last executing test programs: 9.429784272s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 9.314709063s ago: executing program 0 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) flock(r1, 0x2) r2 = open(0x0, 0x0, 0x0) flock(r2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) stat(0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) sendmsg$nl_route_sched(r0, 0x0, 0x4) 9.171267837s ago: executing program 0 (id=7): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 8.814363272s ago: executing program 0 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.195539723s ago: executing program 0 (id=9): syz_io_uring_submit(0x0, 0x0, &(0x7f0000001740)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x56, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r1, r1, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x18) write(r3, &(0x7f00000002c0)="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", 0xfc) 7.958436447s ago: executing program 0 (id=10): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 7.747053107s ago: executing program 3 (id=4): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000001a0000000400000002"], 0x50) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0xfffffffd, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x20080058) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) 7.636677688s ago: executing program 3 (id=14): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f00486", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001280)="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", 0x26c}], 0x1}}], 0x3, 0xc0) 7.430207919s ago: executing program 3 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.333267656s ago: executing program 3 (id=34): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socketpair(0x18, 0x0, 0x2, 0x0) 6.182824312s ago: executing program 3 (id=35): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") set_mempolicy(0x6005, 0x0, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) write$9p(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.345095273s ago: executing program 3 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x301, 0x0, 0x0, {0xe, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 3.239845001s ago: executing program 1 (id=63): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0xfffffffd, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x20080058) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) 2.952371749s ago: executing program 1 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 1.950000948s ago: executing program 1 (id=70): socket$key(0xf, 0x3, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.878463845s ago: executing program 1 (id=72): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) r0 = gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.21941266s ago: executing program 4 (id=75): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) write(r1, &(0x7f00000001c0)="00ad", 0x2) 1.066278585s ago: executing program 1 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.043428207s ago: executing program 4 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 928.754018ms ago: executing program 2 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) 851.843126ms ago: executing program 4 (id=80): fsmount(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x18) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000) close(r1) 813.879349ms ago: executing program 2 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) 781.852333ms ago: executing program 4 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setreuid(r0, r0) unshare(0x2040400) 658.375755ms ago: executing program 4 (id=83): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) flock(0xffffffffffffffff, 0x1) 625.612528ms ago: executing program 4 (id=84): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000411, &(0x7f0000000f40)={[{@grpid}, {@grpquota}, {@test_dummy_encryption}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x19, 0x22, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0xe, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x3, 0x7, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdf}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x800}, @ldst={0x1, 0x1, 0x4, 0x5, 0x3, 0x6}]}, &(0x7f0000000200)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x6, 0x685a0e7b}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000dc0)=[r0], &(0x7f0000000e00)=[{0x3, 0x3, 0x4, 0x1}, {0x5, 0x5, 0x10, 0xb}, {0x3, 0x1, 0x9, 0x3}, {0x2, 0x4, 0x5, 0x1}, {0x3, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x7, 0xa}, {0x1, 0x3, 0x7, 0xc}], 0x10, 0x99a}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f00000004c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@resgid}, {@barrier}, {@nombcache}]}, 0x0, 0x47c, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) msync(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0x4) 610.54226ms ago: executing program 2 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x18, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000801}, 0x8080) 556.256155ms ago: executing program 1 (id=86): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) 438.334347ms ago: executing program 2 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) 417.118889ms ago: executing program 2 (id=88): io_setup(0x9, &(0x7f00000000c0)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000101}]) 0s ago: executing program 2 (id=89): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075e, 0x80}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. syzkaller login: [ 57.315633][ T4171] cgroup: Unknown subsys name 'net' [ 57.447957][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.857404][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.771092][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.924340][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.939423][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 60.987711][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 60.996898][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.004932][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.012985][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.021284][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.048066][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.055238][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.063505][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.121196][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.128355][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.136419][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.163250][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.170328][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.178358][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.187251][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.205669][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.259565][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.282023][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.289139][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.297563][ T4181] device bridge_slave_0 entered promiscuous mode [ 61.314279][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.332995][ T4182] team0: Port device team_slave_0 added [ 61.339118][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.347062][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.355402][ T4181] device bridge_slave_1 entered promiscuous mode [ 61.377135][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.384802][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.393196][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.401540][ T4182] team0: Port device team_slave_1 added [ 61.427447][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.434598][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.442960][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.456689][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.463888][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.471582][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.485128][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.492159][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.518400][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.535995][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.543268][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.550932][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.560452][ T4188] team0: Port device team_slave_0 added [ 61.575419][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.582573][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.608927][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.622527][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.639879][ T4188] team0: Port device team_slave_1 added [ 61.647764][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.661829][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.686199][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.718430][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.746788][ T4194] team0: Port device team_slave_0 added [ 61.761769][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.771701][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.779120][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.805534][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.824397][ T4194] team0: Port device team_slave_1 added [ 61.833986][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.840763][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.849555][ T4181] team0: Port device team_slave_0 added [ 61.857965][ T4181] team0: Port device team_slave_1 added [ 61.878143][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.885197][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.911359][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.953705][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.960670][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.986717][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.007438][ T4183] team0: Port device team_slave_0 added [ 62.025974][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.033113][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.059476][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.071259][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.078516][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.104992][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.117274][ T4183] team0: Port device team_slave_1 added [ 62.140866][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.147870][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.174248][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.219898][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.227099][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.233875][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.241629][ T4188] Cannot create hsr debugfs directory [ 62.280542][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.287373][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.295142][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.303104][ T4194] Cannot create hsr debugfs directory [ 62.308896][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.316138][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.342381][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.379225][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.386342][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.412661][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.438211][ T4181] device hsr_slave_0 entered promiscuous mode [ 62.445157][ T4181] device hsr_slave_1 entered promiscuous mode [ 62.451690][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.459622][ T4181] Cannot create hsr debugfs directory [ 62.533747][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.543829][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.550247][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.559430][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 62.559470][ T4183] Cannot create hsr debugfs directory [ 62.566329][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 62.576555][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 62.593874][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 62.599989][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 62.796440][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.811406][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.821238][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.831313][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.869917][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.894159][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.904544][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.914276][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.988266][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.002871][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.018751][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.027516][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.038172][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.058733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.068413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.087293][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.130077][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.139107][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.150934][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.160282][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.169635][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.176985][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.194681][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.202724][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.211241][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.233861][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.258565][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.267346][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.276707][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.283784][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.298606][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.307747][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.320711][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.333628][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.341409][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.374360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.384553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.393742][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.400794][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.408749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.417653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.427047][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.434157][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.441800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.450726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.459616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.468240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.477486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.486969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.495030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.509260][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.531741][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.543645][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.563186][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.570029][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.580265][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.591071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.602550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.611168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.620022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.628659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.657125][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.671593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.687854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.698007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.707534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.717707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.732781][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.759884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.768289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.778266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.790196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.799739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.808400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.818437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.827780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.837023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.846154][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.853258][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.862420][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.905950][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.918172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.926806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.936007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.944780][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.951898][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.960693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.969661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.977543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.986231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.020612][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.037252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.054807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.064342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.073423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.082511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.108982][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.120590][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.139459][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.147768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.157729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.167133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.176730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.185534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.194065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.202551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.210265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.218182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.252396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.260941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.277308][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.284439][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.294767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.303284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.311749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.323708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.332143][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.339207][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.347085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.360267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.368593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.376573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.401190][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.410331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.425273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.439801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.448773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.462956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.476517][ T4182] device veth0_vlan entered promiscuous mode [ 64.502620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.521089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.530950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.539836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.548436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.559805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.568254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.581083][ T4182] device veth1_vlan entered promiscuous mode [ 64.595334][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.622462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.631349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.639688][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 64.642661][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 64.652569][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 64.659000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.661982][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 64.669501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.686027][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.692376][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 64.708851][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.746680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.756667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.775430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.785997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.798262][ T4182] device veth0_macvtap entered promiscuous mode [ 64.812214][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.820289][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.830776][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.846810][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.858397][ T4182] device veth1_macvtap entered promiscuous mode [ 64.870311][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.888134][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.902598][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.911092][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.918319][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.927487][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.945164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.958988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.968232][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.975473][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.000433][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.013609][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.040625][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.060524][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.082597][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.090107][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.097684][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.107798][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.116868][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.125428][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.135300][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.144127][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.152902][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.160736][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.185246][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.204873][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.214518][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.223605][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.232641][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.244936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.255308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.263800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.272561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.281126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.290503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.299371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.308274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.317717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.326003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.337475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.345519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.353555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.362404][ T4194] device veth0_vlan entered promiscuous mode [ 65.375315][ T4188] device veth0_vlan entered promiscuous mode [ 65.393662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.402313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.413897][ T4194] device veth1_vlan entered promiscuous mode [ 65.431579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.442970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.451003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.459901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.491740][ T4188] device veth1_vlan entered promiscuous mode [ 65.501127][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.509922][ T4183] device veth0_vlan entered promiscuous mode [ 65.520584][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.529113][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.537767][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.576284][ T4183] device veth1_vlan entered promiscuous mode [ 65.584735][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.595378][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.604051][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.612818][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.655296][ T4188] device veth0_macvtap entered promiscuous mode [ 65.666920][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.677503][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.686955][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.696271][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.708296][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.720404][ T4194] device veth0_macvtap entered promiscuous mode [ 65.751557][ T4188] device veth1_macvtap entered promiscuous mode [ 65.760369][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.771274][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.780581][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.794844][ T4194] device veth1_macvtap entered promiscuous mode [ 65.822650][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.831142][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.839599][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.845836][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.857954][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.866691][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.876897][ T4183] device veth0_macvtap entered promiscuous mode [ 65.909485][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.913389][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.924906][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.938644][ T4183] device veth1_macvtap entered promiscuous mode [ 65.946781][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.958861][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.970648][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.987700][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.001000][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.011515][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.022594][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.036320][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.045007][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.053949][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.061816][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.069708][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.086597][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.094785][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.103791][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.113026][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.121597][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.152278][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.164916][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.177146][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.189531][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.199688][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.209993][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.219679][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.234121][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.245783][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.263207][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.274276][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.285431][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.294889][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.304028][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.313185][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.323038][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.346305][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.357303][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.367542][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.386056][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.396436][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.406970][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.419529][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.432222][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.443427][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.453742][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.464702][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.494351][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.506297][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.518182][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.526116][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.540793][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.550263][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.561907][ T26] audit: type=1107 audit(1760049911.969:2): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 66.574438][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.601593][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.611165][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.622906][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.631627][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.641699][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.650737][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.693231][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.703807][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.712380][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 66.717755][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 66.718941][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 66.731162][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.739222][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 66.741323][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 66.746322][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.772034][ T4181] device veth0_vlan entered promiscuous mode [ 66.778553][ T4301] loop0: detected capacity change from 0 to 512 [ 66.787828][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.797853][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.807265][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.816762][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.857153][ T4181] device veth1_vlan entered promiscuous mode [ 66.937939][ T4301] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.965649][ T4301] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.986556][ T4301] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 3: comm syz.0.7: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 67.030513][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.048665][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.064637][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.074409][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.088132][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.088568][ T4181] device veth0_macvtap entered promiscuous mode [ 67.096827][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.108452][ T4181] device veth1_macvtap entered promiscuous mode [ 67.165371][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.182166][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.189896][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.216605][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.227948][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.238127][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.248784][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.259205][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.269893][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.280079][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.292201][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.303897][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.311984][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.320285][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.329125][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.341693][ T4311] device syzkaller0 entered promiscuous mode [ 67.348445][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.357798][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.388854][ T298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.394307][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.409957][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.420186][ T298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.420523][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.438421][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.448366][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.459004][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.469225][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.479885][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.491139][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.498853][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.506935][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.520333][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.529207][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.572436][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.581249][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.596231][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.605229][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.632686][ T298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.640677][ T298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.670346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.712097][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.720713][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.761947][ T4313] IPv6: Can't replace route, no match found [ 67.786589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.802630][ T4315] netlink: 'syz.0.9': attribute type 12 has an invalid length. [ 67.826088][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.856680][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.930480][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.948377][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.969989][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.003398][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.044286][ T4323] loop4: detected capacity change from 0 to 256 [ 68.154938][ T4323] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 68.198755][ T4323] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 68.229772][ T4323] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 68.272224][ T26] audit: type=1800 audit(1760049913.679:3): pid=4323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 68.323110][ T4323] syz.4.11 (4323) used greatest stack depth: 20688 bytes left [ 68.451633][ T4339] syz.4.15[4339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.451810][ T4339] syz.4.15[4339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.532849][ T4341] device syzkaller0 entered promiscuous mode [ 68.793685][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 68.811956][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 68.842331][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 68.852231][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 68.879048][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 69.087039][ T4366] syz.2.28[4366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.087159][ T4366] syz.2.28[4366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.410366][ T4379] loop1: detected capacity change from 0 to 512 [ 69.453491][ T4380] loop2: detected capacity change from 0 to 512 [ 69.507217][ T4379] EXT4-fs (loop1): Ignoring removed oldalloc option [ 69.588147][ T4379] EXT4-fs (loop1): 1 truncate cleaned up [ 69.646515][ T4379] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 69.715755][ T4380] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.31: bad orphan inode 11862016 [ 69.730849][ T4388] loop3: detected capacity change from 0 to 128 [ 69.753947][ T4380] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.782587][ T4380] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.004190][ T4395] attempt to access beyond end of device [ 70.004190][ T4395] loop3: rw=2049, want=793, limit=128 [ 70.013523][ T4393] loop1: detected capacity change from 0 to 512 [ 70.161415][ T4393] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.260659][ T4393] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 70.272907][ T4393] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.306326][ T4393] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.37: corrupted inode contents [ 70.325135][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 70.348948][ T4393] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #16: comm syz.1.37: mark_inode_dirty error [ 70.455760][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 70.488226][ T4393] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.37: corrupted inode contents [ 70.525750][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 70.554055][ T144] attempt to access beyond end of device [ 70.554055][ T144] loop3: rw=1, want=1041, limit=128 [ 70.571955][ T4393] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.37: mark_inode_dirty error [ 70.593606][ T4412] netlink: 272 bytes leftover after parsing attributes in process `syz.4.41'. [ 70.617170][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 70.641396][ T4393] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.37: corrupted inode contents [ 70.719882][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 70.736767][ T4393] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 70.772474][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 70.779253][ T4393] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.37: corrupted inode contents [ 70.825251][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 70.831830][ T4393] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.37: mark_inode_dirty error [ 70.905587][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 70.922618][ T4393] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 70.958257][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 70.988194][ T4393] EXT4-fs (loop1): 1 truncate cleaned up [ 71.012721][ T4393] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 71.093524][ T4422] device syzkaller0 entered promiscuous mode [ 71.195328][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.203125][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.369650][ T4426] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 71.403499][ T4428] loop4: detected capacity change from 0 to 512 [ 71.430438][ T4428] ======================================================= [ 71.430438][ T4428] WARNING: The mand mount option has been deprecated and [ 71.430438][ T4428] and is ignored by this kernel. Remove the mand [ 71.430438][ T4428] option from the mount to silence this warning. [ 71.430438][ T4428] ======================================================= [ 71.593101][ T4433] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 71.632183][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 71.644886][ T26] audit: type=1326 audit(1760049917.059:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 71.662395][ T4436] loop1: detected capacity change from 0 to 512 [ 71.695872][ T26] audit: type=1326 audit(1760049917.059:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 71.767623][ T4436] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 71.773521][ T26] audit: type=1326 audit(1760049917.059:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 71.784684][ T4436] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.807593][ T4436] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz.1.52: Block bitmap for bg 0 marked uninitialized [ 71.834555][ T26] audit: type=1326 audit(1760049917.059:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 71.837873][ T4436] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 71.857915][ T26] audit: type=1326 audit(1760049917.059:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 71.890315][ T26] audit: type=1326 audit(1760049917.059:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 71.913354][ T26] audit: type=1326 audit(1760049917.059:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 71.936143][ T26] audit: type=1326 audit(1760049917.059:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 71.958157][ T26] audit: type=1326 audit(1760049917.059:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 71.981541][ T26] audit: type=1326 audit(1760049917.059:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f51701ec9 code=0x7ffc0000 [ 72.017386][ T4436] EXT4-fs (loop1): 1 orphan inode deleted [ 72.023661][ T4436] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.058818][ T4442] sd 0:0:1:0: device reset [ 72.219261][ T4448] loop2: detected capacity change from 0 to 512 [ 72.400104][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.432002][ T4448] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.477902][ T4457] device syzkaller0 entered promiscuous mode [ 73.957342][ T4481] loop4: detected capacity change from 0 to 128 [ 74.062982][ T4481] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.107661][ T4481] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.205254][ T4489] loop1: detected capacity change from 0 to 4096 [ 74.221679][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 74.232057][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 74.251199][ T4487] loop2: detected capacity change from 0 to 512 [ 74.286512][ T4487] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.294343][ T4489] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.330255][ T4487] EXT4-fs error (device loop2): ext4_init_orphan_info:612: comm syz.2.71: orphan file block 0: bad magic [ 74.350247][ T4487] EXT4-fs (loop2): mount failed [ 75.074794][ T4509] device syzkaller0 entered promiscuous mode [ 75.324034][ T4519] loop4: detected capacity change from 0 to 512 [ 75.394914][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 75.449460][ T4519] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 75.643708][ T4519] device wireguard0 entered promiscuous mode [ 75.920903][ T4529] loop4: detected capacity change from 0 to 512 [ 75.990567][ T4529] [ 75.992937][ T4529] ====================================================== [ 75.999951][ T4529] WARNING: possible circular locking dependency detected [ 76.006990][ T4529] syzkaller #0 Not tainted [ 76.011428][ T4529] ------------------------------------------------------ [ 76.018451][ T4529] syz.4.84/4529 is trying to acquire lock: [ 76.024283][ T4529] ffff88807bc8abd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1c0/0x2d20 [ 76.034413][ T4529] [ 76.034413][ T4529] but task is already holding lock: [ 76.041791][ T4529] ffff88807bc88650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 76.050882][ T4529] [ 76.050882][ T4529] which lock already depends on the new lock. [ 76.050882][ T4529] [ 76.061289][ T4529] [ 76.061289][ T4529] the existing dependency chain (in reverse order) is: [ 76.070317][ T4529] [ 76.070317][ T4529] -> #1 (sb_internal){.+.+}-{0:0}: [ 76.077634][ T4529] percpu_down_read+0x46/0x1b0 [ 76.082944][ T4529] ext4_evict_inode+0x444/0x1080 [ 76.088414][ T4529] evict+0x485/0x870 [ 76.092837][ T4529] ext4_ext_migrate+0xc0a/0xe50 [ 76.098219][ T4529] ext4_ioctl+0x18a5/0x3590 [ 76.103255][ T4529] __se_sys_ioctl+0xfa/0x170 [ 76.108381][ T4529] do_syscall_64+0x4c/0xa0 [ 76.113329][ T4529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.119751][ T4529] [ 76.119751][ T4529] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 76.128184][ T4529] __lock_acquire+0x2c33/0x7c60 [ 76.133565][ T4529] lock_acquire+0x197/0x3f0 [ 76.138601][ T4529] percpu_down_read+0x46/0x1b0 [ 76.143896][ T4529] ext4_writepages+0x1c0/0x2d20 [ 76.149279][ T4529] do_writepages+0x48d/0x6d0 [ 76.154399][ T4529] __writeback_single_inode+0x153/0xda0 [ 76.160471][ T4529] writeback_single_inode+0x221/0x8b0 [ 76.166375][ T4529] write_inode_now+0x217/0x280 [ 76.171673][ T4529] iput+0x5ab/0x8a0 [ 76.176018][ T4529] ext4_xattr_set_entry+0x10ff/0x3d30 [ 76.181923][ T4529] ext4_xattr_block_set+0x4f7/0x2d30 [ 76.187740][ T4529] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 76.194089][ T4529] __ext4_expand_extra_isize+0x301/0x3e0 [ 76.200253][ T4529] __ext4_mark_inode_dirty+0x469/0x700 [ 76.206244][ T4529] ext4_evict_inode+0xa81/0x1080 [ 76.211719][ T4529] evict+0x485/0x870 [ 76.216159][ T4529] ext4_orphan_cleanup+0xaa9/0x12e0 [ 76.221885][ T4529] ext4_fill_super+0x92f0/0x9a60 [ 76.227355][ T4529] mount_bdev+0x287/0x3c0 [ 76.232219][ T4529] legacy_get_tree+0xe6/0x180 [ 76.237431][ T4529] vfs_get_tree+0x88/0x270 [ 76.242387][ T4529] do_new_mount+0x24a/0xa40 [ 76.247514][ T4529] __se_sys_mount+0x2d6/0x3c0 [ 76.252724][ T4529] do_syscall_64+0x4c/0xa0 [ 76.257676][ T4529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.264099][ T4529] [ 76.264099][ T4529] other info that might help us debug this: [ 76.264099][ T4529] [ 76.274333][ T4529] Possible unsafe locking scenario: [ 76.274333][ T4529] [ 76.281791][ T4529] CPU0 CPU1 [ 76.287159][ T4529] ---- ---- [ 76.292529][ T4529] lock(sb_internal); [ 76.296613][ T4529] lock(&sbi->s_writepages_rwsem); [ 76.304341][ T4529] lock(sb_internal); [ 76.310941][ T4529] lock(&sbi->s_writepages_rwsem); [ 76.316156][ T4529] [ 76.316156][ T4529] *** DEADLOCK *** [ 76.316156][ T4529] [ 76.324305][ T4529] 3 locks held by syz.4.84/4529: [ 76.329248][ T4529] #0: ffff88807bc880e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 76.339384][ T4529] #1: ffff88807bc88650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 76.348897][ T4529] #2: ffff8880601780c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 76.359498][ T4529] [ 76.359498][ T4529] stack backtrace: [ 76.365418][ T4529] CPU: 1 PID: 4529 Comm: syz.4.84 Not tainted syzkaller #0 [ 76.372971][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.383058][ T4529] Call Trace: [ 76.386352][ T4529] [ 76.389301][ T4529] dump_stack_lvl+0x168/0x230 [ 76.393995][ T4529] ? load_image+0x3b0/0x3b0 [ 76.398521][ T4529] ? show_regs_print_info+0x20/0x20 [ 76.403740][ T4529] ? print_circular_bug+0x12b/0x1a0 [ 76.408954][ T4529] check_noncircular+0x274/0x310 [ 76.413907][ T4529] ? add_chain_block+0x940/0x940 [ 76.418864][ T4529] ? _find_first_zero_bit+0xce/0xf0 [ 76.424082][ T4529] ? add_lock_to_list+0x18d/0x280 [ 76.429128][ T4529] __lock_acquire+0x2c33/0x7c60 [ 76.434061][ T4529] ? verify_lock_unused+0x140/0x140 [ 76.439377][ T4529] lock_acquire+0x197/0x3f0 [ 76.443897][ T4529] ? ext4_writepages+0x1c0/0x2d20 [ 76.448945][ T4529] ? check_path+0x40/0x40 [ 76.453293][ T4529] ? __might_sleep+0xf0/0xf0 [ 76.457893][ T4529] ? check_noncircular+0x16f/0x310 [ 76.463022][ T4529] ? read_lock_is_recursive+0x10/0x10 [ 76.468419][ T4529] ? mark_lock+0x94/0x320 [ 76.472762][ T4529] ? __lock_acquire+0x13ad/0x7c60 [ 76.477801][ T4529] percpu_down_read+0x46/0x1b0 [ 76.482614][ T4529] ? ext4_writepages+0x1c0/0x2d20 [ 76.487680][ T4529] ext4_writepages+0x1c0/0x2d20 [ 76.492562][ T4529] ? rcu_is_watching+0x11/0xa0 [ 76.497333][ T4529] ? lock_release+0xba/0x870 [ 76.501944][ T4529] ? rcu_lock_release+0x5/0x20 [ 76.506715][ T4529] ? mark_lock+0x94/0x320 [ 76.511066][ T4529] ? verify_lock_unused+0x140/0x140 [ 76.516278][ T4529] ? __lock_acquire+0x7c60/0x7c60 [ 76.521324][ T4529] ? mark_lock+0x94/0x320 [ 76.525666][ T4529] ? ext4_readpage+0x2e0/0x2e0 [ 76.530466][ T4529] ? __lock_acquire+0x13ad/0x7c60 [ 76.535520][ T4529] ? 0xffffffffa0028b7c [ 76.539695][ T4529] ? __lock_acquire+0x7c60/0x7c60 [ 76.544729][ T4529] ? do_raw_spin_lock+0x11d/0x280 [ 76.549783][ T4529] ? do_raw_spin_unlock+0x11d/0x230 [ 76.554993][ T4529] ? ext4_readpage+0x2e0/0x2e0 [ 76.559780][ T4529] do_writepages+0x48d/0x6d0 [ 76.564384][ T4529] ? __writepage+0x130/0x130 [ 76.568983][ T4529] ? writeback_single_inode+0x216/0x8b0 [ 76.574554][ T4529] ? __lock_acquire+0x7c60/0x7c60 [ 76.579585][ T4529] ? do_raw_spin_lock+0x11d/0x280 [ 76.584615][ T4529] __writeback_single_inode+0x153/0xda0 [ 76.590173][ T4529] writeback_single_inode+0x221/0x8b0 [ 76.595560][ T4529] ? write_inode_now+0x280/0x280 [ 76.600521][ T4529] write_inode_now+0x217/0x280 [ 76.605303][ T4529] ? bdi_split_work_to_wbs+0x820/0x820 [ 76.610777][ T4529] ? do_raw_spin_unlock+0x11d/0x230 [ 76.615986][ T4529] iput+0x5ab/0x8a0 [ 76.619814][ T4529] ext4_xattr_set_entry+0x10ff/0x3d30 [ 76.625213][ T4529] ? ext4_xattr_ibody_set+0x330/0x330 [ 76.630596][ T4529] ? __ext4_journal_get_write_access+0x2f7/0x6d0 [ 76.636940][ T4529] ? __might_sleep+0xf0/0xf0 [ 76.641545][ T4529] ? ext4_get_group_desc+0x433/0x4d0 [ 76.646860][ T4529] ext4_xattr_block_set+0x4f7/0x2d30 [ 76.652161][ T4529] ? do_raw_spin_unlock+0x11d/0x230 [ 76.657385][ T4529] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 76.663123][ T4529] ? ext4_xattr_block_find+0x500/0x500 [ 76.668584][ T4529] ? ext4_xattr_block_find+0x433/0x500 [ 76.674053][ T4529] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 76.679884][ T4529] __ext4_expand_extra_isize+0x301/0x3e0 [ 76.685549][ T4529] __ext4_mark_inode_dirty+0x469/0x700 [ 76.691046][ T4529] ext4_evict_inode+0xa81/0x1080 [ 76.695991][ T4529] ? _raw_spin_unlock+0x24/0x40 [ 76.700861][ T4529] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.706765][ T4529] ? do_raw_spin_unlock+0x11d/0x230 [ 76.711989][ T4529] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.717897][ T4529] evict+0x485/0x870 [ 76.721834][ T4529] ? __lock_acquire+0x7c60/0x7c60 [ 76.726882][ T4529] ? proc_nr_inodes+0x320/0x320 [ 76.731758][ T4529] ? do_raw_spin_unlock+0x11d/0x230 [ 76.736974][ T4529] ? _raw_spin_unlock+0x24/0x40 [ 76.741846][ T4529] ? iput+0x706/0x8a0 [ 76.745844][ T4529] ext4_orphan_cleanup+0xaa9/0x12e0 [ 76.751059][ T4529] ? ext4_orphan_del+0xb90/0xb90 [ 76.756021][ T4529] ? errseq_check_and_advance+0x62/0x120 [ 76.761664][ T4529] ext4_fill_super+0x92f0/0x9a60 [ 76.766630][ T4529] ? ext4_mount+0x40/0x40 [ 76.770968][ T4529] ? set_blocksize+0x1f1/0x370 [ 76.775753][ T4529] ? sb_set_blocksize+0xa5/0xe0 [ 76.780624][ T4529] mount_bdev+0x287/0x3c0 [ 76.784968][ T4529] ? ext4_mount+0x40/0x40 [ 76.789319][ T4529] legacy_get_tree+0xe6/0x180 [ 76.794018][ T4529] ? ext4_errno_to_code+0x160/0x160 [ 76.799230][ T4529] vfs_get_tree+0x88/0x270 [ 76.803660][ T4529] do_new_mount+0x24a/0xa40 [ 76.808178][ T4529] __se_sys_mount+0x2d6/0x3c0 [ 76.812878][ T4529] ? __x64_sys_mount+0xc0/0xc0 [ 76.817666][ T4529] ? lockdep_hardirqs_on+0x94/0x140 [ 76.822879][ T4529] ? __x64_sys_mount+0x1c/0xc0 [ 76.827666][ T4529] do_syscall_64+0x4c/0xa0 [ 76.832097][ T4529] ? clear_bhb_loop+0x30/0x80 [ 76.836793][ T4529] ? clear_bhb_loop+0x30/0x80 [ 76.841500][ T4529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.847419][ T4529] RIP: 0033:0x7f86776e966a [ 76.851853][ T4529] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.871490][ T4529] RSP: 002b:00007f867592de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.879912][ T4529] RAX: ffffffffffffffda RBX: 00007f867592def0 RCX: 00007f86776e966a [ 76.887895][ T4529] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f867592deb0 [ 76.895891][ T4529] RBP: 0000200000000180 R08: 00007f867592def0 R09: 0000000001800700 [ 76.903871][ T4529] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 76.911841][ T4529] R13: 00007f867592deb0 R14: 000000000000047c R15: 00002000000004c0 [ 76.919824][ T4529] [ 76.930287][ T4529] ------------[ cut here ]------------ [ 76.936413][ T4529] EA inode 11 i_nlink=2 [ 76.936664][ T4529] WARNING: CPU: 1 PID: 4529 at fs/ext4/xattr.c:1021 ext4_xattr_inode_update_ref+0x517/0x570 [ 76.951429][ T4529] Modules linked in: [ 76.961566][ T4529] CPU: 1 PID: 4529 Comm: syz.4.84 Not tainted syzkaller #0 [ 76.970269][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.983388][ T4529] RIP: 0010:ext4_xattr_inode_update_ref+0x517/0x570 [ 76.990017][ T4529] Code: 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 fb e6 a2 ff 49 8b 37 48 c7 c7 60 72 1d 8a 44 89 f2 e8 79 1c 85 07 <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 00 fe ff ff [ 77.012094][ T4529] RSP: 0018:ffffc9000340f140 EFLAGS: 00010246 [ 77.023545][ T4529] RAX: f276083edfae3e00 RBX: ffff888060251690 RCX: 0000000000080000 [ 77.031659][ T4529] RDX: ffffc9000f35d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 77.043120][ T4529] RBP: ffffc9000340f230 R08: dffffc0000000000 R09: fffff52000681d8d [ 77.051290][ T4529] R10: fffff52000681d8d R11: 1ffff92000681d8c R12: dffffc0000000000 [ 77.059851][ T4529] R13: ffffc9000340f1a0 R14: 0000000000000002 R15: ffff8880602516d0 [ 77.068166][ T4529] FS: 00007f867592e6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 77.077373][ T4529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.084202][ T4529] CR2: 00007fe8400c7dac CR3: 000000007385b000 CR4: 00000000003506e0 [ 77.092401][ T4529] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.100445][ T4529] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.108771][ T4529] Call Trace: [ 77.112276][ T4529] [ 77.115260][ T4529] ? ext4_xattr_block_csum+0x500/0x500 [ 77.120787][ T4529] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 77.126644][ T4529] ext4_xattr_set_entry+0xed0/0x3d30 [ 77.132191][ T4529] ? rcu_is_watching+0x11/0xa0 [ 77.137741][ T4529] ? mark_buffer_dirty_inode+0xf3/0x2e0 [ 77.144105][ T4529] ? __wake_up_bit+0x100/0x100 [ 77.148941][ T4529] ? inode_needs_sync+0x51/0x170 [ 77.154623][ T4529] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 77.160148][ T4529] ? ext4_xattr_ibody_set+0x330/0x330 [ 77.165818][ T4529] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 77.171600][ T4529] ? ext4_xattr_block_find+0x500/0x500 [ 77.177368][ T4529] ext4_xattr_ibody_set+0x112/0x330 [ 77.182836][ T4529] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 77.188737][ T4529] __ext4_expand_extra_isize+0x301/0x3e0 [ 77.194816][ T4529] __ext4_mark_inode_dirty+0x469/0x700 [ 77.200357][ T4529] ext4_evict_inode+0xa81/0x1080 [ 77.205609][ T4529] ? _raw_spin_unlock+0x24/0x40 [ 77.210533][ T4529] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 77.216756][ T4529] ? do_raw_spin_unlock+0x11d/0x230 [ 77.222241][ T4529] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 77.228209][ T4529] evict+0x485/0x870 [ 77.232389][ T4529] ? __lock_acquire+0x7c60/0x7c60 [ 77.237497][ T4529] ? proc_nr_inodes+0x320/0x320 [ 77.243315][ T4529] ? do_raw_spin_unlock+0x11d/0x230 [ 77.256898][ T4529] ? _raw_spin_unlock+0x24/0x40 [ 77.262503][ T4529] ? iput+0x706/0x8a0 [ 77.266590][ T4529] ext4_orphan_cleanup+0xaa9/0x12e0 [ 77.272196][ T4529] ? ext4_orphan_del+0xb90/0xb90 [ 77.277244][ T4529] ? errseq_check_and_advance+0x62/0x120 [ 77.279470][ T4321] syz.0.10 (4321) used greatest stack depth: 18720 bytes left [ 77.290565][ T4529] ext4_fill_super+0x92f0/0x9a60 [ 77.296245][ T4529] ? ext4_mount+0x40/0x40 [ 77.300683][ T4529] ? set_blocksize+0x1f1/0x370 [ 77.305802][ T4529] ? sb_set_blocksize+0xa5/0xe0 [ 77.310774][ T4529] mount_bdev+0x287/0x3c0 [ 77.316335][ T4529] ? ext4_mount+0x40/0x40 [ 77.320700][ T4529] legacy_get_tree+0xe6/0x180 [ 77.325442][ T4529] ? ext4_errno_to_code+0x160/0x160 [ 77.330647][ T4529] vfs_get_tree+0x88/0x270 [ 77.335108][ T4529] do_new_mount+0x24a/0xa40 [ 77.339637][ T4529] __se_sys_mount+0x2d6/0x3c0 [ 77.344739][ T4529] ? __x64_sys_mount+0xc0/0xc0 [ 77.349527][ T4529] ? lockdep_hardirqs_on+0x94/0x140 [ 77.354758][ T4529] ? __x64_sys_mount+0x1c/0xc0 [ 77.359609][ T4529] do_syscall_64+0x4c/0xa0 [ 77.364060][ T4529] ? clear_bhb_loop+0x30/0x80 [ 77.368740][ T4529] ? clear_bhb_loop+0x30/0x80 [ 77.373447][ T4529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.379347][ T4529] RIP: 0033:0x7f86776e966a [ 77.383913][ T4529] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.404325][ T4529] RSP: 002b:00007f867592de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.412853][ T4529] RAX: ffffffffffffffda RBX: 00007f867592def0 RCX: 00007f86776e966a [ 77.420851][ T4529] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f867592deb0 [ 77.429035][ T4529] RBP: 0000200000000180 R08: 00007f867592def0 R09: 0000000001800700 [ 77.437359][ T4529] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 77.437751][ T4240] Bluetooth: hci5: command 0x1003 tx timeout [ 77.449088][ T4529] R13: 00007f867592deb0 R14: 000000000000047c R15: 00002000000004c0 [ 77.451915][ T146] Bluetooth: hci5: sending frame failed (-49) [ 77.460244][ T4529] [ 77.468911][ T4529] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.476208][ T4529] CPU: 0 PID: 4529 Comm: syz.4.84 Not tainted syzkaller #0 [ 77.483410][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 77.493455][ T4529] Call Trace: [ 77.496719][ T4529] [ 77.499640][ T4529] dump_stack_lvl+0x168/0x230 [ 77.504310][ T4529] ? show_regs_print_info+0x20/0x20 [ 77.509494][ T4529] ? load_image+0x3b0/0x3b0 [ 77.513986][ T4529] panic+0x2c9/0x7f0 [ 77.517870][ T4529] ? bpf_jit_dump+0xd0/0xd0 [ 77.522380][ T4529] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 77.528346][ T4529] __warn+0x248/0x2b0 [ 77.532335][ T4529] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 77.538320][ T4529] report_bug+0x1b7/0x2e0 [ 77.542726][ T4529] handle_bug+0x3a/0x70 [ 77.546884][ T4529] exc_invalid_op+0x16/0x40 [ 77.551383][ T4529] asm_exc_invalid_op+0x16/0x20 [ 77.556223][ T4529] RIP: 0010:ext4_xattr_inode_update_ref+0x517/0x570 [ 77.562809][ T4529] Code: 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 fb e6 a2 ff 49 8b 37 48 c7 c7 60 72 1d 8a 44 89 f2 e8 79 1c 85 07 <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 00 fe ff ff [ 77.582405][ T4529] RSP: 0018:ffffc9000340f140 EFLAGS: 00010246 [ 77.588467][ T4529] RAX: f276083edfae3e00 RBX: ffff888060251690 RCX: 0000000000080000 [ 77.596438][ T4529] RDX: ffffc9000f35d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 77.604406][ T4529] RBP: ffffc9000340f230 R08: dffffc0000000000 R09: fffff52000681d8d [ 77.612370][ T4529] R10: fffff52000681d8d R11: 1ffff92000681d8c R12: dffffc0000000000 [ 77.620331][ T4529] R13: ffffc9000340f1a0 R14: 0000000000000002 R15: ffff8880602516d0 [ 77.628306][ T4529] ? ext4_xattr_block_csum+0x500/0x500 [ 77.633760][ T4529] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 77.639208][ T4529] ext4_xattr_set_entry+0xed0/0x3d30 [ 77.644480][ T4529] ? rcu_is_watching+0x11/0xa0 [ 77.649232][ T4529] ? mark_buffer_dirty_inode+0xf3/0x2e0 [ 77.654769][ T4529] ? __wake_up_bit+0x100/0x100 [ 77.659519][ T4529] ? inode_needs_sync+0x51/0x170 [ 77.664447][ T4529] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 77.669894][ T4529] ? ext4_xattr_ibody_set+0x330/0x330 [ 77.675279][ T4529] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 77.681095][ T4529] ? ext4_xattr_block_find+0x500/0x500 [ 77.686541][ T4529] ext4_xattr_ibody_set+0x112/0x330 [ 77.691730][ T4529] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 77.697537][ T4529] __ext4_expand_extra_isize+0x301/0x3e0 [ 77.703172][ T4529] __ext4_mark_inode_dirty+0x469/0x700 [ 77.708619][ T4529] ext4_evict_inode+0xa81/0x1080 [ 77.713536][ T4529] ? _raw_spin_unlock+0x24/0x40 [ 77.718375][ T4529] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 77.724262][ T4529] ? do_raw_spin_unlock+0x11d/0x230 [ 77.729446][ T4529] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 77.735323][ T4529] evict+0x485/0x870 [ 77.739210][ T4529] ? __lock_acquire+0x7c60/0x7c60 [ 77.744222][ T4529] ? proc_nr_inodes+0x320/0x320 [ 77.749083][ T4529] ? do_raw_spin_unlock+0x11d/0x230 [ 77.754281][ T4529] ? _raw_spin_unlock+0x24/0x40 [ 77.759123][ T4529] ? iput+0x706/0x8a0 [ 77.763096][ T4529] ext4_orphan_cleanup+0xaa9/0x12e0 [ 77.768289][ T4529] ? ext4_orphan_del+0xb90/0xb90 [ 77.773238][ T4529] ? errseq_check_and_advance+0x62/0x120 [ 77.778858][ T4529] ext4_fill_super+0x92f0/0x9a60 [ 77.783801][ T4529] ? ext4_mount+0x40/0x40 [ 77.788124][ T4529] ? set_blocksize+0x1f1/0x370 [ 77.792886][ T4529] ? sb_set_blocksize+0xa5/0xe0 [ 77.797733][ T4529] mount_bdev+0x287/0x3c0 [ 77.802056][ T4529] ? ext4_mount+0x40/0x40 [ 77.806378][ T4529] legacy_get_tree+0xe6/0x180 [ 77.811042][ T4529] ? ext4_errno_to_code+0x160/0x160 [ 77.816245][ T4529] vfs_get_tree+0x88/0x270 [ 77.820654][ T4529] do_new_mount+0x24a/0xa40 [ 77.825187][ T4529] __se_sys_mount+0x2d6/0x3c0 [ 77.829856][ T4529] ? __x64_sys_mount+0xc0/0xc0 [ 77.834609][ T4529] ? lockdep_hardirqs_on+0x94/0x140 [ 77.839798][ T4529] ? __x64_sys_mount+0x1c/0xc0 [ 77.844549][ T4529] do_syscall_64+0x4c/0xa0 [ 77.848973][ T4529] ? clear_bhb_loop+0x30/0x80 [ 77.853643][ T4529] ? clear_bhb_loop+0x30/0x80 [ 77.858320][ T4529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.864202][ T4529] RIP: 0033:0x7f86776e966a [ 77.868607][ T4529] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.888292][ T4529] RSP: 002b:00007f867592de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.896694][ T4529] RAX: ffffffffffffffda RBX: 00007f867592def0 RCX: 00007f86776e966a [ 77.904658][ T4529] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f867592deb0 [ 77.912615][ T4529] RBP: 0000200000000180 R08: 00007f867592def0 R09: 0000000001800700 [ 77.920569][ T4529] R10: 0000000001800700 R11: 0000000000000246 R12: 00002000000001c0 [ 77.928537][ T4529] R13: 00007f867592deb0 R14: 000000000000047c R15: 00002000000004c0 [ 77.936502][ T4529] [ 77.939799][ T4529] Kernel Offset: disabled [ 77.944125][ T4529] Rebooting in 86400 seconds..