX: dffffc0000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 88.159897][ T4949] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000319f188 [ 88.168545][ T4949] RBP: ffffc9000319f218 R08: dffffc0000000000 R09: ffffc9000319f160 [ 88.176838][ T4949] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000040c40 [ 88.184939][ T4949] R13: 1ffff92000633e28 R14: ffffc9000319f160 R15: 1ffff92000633e24 [ 88.193357][ T4965] vhci_hcd: connection closed [ 88.194807][ T4949] FS: 00007f4f5a6576c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 88.195009][ T9] vhci_hcd: stop threads [ 88.199688][ T4949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.199708][ T4949] CR2: 00007f5cf1e522d8 CR3: 000000005b7fe000 CR4: 00000000003506e0 [ 88.216716][ T9] vhci_hcd: release socket [ 88.220347][ T4949] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.234792][ T9] vhci_hcd: disconnect device [ 88.240678][ T4949] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.255961][ T4949] Call Trace: [ 88.259545][ T4949] [ 88.262923][ T4949] ? __warn+0x15b/0x300 [ 88.267507][ T4949] ? __alloc_pages+0x5cf/0x700 [ 88.272298][ T4949] ? report_bug+0x1b7/0x2e0 [ 88.277180][ T4949] ? handle_bug+0x3d/0x70 [ 88.281685][ T4949] ? exc_invalid_op+0x16/0x40 [ 88.286385][ T4949] ? asm_exc_invalid_op+0x16/0x20 [ 88.292823][ T4949] ? __alloc_pages+0x5cf/0x700 [ 88.297870][ T4949] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 88.303345][ T4949] kmalloc_large_node+0x7c/0x180 [ 88.308405][ T4949] __kmalloc_node+0x22d/0x390 [ 88.313101][ T4949] ? __kmalloc+0x168/0x300 [ 88.317808][ T4949] ? ext4_expand_extra_isize_ea+0xd41/0x1bb0 [ 88.323850][ T4949] ? ext4_expand_extra_isize_ea+0xd11/0x1bb0 [ 88.330036][ T4949] ext4_expand_extra_isize_ea+0xe4f/0x1bb0 [ 88.335895][ T4949] ? ext4_xattr_set+0x3d0/0x3d0 [ 88.340942][ T4949] ? rwsem_write_trylock+0x166/0x210 [ 88.346259][ T4949] ? clear_nonspinnable+0x60/0x60 [ 88.351470][ T4949] ? dquot_initialize_needed+0x128/0x320 [ 88.359291][ T4949] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 88.364998][ T4949] __ext4_mark_inode_dirty+0x539/0x860 [ 88.370832][ T4949] ? ext4_blocks_for_truncate+0x270/0x270 [ 88.376821][ T4949] ? rcu_read_lock_any_held+0xb3/0x160 [ 88.382322][ T4949] ? ext4_journal_check_start+0x17b/0x240 [ 88.388164][ T4949] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 88.394722][ T4949] ext4_evict_inode+0xadc/0x1100 [ 88.399776][ T4949] ? _raw_spin_unlock+0x24/0x40 [ 88.404665][ T4949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 88.410632][ T4949] ? do_raw_spin_unlock+0x137/0x8b0 [ 88.415859][ T4949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 88.421851][ T4949] evict+0x529/0x930 [ 88.425774][ T4949] ? mode_strip_sgid+0x210/0x210 [ 88.430862][ T4949] ? rcu_is_watching+0x11/0xa0 [ 88.435652][ T4949] ? _raw_spin_unlock+0x24/0x40 [ 88.440566][ T4949] ? iput+0x6f5/0x8b0 [ 88.444596][ T4949] ext4_orphan_cleanup+0x9d9/0x1240 [ 88.449997][ T4949] ? ext4_orphan_del+0xc50/0xc50 [ 88.455191][ T4949] ? __init_swait_queue_head+0xaa/0x140 [ 88.460857][ T4949] ? errseq_check_and_advance+0x60/0x110 [ 88.466516][ T4949] ext4_fill_super+0x98de/0xa110 [ 88.473080][ T4949] ? ext4_mount+0x40/0x40 [ 88.480274][ T4949] ? vscnprintf+0x80/0x80 [ 88.484649][ T4949] ? set_blocksize+0x1ec/0x370 [ 88.489560][ T4949] mount_bdev+0x2c9/0x3f0 [ 88.494604][ T4949] ? ext4_mount+0x40/0x40 [ 88.499028][ T4949] legacy_get_tree+0xeb/0x180 [ 88.503728][ T4949] ? ext4_errno_to_code+0x140/0x140 [ 88.509005][ T4949] vfs_get_tree+0x88/0x270 [ 88.513443][ T4949] do_new_mount+0x2ba/0xb40 [ 88.518022][ T4949] ? do_move_mount_old+0x160/0x160 [ 88.523168][ T4949] ? user_path_at_empty+0x12b/0x180 [ 88.528575][ T4949] __se_sys_mount+0x2d5/0x3c0 [ 88.533284][ T4949] ? __x64_sys_mount+0xc0/0xc0 [ 88.538182][ T4949] ? syscall_enter_from_user_mode+0x2e/0x240 [ 88.544201][ T4949] ? lockdep_hardirqs_on+0x94/0x130 [ 88.549480][ T4949] ? __x64_sys_mount+0x1c/0xc0 [ 88.554290][ T4949] do_syscall_64+0x3b/0xb0 [ 88.558777][ T4949] ? clear_bhb_loop+0x15/0x70 [ 88.563489][ T4949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.569552][ T4949] RIP: 0033:0x7f4f5c7ef58a [ 88.573994][ T4949] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.593971][ T4949] RSP: 002b:00007f4f5a656e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.605772][ T4949] RAX: ffffffffffffffda RBX: 00007f4f5a656ef0 RCX: 00007f4f5c7ef58a [ 88.617500][ T4949] RDX: 00004000000002c0 RSI: 00004000000001c0 RDI: 00007f4f5a656eb0 [ 88.625597][ T4949] RBP: 00004000000002c0 R08: 00007f4f5a656ef0 R09: 0000000000800700 [ 88.633640][ T4949] R10: 0000000000800700 R11: 0000000000000246 R12: 00004000000001c0 [ 88.641706][ T4949] R13: 00007f4f5a656eb0 R14: 000000000000044b R15: 0000400000000a40 [ 88.649815][ T4949] [ 88.652862][ T4949] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.660146][ T4949] CPU: 1 PID: 4949 Comm: syz.4.262 Not tainted 5.15.178-syzkaller #0 [ 88.668216][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.678391][ T4949] Call Trace: [ 88.681712][ T4949] [ 88.684639][ T4949] dump_stack_lvl+0x1e3/0x2d0 [ 88.689325][ T4949] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 88.695005][ T4949] ? panic+0x860/0x860 [ 88.699101][ T4949] ? __alloc_pages+0x4d0/0x700 [ 88.703896][ T4949] ? __alloc_pages+0x4d0/0x700 [ 88.708685][ T4949] panic+0x318/0x860 [ 88.712611][ T4949] ? __warn+0x16a/0x300 [ 88.716786][ T4949] ? fb_is_primary_device+0xd0/0xd0 [ 88.722023][ T4949] ? __alloc_pages+0x5cf/0x700 [ 88.726817][ T4949] __warn+0x2b2/0x300 [ 88.730827][ T4949] ? __alloc_pages+0x5cf/0x700 [ 88.735616][ T4949] report_bug+0x1b7/0x2e0 [ 88.739974][ T4949] handle_bug+0x3d/0x70 [ 88.744146][ T4949] exc_invalid_op+0x16/0x40 [ 88.748656][ T4949] asm_exc_invalid_op+0x16/0x20 [ 88.753537][ T4949] RIP: 0010:__alloc_pages+0x5cf/0x700 [ 88.758932][ T4949] Code: 00 48 ba 00 00 00 00 00 fc ff df e9 1d fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 2e fd ff ff e8 e6 49 0a 00 e9 24 fd ff ff <0f> 0b 45 31 e4 e9 70 fd ff ff 48 8d 4c 24 50 80 e1 07 80 c1 03 38 [ 88.778562][ T4949] RSP: 0018:ffffc9000319f100 EFLAGS: 00010246 [ 88.784655][ T4949] RAX: dffffc0000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 88.792635][ T4949] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000319f188 [ 88.800618][ T4949] RBP: ffffc9000319f218 R08: dffffc0000000000 R09: ffffc9000319f160 [ 88.808830][ T4949] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000040c40 [ 88.816825][ T4949] R13: 1ffff92000633e28 R14: ffffc9000319f160 R15: 1ffff92000633e24 [ 88.824830][ T4949] ? __rmqueue_pcplist+0x23a0/0x23a0 [ 88.830149][ T4949] kmalloc_large_node+0x7c/0x180 [ 88.835117][ T4949] __kmalloc_node+0x22d/0x390 [ 88.839811][ T4949] ? __kmalloc+0x168/0x300 [ 88.844229][ T4949] ? ext4_expand_extra_isize_ea+0xd41/0x1bb0 [ 88.850218][ T4949] ? ext4_expand_extra_isize_ea+0xd11/0x1bb0 [ 88.856220][ T4949] ext4_expand_extra_isize_ea+0xe4f/0x1bb0 [ 88.862058][ T4949] ? ext4_xattr_set+0x3d0/0x3d0 [ 88.866913][ T4949] ? rwsem_write_trylock+0x166/0x210 [ 88.872221][ T4949] ? clear_nonspinnable+0x60/0x60 [ 88.877274][ T4949] ? dquot_initialize_needed+0x128/0x320 [ 88.882925][ T4949] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 88.888615][ T4949] __ext4_mark_inode_dirty+0x539/0x860 [ 88.894098][ T4949] ? ext4_blocks_for_truncate+0x270/0x270 [ 88.899821][ T4949] ? rcu_read_lock_any_held+0xb3/0x160 [ 88.905284][ T4949] ? ext4_journal_check_start+0x17b/0x240 [ 88.911030][ T4949] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 88.916948][ T4949] ext4_evict_inode+0xadc/0x1100 [ 88.921905][ T4949] ? _raw_spin_unlock+0x24/0x40 [ 88.926771][ T4949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 88.932683][ T4949] ? do_raw_spin_unlock+0x137/0x8b0 [ 88.937907][ T4949] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 88.943827][ T4949] evict+0x529/0x930 [ 88.947741][ T4949] ? mode_strip_sgid+0x210/0x210 [ 88.952799][ T4949] ? rcu_is_watching+0x11/0xa0 [ 88.957572][ T4949] ? _raw_spin_unlock+0x24/0x40 [ 88.962440][ T4949] ? iput+0x6f5/0x8b0 [ 88.966445][ T4949] ext4_orphan_cleanup+0x9d9/0x1240 [ 88.971665][ T4949] ? ext4_orphan_del+0xc50/0xc50 [ 88.976622][ T4949] ? __init_swait_queue_head+0xaa/0x140 [ 88.982168][ T4949] ? errseq_check_and_advance+0x60/0x110 [ 88.987807][ T4949] ext4_fill_super+0x98de/0xa110 [ 88.992793][ T4949] ? ext4_mount+0x40/0x40 [ 88.997125][ T4949] ? vscnprintf+0x80/0x80 [ 89.001500][ T4949] ? set_blocksize+0x1ec/0x370 [ 89.006281][ T4949] mount_bdev+0x2c9/0x3f0 [ 89.010635][ T4949] ? ext4_mount+0x40/0x40 [ 89.014980][ T4949] legacy_get_tree+0xeb/0x180 [ 89.019653][ T4949] ? ext4_errno_to_code+0x140/0x140 [ 89.024885][ T4949] vfs_get_tree+0x88/0x270 [ 89.029307][ T4949] do_new_mount+0x2ba/0xb40 [ 89.033829][ T4949] ? do_move_mount_old+0x160/0x160 [ 89.038947][ T4949] ? user_path_at_empty+0x12b/0x180 [ 89.044170][ T4949] __se_sys_mount+0x2d5/0x3c0 [ 89.048875][ T4949] ? __x64_sys_mount+0xc0/0xc0 [ 89.053653][ T4949] ? syscall_enter_from_user_mode+0x2e/0x240 [ 89.059633][ T4949] ? lockdep_hardirqs_on+0x94/0x130 [ 89.064839][ T4949] ? __x64_sys_mount+0x1c/0xc0 [ 89.069629][ T4949] do_syscall_64+0x3b/0xb0 [ 89.074070][ T4949] ? clear_bhb_loop+0x15/0x70 [ 89.078749][ T4949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.084665][ T4949] RIP: 0033:0x7f4f5c7ef58a [ 89.089083][ T4949] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.108708][ T4949] RSP: 002b:00007f4f5a656e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 89.117161][ T4949] RAX: ffffffffffffffda RBX: 00007f4f5a656ef0 RCX: 00007f4f5c7ef58a [ 89.125182][ T4949] RDX: 00004000000002c0 RSI: 00004000000001c0 RDI: 00007f4f5a656eb0 [ 89.133151][ T4949] RBP: 00004000000002c0 R08: 00007f4f5a656ef0 R09: 0000000000800700 [ 89.141120][ T4949] R10: 0000000000800700 R11: 0000000000000246 R12: 00004000000001c0 [ 89.149094][ T4949] R13: 00007f4f5a656eb0 R14: 000000000000044b R15: 0000400000000a40 [ 89.157106][ T4949] [ 89.160429][ T4949] Kernel Offset: disabled [ 89.164957][ T4949] Rebooting in 86400 seconds..