last executing test programs: 2m34.302295248s ago: executing program 4 (id=98): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) utimes(0x0, 0x0) 2m33.16167638s ago: executing program 4 (id=99): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x101}}, 0x30) getdents64(r3, 0x0, 0x0) 2m32.923281545s ago: executing program 4 (id=100): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x13, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b52, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r4, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 2m31.592706551s ago: executing program 4 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd2(0x3ff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000040001801c0002"], 0x34}}, 0x0) 2m29.932905903s ago: executing program 4 (id=106): sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2m27.541732259s ago: executing program 4 (id=111): unshare(0x4000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) unshare(0x64000600) 2m12.679807657s ago: executing program 1 (id=150): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x200}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x101}}, 0x30) getdents64(r2, 0x0, 0x0) 2m12.464325601s ago: executing program 32 (id=111): unshare(0x4000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) unshare(0x64000600) 2m10.99050485s ago: executing program 1 (id=159): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@data_err_ignore}]}, 0x3, 0x519, &(0x7f0000001300)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffed1, &(0x7f00000002c0)=0xfffffffffffffffe) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c00000010004b040074ed00000000007a00090034da09acf0d1a12646789bbae3484f4b8f358a7b191193e108facfa8452f92c6f4b5bff1c791d035fa6a10f8aee71634b780f3db8cf9b1721609b1b2fffe11a1182b88492addc57418df2d", @ANYRES8], 0x4c}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 2m7.838923281s ago: executing program 1 (id=165): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x80, 0x1, 0x0, 0x6656142a, 0x5c4, 0x2, 0x8000000000000001}, &(0x7f0000000200)={0xafe, 0x7, 0x4, 0xffffffff, 0x8, 0x7, 0x1ff, 0x4}, &(0x7f00000003c0)={0x98cf, 0x7, 0xfffffffffffffff9, 0x4, 0x4, 0x8, 0x6, 0x1}, &(0x7f0000000640), &(0x7f00000009c0)={&(0x7f0000000680), 0x8}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f00000003c0)=ANY=[], 0x1, 0x1507, &(0x7f0000001b00)="$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") syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT=r2], 0x1, 0x536, &(0x7f0000000400)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @random="80cc03df2bac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe0}}, 0x880) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="150a270000000000611154000bbb6e544816c8ff020000000022000000000000950000"], 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002}}) pread64(r0, &(0x7f0000000480)=""/127, 0x7f, 0x2a) 2m5.129139544s ago: executing program 1 (id=169): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2m3.27373014s ago: executing program 1 (id=176): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) 2m3.100471723s ago: executing program 1 (id=177): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xf36, @remote, 0x2}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 1m47.909795577s ago: executing program 33 (id=177): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xf36, @remote, 0x2}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 1m15.165517333s ago: executing program 5 (id=263): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x200}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 1m14.197264492s ago: executing program 5 (id=265): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x80080) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[]) socket$inet6(0xa, 0x80000, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m11.826683127s ago: executing program 5 (id=268): pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r5, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0x3c, r5, 0x11b, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c082}, 0x24000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x141a82, 0x0) sendfile(r6, r6, 0x0, 0x4) 1m10.062995532s ago: executing program 5 (id=272): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0xe2400, 0xa0) 1m8.684672438s ago: executing program 5 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x6, 0x0, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) 1m6.624660588s ago: executing program 5 (id=278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 1m6.343220143s ago: executing program 34 (id=278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 25.014049315s ago: executing program 6 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00'}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000004c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r5 = gettid() ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)) 22.557030373s ago: executing program 6 (id=348): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0x4000, 0x10, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) close(r0) 22.19607802s ago: executing program 6 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f00000000c0)) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) 13.9626029s ago: executing program 7 (id=359): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x200}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x101}}, 0x30) getdents64(r3, 0x0, 0x0) 12.493224368s ago: executing program 7 (id=361): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@usrjquota}]}, 0x3, 0x546, &(0x7f0000000180)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_read_part_table(0x5e2, &(0x7f0000000600)="$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") r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0xfffffff7, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000900)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x5, 0x9, 0x9ec8}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00), 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0088a80180c2"], 0x4e) syncfs(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r7, 0xffffffffffffffff, 0x0) 12.487680188s ago: executing program 0 (id=362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x13, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b52, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r4, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 11.971492588s ago: executing program 2 (id=364): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x401, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) socket(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x2004c000) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x70bd28, 0x25dfdffb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) 11.891363629s ago: executing program 3 (id=365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000340), 0x6, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 10.84329954s ago: executing program 3 (id=366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000100)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000dd0c632ff3179d146a3922b14d39a70000"], 0x50) inotify_init1(0x800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) 10.842501s ago: executing program 0 (id=367): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8) read$watch_queue(r2, &(0x7f0000000300)=""/137, 0x89) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) io_setup(0x5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="d2ff"}) 9.739395771s ago: executing program 7 (id=368): socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0xc831) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1d0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)) syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000000)='./bus\x00', 0x322020, &(0x7f0000000580)=ANY=[], 0x3, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x4, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80500202}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x400d4) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 9.738886421s ago: executing program 0 (id=369): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") 8.645131303s ago: executing program 6 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$inet6(r0, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20000, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000180)='./file1\x00', 0x1000, 0x0) 5.844187527s ago: executing program 3 (id=371): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x200}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x101}}, 0x30) getdents64(r3, 0x0, 0x0) 5.16493464s ago: executing program 6 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.126494641s ago: executing program 7 (id=373): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x200}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 5.080036242s ago: executing program 2 (id=374): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0x20048040) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) getresuid(0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x23, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0xdc3f, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, 0x0, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x3}}, @union]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1}, 0x28) 4.978953184s ago: executing program 0 (id=375): sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 4.968616744s ago: executing program 3 (id=376): socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xb87b, 0x9, 0x4, 0x1, 0x6}) openat$tun(0xffffffffffffff9c, 0x0, 0x402000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "7d7408e707adb5a5"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x0, 0xfffffffffffffffb}}, @CGW_MOD_UID={0x8, 0xe, 0xee01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) unshare(0x64000600) 4.412114515s ago: executing program 6 (id=377): creat(&(0x7f0000000140)='./file0\x00', 0x82) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) get_robust_list(0x0, &(0x7f00000022c0)=0x0, &(0x7f0000002300)) 4.267058818s ago: executing program 7 (id=378): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES8=0x0, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000005040)=0x35) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x6}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) 3.868961195s ago: executing program 2 (id=379): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8) read$watch_queue(r2, &(0x7f0000000300)=""/137, 0x89) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) io_setup(0x5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="d2ff"}) 1.744045786s ago: executing program 2 (id=380): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x10000a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000200)=@sg0, 0x0, &(0x7f00000002c0)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) 1.628295389s ago: executing program 7 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000100)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000dd0c632ff3179d146a3922b14d39a70000"], 0x50) inotify_init1(0x800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) 1.390502143s ago: executing program 0 (id=382): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) clock_adjtime(0x2, 0x0) 572.165869ms ago: executing program 2 (id=383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) shutdown(r0, 0x0) 528.52305ms ago: executing program 0 (id=384): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x401, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) socket(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x2004c000) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x70bd28, 0x25dfdffb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) 429.462372ms ago: executing program 2 (id=385): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000001000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@sb={'sb', 0x3d, 0x2}}, {@oldalloc}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0x0, 0x45d, &(0x7f0000000ac0)="$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") 142.946717ms ago: executing program 3 (id=386): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x200}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x9, 0x101}}, 0x30) getdents64(r3, 0x0, 0x0) 0s ago: executing program 3 (id=387): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x38040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x80080) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[]) socket$inet6(0xa, 0x80000, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) kernel console output (not intermixed with test programs): 2(bridge_slave_1) entered blocking state [ 62.998829][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.007471][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.033624][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.057569][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.065032][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.072841][ T4184] device bridge_slave_0 entered promiscuous mode [ 63.110236][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.119679][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.128225][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.138630][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.145948][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.153846][ T4185] device bridge_slave_0 entered promiscuous mode [ 63.163997][ T4182] team0: Port device team_slave_0 added [ 63.172955][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.194099][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.201411][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.209413][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.217962][ T4182] team0: Port device team_slave_1 added [ 63.234078][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.284569][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.310944][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.330960][ T4186] team0: Port device team_slave_0 added [ 63.338513][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.348189][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.355729][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.363448][ T4183] device bridge_slave_0 entered promiscuous mode [ 63.371639][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.378972][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.405025][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.418040][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.429089][ T4186] team0: Port device team_slave_1 added [ 63.441406][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.448551][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.456609][ T4183] device bridge_slave_1 entered promiscuous mode [ 63.464362][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.471450][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.497394][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.559857][ T4184] team0: Port device team_slave_0 added [ 63.579299][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.591390][ T4185] team0: Port device team_slave_0 added [ 63.599771][ T4185] team0: Port device team_slave_1 added [ 63.606324][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.613368][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.639752][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.652094][ T4184] team0: Port device team_slave_1 added [ 63.668398][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.693084][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.700439][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.726808][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.774696][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.782257][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.808539][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.831987][ T4182] device hsr_slave_0 entered promiscuous mode [ 63.838983][ T4182] device hsr_slave_1 entered promiscuous mode [ 63.855310][ T4183] team0: Port device team_slave_0 added [ 63.861921][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.868993][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.895546][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.907135][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.914093][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.940324][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.952417][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.959511][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.985470][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.999175][ T4183] team0: Port device team_slave_1 added [ 64.042139][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.049190][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.076018][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.091113][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.098186][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.124189][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.174301][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.181509][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.188491][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.196568][ T4186] Cannot create hsr debugfs directory [ 64.233594][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.240383][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.247301][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.255040][ T4184] Cannot create hsr debugfs directory [ 64.263861][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.271282][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.278126][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.285950][ T4185] Cannot create hsr debugfs directory [ 64.305762][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 64.317667][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 64.324092][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 64.330755][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 64.337189][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 64.367323][ T4183] device hsr_slave_0 entered promiscuous mode [ 64.374110][ T4183] device hsr_slave_1 entered promiscuous mode [ 64.380905][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.389983][ T4183] Cannot create hsr debugfs directory [ 64.686377][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.703582][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.713795][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.729685][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.740621][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.762881][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.772518][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.782349][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.856154][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.873005][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.889180][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.898030][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.986987][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.997581][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.007744][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.020554][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.041724][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.071257][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.108049][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.122948][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.132438][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.155001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.162861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.172593][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.189606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.199935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.211315][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.218614][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.233253][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.244619][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.254686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.263395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.273821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.282417][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.289535][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.298797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.316166][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.325305][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.333706][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.340794][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.349424][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.358836][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.368999][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.382284][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.406933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.416764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.427686][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.434821][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.459822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.469922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.479318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.489304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.515815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.523920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.533982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.542987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.551815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.574535][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.592190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.602432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.611624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.643417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.652688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.663050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.671689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.681548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.690013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.701798][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.714892][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.722272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.731768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.750194][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.763786][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.790376][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.800075][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.836878][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.852380][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.875528][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.882622][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.891653][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.900458][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.910423][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.917531][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.926731][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.935554][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.948726][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.963136][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.972911][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.990304][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.022032][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.040740][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.052801][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.064069][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.075524][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.084147][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.093017][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.103772][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.111832][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.125263][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.136390][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.149919][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.159523][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.168393][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.176961][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.230034][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.239295][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.248614][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.255745][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.264684][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.276734][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.285904][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.292994][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.301032][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.310031][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.319321][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.327754][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.335666][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.344328][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.353420][ T1211] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.360574][ T1211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.369018][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.379617][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.385299][ T2302] Bluetooth: hci0: command 0x041b tx timeout [ 66.388290][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 66.394012][ T2302] Bluetooth: hci3: command 0x041b tx timeout [ 66.400197][ T1211] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.412865][ T1211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.412967][ T2302] Bluetooth: hci4: command 0x041b tx timeout [ 66.421941][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.433675][ T2302] Bluetooth: hci2: command 0x041b tx timeout [ 66.435687][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.451190][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.459632][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.474091][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.483626][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.502261][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.511227][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.526374][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.541716][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.565655][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.605708][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.617059][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.626990][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.635850][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.644048][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.652718][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.687973][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.701336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.711710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.724373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.734421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.743794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.756326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.764622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.773583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.781992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.791710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.804325][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.830040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.846199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.853654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.889905][ T4185] device veth0_vlan entered promiscuous mode [ 66.907739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.923310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.933413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.949116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.964951][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.980498][ T4185] device veth1_vlan entered promiscuous mode [ 67.021507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.030532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.041973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.083054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.099555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.113916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.125965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.143080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.152848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.161504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.199179][ T4182] device veth0_vlan entered promiscuous mode [ 67.207049][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.214577][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.224233][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.232724][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.246321][ T4186] device veth0_vlan entered promiscuous mode [ 67.254418][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.275588][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.283681][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.291773][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.302008][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.312319][ T4185] device veth0_macvtap entered promiscuous mode [ 67.322319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.330981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.339107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.350973][ T4186] device veth1_vlan entered promiscuous mode [ 67.369525][ T4185] device veth1_macvtap entered promiscuous mode [ 67.387495][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.404162][ T4182] device veth1_vlan entered promiscuous mode [ 67.414552][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.432602][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.441397][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.450083][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.459388][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.468229][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.477124][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.486200][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.495864][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.504573][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.523230][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.532330][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.558910][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.580417][ T4186] device veth0_macvtap entered promiscuous mode [ 67.592253][ T4184] device veth0_vlan entered promiscuous mode [ 67.602115][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.611182][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.620629][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.629455][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.637986][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.647596][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.657871][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.669576][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.678864][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.687203][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.695862][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.707437][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.719245][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.728443][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.737498][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.757835][ T4186] device veth1_macvtap entered promiscuous mode [ 67.769510][ T4182] device veth0_macvtap entered promiscuous mode [ 67.779704][ T4183] device veth0_vlan entered promiscuous mode [ 67.787218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.796005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.803991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.812378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.821178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.830088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.843462][ T4184] device veth1_vlan entered promiscuous mode [ 67.860984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.876880][ T4182] device veth1_macvtap entered promiscuous mode [ 67.888186][ T4183] device veth1_vlan entered promiscuous mode [ 67.919740][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.931135][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.943848][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.967999][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.977376][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.994515][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.006602][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.019578][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.066437][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.080876][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.091088][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.101817][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.112817][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.121076][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.129993][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.139438][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.148454][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.157403][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.166185][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.174697][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.185288][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.197448][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.206323][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.215507][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.224222][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.238181][ T4184] device veth0_macvtap entered promiscuous mode [ 68.258732][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.272911][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.284506][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.296605][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.310005][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.334075][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.344024][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.354150][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.365798][ T4183] device veth0_macvtap entered promiscuous mode [ 68.376730][ T4183] device veth1_macvtap entered promiscuous mode [ 68.386550][ T4184] device veth1_macvtap entered promiscuous mode [ 68.408211][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.418320][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.429652][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.438796][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.439713][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.455143][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.465586][ T2239] Bluetooth: hci2: command 0x040f tx timeout [ 68.471904][ T2239] Bluetooth: hci4: command 0x040f tx timeout [ 68.478468][ T2239] Bluetooth: hci1: command 0x040f tx timeout [ 68.484598][ T2239] Bluetooth: hci3: command 0x040f tx timeout [ 68.491218][ T2239] Bluetooth: hci0: command 0x040f tx timeout [ 68.515940][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.524060][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.532628][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.541093][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.558241][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.571262][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.581831][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.592377][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.602319][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.612927][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.624105][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.639849][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.652990][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.663163][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.673929][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.684055][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.694582][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.704582][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.716028][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.729321][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.738969][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.741295][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.758372][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.763989][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.769208][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.788102][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.798380][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.808926][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.820610][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.831425][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.840742][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.849836][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.858628][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.870092][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.880089][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.889608][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.898837][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.907972][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.916086][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.924656][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.935502][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.952244][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.962263][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.973220][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.984399][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.995467][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.005705][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.016254][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.029537][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.069761][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.078740][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.092159][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.101491][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.111429][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.120490][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.213449][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.246830][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.285543][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.330328][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.359035][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.391642][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.456025][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.456502][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.464101][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.473032][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.480048][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.537053][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.547094][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.554426][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.583761][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.604600][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.624265][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.649455][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.666566][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.674610][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.722409][ T1211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.734388][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.757067][ T1211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.800023][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.275332][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.282118][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.687680][ T2239] Bluetooth: hci0: command 0x0419 tx timeout [ 71.705703][ T2239] Bluetooth: hci3: command 0x0419 tx timeout [ 71.735279][ T2239] Bluetooth: hci1: command 0x0419 tx timeout [ 72.734728][ C0] sched: RT throttling activated [ 72.975411][ T2239] Bluetooth: hci4: command 0x0419 tx timeout [ 72.981575][ T2239] Bluetooth: hci2: command 0x0419 tx timeout [ 73.006405][ T4328] loop3: detected capacity change from 0 to 256 [ 73.173314][ T4345] loop2: detected capacity change from 0 to 128 [ 73.272283][ T4345] EXT4-fs (loop2): Ignoring removed nobh option [ 73.533772][ T4354] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 74.545931][ T4345] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 74.588562][ T4345] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.720328][ T4395] loop2: detected capacity change from 0 to 512 [ 79.854604][ T4395] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 79.907007][ T4395] EXT4-fs (loop2): fragment/cluster size (16777216) != block size (4096) [ 79.975587][ T4397] netlink: 'syz.3.29': attribute type 4 has an invalid length. [ 80.705773][ T4400] loop0: detected capacity change from 0 to 256 [ 80.788393][ T4400] ======================================================= [ 80.788393][ T4400] WARNING: The mand mount option has been deprecated and [ 80.788393][ T4400] and is ignored by this kernel. Remove the mand [ 80.788393][ T4400] option from the mount to silence this warning. [ 80.788393][ T4400] ======================================================= [ 81.680501][ T4400] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 81.921641][ T4413] loop1: detected capacity change from 0 to 512 [ 82.029534][ T4416] loop3: detected capacity change from 0 to 512 [ 82.465080][ T4413] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 82.740976][ T4413] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 82.798595][ T4416] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.34: invalid block [ 82.825816][ T4416] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.34: invalid indirect mapped block 4294967295 (level 1) [ 82.843952][ T4413] EXT4-fs (loop1): 1 truncate cleaned up [ 82.874844][ T4413] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 82.962884][ T4416] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.34: invalid indirect mapped block 4294967295 (level 1) [ 82.987161][ T4416] EXT4-fs (loop3): 2 truncates cleaned up [ 82.992951][ T4416] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 85.613591][ T4438] loop1: detected capacity change from 0 to 128 [ 85.691674][ T4438] EXT4-fs (loop1): Ignoring removed nobh option [ 86.112272][ T4438] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 86.150091][ T4438] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.126660][ T13] cfg80211: failed to load regulatory.db [ 87.348419][ T4452] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.702529][ T4460] loop0: detected capacity change from 0 to 512 [ 87.780093][ T4460] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 87.796232][ T4460] EXT4-fs (loop0): fragment/cluster size (16777216) != block size (4096) [ 90.025794][ T4473] netlink: 'syz.3.45': attribute type 4 has an invalid length. [ 91.157498][ T4474] cgroup: none used incorrectly [ 92.604109][ T4490] loop4: detected capacity change from 0 to 128 [ 92.762838][ T4490] EXT4-fs (loop4): Ignoring removed nobh option [ 92.855717][ T4490] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 92.905171][ T4490] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.392921][ T26] audit: type=1326 audit(1758682226.921:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d725fec9 code=0x7ffc0000 [ 93.490416][ T26] audit: type=1326 audit(1758682226.921:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d725fec9 code=0x7ffc0000 [ 93.528843][ T26] audit: type=1326 audit(1758682226.921:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f41d725fec9 code=0x7ffc0000 [ 93.692147][ T26] audit: type=1326 audit(1758682226.921:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d725fec9 code=0x7ffc0000 [ 93.741115][ T26] audit: type=1326 audit(1758682226.921:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4501 comm="syz.3.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d725fec9 code=0x7ffc0000 [ 94.707332][ T4488] loop0: detected capacity change from 0 to 40427 [ 94.717559][ T4520] loop2: detected capacity change from 0 to 512 [ 94.921236][ T4520] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.62: invalid indirect mapped block 4294967295 (level 1) [ 95.022630][ T4524] netlink: 'syz.3.61': attribute type 4 has an invalid length. [ 95.653330][ T4520] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.62: invalid indirect mapped block 4294967295 (level 1) [ 95.713787][ T4520] EXT4-fs (loop2): 2 truncates cleaned up [ 95.746506][ T4520] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 95.968007][ T4488] F2FS-fs (loop0): invalid crc value [ 96.014334][ T4488] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 96.061121][ T4532] loop4: detected capacity change from 0 to 256 [ 96.154577][ T4532] FAT-fs (loop4): Directory bread(block 64) failed [ 96.165166][ T4532] FAT-fs (loop4): Directory bread(block 65) failed [ 96.172988][ T4532] FAT-fs (loop4): Directory bread(block 66) failed [ 96.204862][ T4532] FAT-fs (loop4): Directory bread(block 67) failed [ 96.211551][ T4532] FAT-fs (loop4): Directory bread(block 68) failed [ 96.231852][ T4532] FAT-fs (loop4): Directory bread(block 69) failed [ 96.254915][ T4532] FAT-fs (loop4): Directory bread(block 70) failed [ 96.261501][ T4532] FAT-fs (loop4): Directory bread(block 71) failed [ 96.295589][ T4532] FAT-fs (loop4): Directory bread(block 72) failed [ 96.302174][ T4532] FAT-fs (loop4): Directory bread(block 73) failed [ 97.184854][ T4499] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 97.301442][ T4538] loop3: detected capacity change from 0 to 128 [ 97.380944][ T4538] EXT4-fs (loop3): Ignoring removed nobh option [ 97.826537][ T4538] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 97.997806][ T4538] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.564616][ T4562] loop2: detected capacity change from 0 to 256 [ 99.728520][ T4562] FAT-fs (loop2): Directory bread(block 64) failed [ 99.740960][ T4562] FAT-fs (loop2): Directory bread(block 65) failed [ 99.788725][ T4562] FAT-fs (loop2): Directory bread(block 66) failed [ 99.823965][ T4562] FAT-fs (loop2): Directory bread(block 67) failed [ 99.860104][ T4562] FAT-fs (loop2): Directory bread(block 68) failed [ 99.892245][ T4562] FAT-fs (loop2): Directory bread(block 69) failed [ 99.930424][ T4562] FAT-fs (loop2): Directory bread(block 70) failed [ 99.947405][ T4562] FAT-fs (loop2): Directory bread(block 71) failed [ 99.974909][ T4562] FAT-fs (loop2): Directory bread(block 72) failed [ 100.011945][ T4562] FAT-fs (loop2): Directory bread(block 73) failed [ 101.551945][ T4431] attempt to access beyond end of device [ 101.551945][ T4431] loop2: rw=1, want=1480, limit=256 [ 101.611923][ T4431] attempt to access beyond end of device [ 101.611923][ T4431] loop2: rw=1, want=1832, limit=256 [ 101.717425][ T4431] attempt to access beyond end of device [ 101.717425][ T4431] loop2: rw=1, want=8616, limit=256 [ 103.563969][ T4602] loop3: detected capacity change from 0 to 512 [ 103.726674][ T4602] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.81: invalid indirect mapped block 4294967295 (level 1) [ 103.755120][ T4602] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.81: invalid indirect mapped block 4294967295 (level 1) [ 103.803884][ T4602] EXT4-fs (loop3): 2 truncates cleaned up [ 103.810013][ T4602] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 103.883373][ T4581] loop2: detected capacity change from 0 to 40427 [ 103.987492][ T4581] F2FS-fs (loop2): invalid crc value [ 104.050556][ T4581] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.972562][ T4612] loop4: detected capacity change from 0 to 1024 [ 105.038444][ T4612] EXT4-fs (loop4): Ignoring removed nobh option [ 105.100103][ T4612] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.123240][ T4581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 105.178078][ T4612] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,user_xattr,dioread_nolock,,errors=continue. Quota mode: writeback. [ 106.541715][ T4628] loop0: detected capacity change from 0 to 256 [ 106.680103][ T4628] FAT-fs (loop0): Directory bread(block 64) failed [ 106.704405][ T4632] loop2: detected capacity change from 0 to 128 [ 106.755776][ T4628] FAT-fs (loop0): Directory bread(block 65) failed [ 106.783508][ T4628] FAT-fs (loop0): Directory bread(block 66) failed [ 106.841525][ T4628] FAT-fs (loop0): Directory bread(block 67) failed [ 106.887599][ T4632] EXT4-fs (loop2): Ignoring removed nobh option [ 106.907046][ T4628] FAT-fs (loop0): Directory bread(block 68) failed [ 106.914259][ T4628] FAT-fs (loop0): Directory bread(block 69) failed [ 107.351580][ T4628] FAT-fs (loop0): Directory bread(block 70) failed [ 107.429721][ T4628] FAT-fs (loop0): Directory bread(block 71) failed [ 107.482638][ T4632] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 107.585170][ T4628] FAT-fs (loop0): Directory bread(block 72) failed [ 107.592541][ T4628] FAT-fs (loop0): Directory bread(block 73) failed [ 107.694930][ T4632] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.028994][ T4646] loop1: detected capacity change from 0 to 512 [ 110.334231][ T4646] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.92: invalid block [ 110.552949][ T4646] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.92: invalid indirect mapped block 4294967295 (level 1) [ 110.820443][ T4646] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.92: invalid indirect mapped block 4294967295 (level 1) [ 111.114032][ T4646] EXT4-fs (loop1): 2 truncates cleaned up [ 111.168260][ T4646] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 111.363465][ T4665] loop0: detected capacity change from 0 to 1024 [ 111.511366][ T4665] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 111.544101][ T4665] EXT4-fs (loop0): Ignoring removed bh option [ 111.585031][ T4665] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.618958][ T4665] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 112.788525][ T4663] loop3: detected capacity change from 0 to 40427 [ 113.962015][ T4663] F2FS-fs (loop3): invalid crc value [ 114.078021][ T4663] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 114.407376][ T4671] loop2: detected capacity change from 0 to 40427 [ 116.855751][ T4709] syz.0.103 (4709) used greatest stack depth: 18592 bytes left [ 117.061076][ T4704] loop2: detected capacity change from 0 to 512 [ 117.382388][ T4704] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 117.413235][ T4704] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 117.886621][ T4704] EXT4-fs (loop2): 1 truncate cleaned up [ 118.117673][ T4704] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 119.398848][ T4733] tipc: Started in network mode [ 119.404193][ T4733] tipc: Node identity 2, cluster identity 4711 [ 119.410614][ T4733] tipc: Node number set to 2 [ 121.219061][ T4726] loop0: detected capacity change from 0 to 40427 [ 121.421319][ T4755] loop3: detected capacity change from 0 to 512 [ 121.446287][ T4757] Illegal XDP return value 4294967274, expect packet loss! [ 121.518513][ T26] audit: type=1326 audit(1758682255.051:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 121.581440][ T4755] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.121: iget: bad extended attribute block 1 [ 121.611820][ T26] audit: type=1326 audit(1758682255.051:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 121.636014][ T26] audit: type=1326 audit(1758682255.051:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 121.659256][ T26] audit: type=1326 audit(1758682255.071:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 121.681767][ T26] audit: type=1326 audit(1758682255.081:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 121.709712][ T4755] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.121: couldn't read orphan inode 15 (err -117) [ 121.728670][ T26] audit: type=1326 audit(1758682255.081:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 121.833824][ T26] audit: type=1326 audit(1758682255.081:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 121.907530][ T4755] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 121.988007][ T26] audit: type=1326 audit(1758682255.081:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 122.159106][ T4774] tipc: Started in network mode [ 122.164246][ T4774] tipc: Node identity 2, cluster identity 4711 [ 122.170621][ T4774] tipc: Node number set to 2 [ 122.599904][ T26] audit: type=1326 audit(1758682255.271:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 122.858238][ T4755] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 122.932312][ T26] audit: type=1326 audit(1758682255.281:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 123.056945][ T4779] syz.2.129[4779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.057056][ T4779] syz.2.129[4779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.896489][ T4811] 9pnet: Insufficient options for proto=fd [ 128.307654][ T4819] loop2: detected capacity change from 0 to 1024 [ 128.427402][ T4820] tipc: Started in network mode [ 128.432499][ T4820] tipc: Node identity 2, cluster identity 4711 [ 128.438824][ T4820] tipc: Node number set to 2 [ 128.767471][ T4819] EXT4-fs (loop2): Ignoring removed oldalloc option [ 129.123285][ T4819] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.235990][ T4819] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,nodiscard,dioread_nolock,,errors=continue. Quota mode: writeback. [ 129.407467][ T4823] capability: warning: `syz.0.142' uses 32-bit capabilities (legacy support in use) [ 129.483689][ T4809] loop1: detected capacity change from 0 to 40427 [ 129.516723][ T4809] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 129.556827][ T4809] F2FS-fs (loop1): invalid crc value [ 129.577472][ T4809] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.632653][ T4829] netlink: 276 bytes leftover after parsing attributes in process `syz.0.143'. [ 129.686589][ T4809] F2FS-fs (loop1): recover fsync data on readonly fs [ 129.706983][ T4809] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 129.713736][ T4809] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 129.743367][ T4809] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.847070][ T4833] syz.3.145[4833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.847189][ T4833] syz.3.145[4833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.055019][ T4809] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 130.255256][ T4809] F2FS-fs (loop1): Unrecognized mount option "_unit=block" or missing value [ 132.709610][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.716010][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.164181][ T4850] loop3: detected capacity change from 0 to 4096 [ 133.278566][ T4850] EXT4-fs (loop3): inodes count not valid: 544 vs 32 [ 133.520852][ T4857] tipc: Started in network mode [ 133.525993][ T4857] tipc: Node identity 2, cluster identity 4711 [ 133.532266][ T4857] tipc: Node number set to 2 [ 134.341682][ T4859] kernel profiling enabled (shift: 15) [ 134.561757][ T4869] 9pnet: Insufficient options for proto=fd [ 134.719299][ T4873] loop1: detected capacity change from 0 to 512 [ 134.873282][ T4873] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.159: corrupted inode contents [ 134.901060][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 134.913526][ T4873] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #16: comm syz.1.159: mark_inode_dirty error [ 134.933312][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 134.941982][ T4873] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.159: corrupted inode contents [ 134.961117][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 134.970213][ T4873] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.159: mark_inode_dirty error [ 135.021627][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 135.042146][ T4873] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.159: corrupted inode contents [ 135.063923][ T4864] chnl_net:caif_netlink_parms(): no params data found [ 135.076492][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 135.083137][ T4873] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 135.140357][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 135.166161][ T4873] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #16: comm syz.1.159: corrupted inode contents [ 135.214265][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 135.247964][ T4873] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.159: mark_inode_dirty error [ 135.271887][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 135.282785][ T4873] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 135.311760][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.322539][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 135.342682][ T4861] loop3: detected capacity change from 0 to 40427 [ 135.355668][ T4873] EXT4-fs (loop1): 1 truncate cleaned up [ 135.361372][ T4873] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,data_err=ignore,. Quota mode: writeback. [ 135.375937][ T4871] loop0: detected capacity change from 0 to 40427 [ 135.391117][ T4871] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 135.397623][ T4873] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.417633][ T4871] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 135.442176][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.449519][ T4861] F2FS-fs (loop3): invalid crc value [ 135.451823][ T4886] Zero length message leads to an empty skb [ 135.459697][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.489588][ T4864] device bridge_slave_0 entered promiscuous mode [ 135.520345][ T4861] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.552068][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.564888][ T4871] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.572245][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.593653][ T4864] device bridge_slave_1 entered promiscuous mode [ 135.658085][ T4861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 135.709144][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.729169][ T4871] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 135.753056][ T4864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.770469][ T4871] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.802659][ T4864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.945888][ T4896] attempt to access beyond end of device [ 135.945888][ T4896] loop3: rw=2049, want=45104, limit=40427 [ 136.395210][ T4255] Bluetooth: hci5: command 0x0409 tx timeout [ 136.871345][ T4184] attempt to access beyond end of device [ 136.871345][ T4184] loop3: rw=2049, want=45112, limit=40427 [ 136.947444][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.040750][ T4864] team0: Port device team_slave_0 added [ 137.096382][ T4864] team0: Port device team_slave_1 added [ 137.105894][ T4184] attempt to access beyond end of device [ 137.105894][ T4184] loop3: rw=2051, want=45064, limit=40427 [ 137.133181][ T4184] attempt to access beyond end of device [ 137.133181][ T4184] loop3: rw=2051, want=102400, limit=40427 [ 137.141691][ T4905] loop2: detected capacity change from 0 to 512 [ 137.162614][ T4905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.164201][ T4184] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 137.175517][ T4184] F2FS-fs (loop3): Issue discard(5639, 5639, 7161) failed, ret: -5 [ 137.186599][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.207295][ T4906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.233084][ T4905] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 137.278883][ T4864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.296125][ T4864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.366872][ T4864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.390502][ T4864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.410803][ T4864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.524054][ T4864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.708089][ T4864] device hsr_slave_0 entered promiscuous mode [ 137.757365][ T4864] device hsr_slave_1 entered promiscuous mode [ 137.772549][ T4864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.796151][ T4864] Cannot create hsr debugfs directory [ 137.911711][ T4914] loop0: detected capacity change from 0 to 512 [ 137.980609][ T4914] EXT4-fs (loop0): Ignoring removed oldalloc option [ 138.005583][ T4914] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.166: dx entry: limit 1024 != root limit 124 [ 138.018047][ T4914] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.166: Corrupt directory, running e2fsck is recommended [ 138.045816][ T4914] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 138.060057][ T4914] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.166: corrupted in-inode xattr [ 138.105393][ T4919] loop1: detected capacity change from 0 to 256 [ 138.117857][ T4919] exfat: Unknown parameter 'Ϙ' [ 138.481972][ T4914] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.166: couldn't read orphan inode 15 (err -117) [ 138.498475][ T4914] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 138.757667][ T1106] Bluetooth: hci5: command 0x041b tx timeout [ 140.526435][ T4942] 9pnet: Insufficient options for proto=fd [ 140.767535][ T26] audit: type=1326 audit(1758682274.301:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062da17ec9 code=0x7fc00000 [ 140.794796][ T4293] Bluetooth: hci5: command 0x040f tx timeout [ 140.921917][ T4864] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.012325][ T4864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.046699][ T4864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.159094][ T4864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.168541][ T26] audit: type=1326 audit(1758682275.701:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.1.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062da17ec9 code=0x7fc00000 [ 142.193007][ T4957] bridge: RTM_NEWNEIGH with invalid ether address [ 142.371334][ T4971] loop2: detected capacity change from 0 to 512 [ 142.536365][ T4864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.551496][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.596002][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.640033][ T4864] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.687393][ T4971] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.175: corrupted inode contents [ 142.699741][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.735255][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.752269][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 142.759770][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.766909][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.785210][ T4971] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #16: comm syz.2.175: mark_inode_dirty error [ 142.813620][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.844418][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 142.852024][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.865144][ T1106] Bluetooth: hci5: command 0x0419 tx timeout [ 142.874128][ T4971] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.175: corrupted inode contents [ 142.895390][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.902496][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.908023][ T4950] loop0: detected capacity change from 0 to 40427 [ 142.926450][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 142.949094][ T4971] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.175: mark_inode_dirty error [ 142.977811][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.989589][ T4950] F2FS-fs (loop0): invalid crc value [ 143.008108][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 143.018533][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.041685][ T4950] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.043498][ T4971] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.175: corrupted inode contents [ 143.066691][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.109470][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.121346][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 143.149959][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.158469][ T4971] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 143.186720][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.205824][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 143.225861][ T4971] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.175: corrupted inode contents [ 143.250805][ T4950] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 143.267103][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.275258][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 143.285257][ T4971] EXT4-fs error (device loop2): ext4_truncate:4273: inode #16: comm syz.2.175: mark_inode_dirty error [ 143.294181][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.341964][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 143.361526][ T4971] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 143.378164][ T4971] EXT4-fs (loop2): Remounting filesystem read-only [ 143.388956][ T4971] EXT4-fs (loop2): 1 truncate cleaned up [ 143.394640][ T4971] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,data_err=ignore,. Quota mode: writeback. [ 143.424098][ T4971] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.524645][ T4864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.538064][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.564515][ T4997] attempt to access beyond end of device [ 143.564515][ T4997] loop0: rw=2049, want=45104, limit=40427 [ 143.584112][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.615503][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.624308][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.678560][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.795719][ T4183] attempt to access beyond end of device [ 143.795719][ T4183] loop0: rw=2049, want=45112, limit=40427 [ 143.860259][ T4183] attempt to access beyond end of device [ 143.860259][ T4183] loop0: rw=2051, want=45064, limit=40427 [ 143.871831][ T4183] attempt to access beyond end of device [ 143.871831][ T4183] loop0: rw=2051, want=102400, limit=40427 [ 143.913882][ T4183] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 143.913931][ T4183] F2FS-fs (loop0): Issue discard(5639, 5639, 7161) failed, ret: -5 [ 144.360310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.453580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.496642][ T4864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.543033][ T5013] loop0: detected capacity change from 0 to 512 [ 145.358003][ T5013] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 145.374991][ T5013] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.584262][ T9] device hsr_slave_0 left promiscuous mode [ 146.665072][ T9] device hsr_slave_1 left promiscuous mode [ 146.707785][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.737296][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.746132][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.753576][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.998609][ T9] device bridge_slave_1 left promiscuous mode [ 147.012778][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.380877][ T9] device bridge_slave_0 left promiscuous mode [ 148.418732][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.573191][ T9] device veth1_macvtap left promiscuous mode [ 148.624916][ T9] device veth0_macvtap left promiscuous mode [ 148.665051][ T9] device veth1_vlan left promiscuous mode [ 148.671145][ T9] device veth0_vlan left promiscuous mode [ 149.054255][ T5054] loop0: detected capacity change from 0 to 512 [ 149.241492][ T5054] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 149.430986][ T5054] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.809770][ T5054] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2228: inode #15: comm syz.0.184: corrupted in-inode xattr [ 149.875341][ T5054] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.184: couldn't read orphan inode 15 (err -117) [ 149.941484][ T5054] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 151.966796][ T9] team0 (unregistering): Port device team_slave_1 removed [ 152.005769][ T9] team0 (unregistering): Port device team_slave_0 removed [ 152.040973][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.058056][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.146948][ T9] bond0 (unregistering): Released all slaves [ 152.662303][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.784408][ T5088] loop2: detected capacity change from 0 to 512 [ 152.962017][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.396361][ T5088] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.514438][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.547239][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.585972][ T4864] device veth0_vlan entered promiscuous mode [ 153.602909][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.624188][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.651487][ T4864] device veth1_vlan entered promiscuous mode [ 153.705190][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.714169][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.732174][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.797133][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.826137][ T4447] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 153.858580][ T4864] device veth0_macvtap entered promiscuous mode [ 153.883645][ T4864] device veth1_macvtap entered promiscuous mode [ 154.011271][ T4864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.211934][ T4864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.222262][ T4447] usb 4-1: Using ep0 maxpacket: 8 [ 154.229344][ T4864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.247970][ T4864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.277931][ T4864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.372929][ T4447] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.590613][ T4447] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.604797][ T4864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.674781][ T4864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.743186][ T4864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.796554][ T4864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.819884][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.825354][ T4447] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 154.835666][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.853953][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.862637][ T4447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.886699][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.895317][ T4447] usb 4-1: Product: syz [ 154.900311][ T4447] usb 4-1: Manufacturer: syz [ 154.945320][ T4447] usb 4-1: SerialNumber: syz [ 154.954427][ T4447] usb 4-1: config 0 descriptor?? [ 154.961780][ T4864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.980475][ T4864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.019488][ T4864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.030485][ T4864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.040720][ T4864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.052156][ T4864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.062444][ T4864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.073184][ T4864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.143556][ T4864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.196393][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.232670][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.404336][ T4864] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.447252][ T4864] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.737552][ T4864] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.952913][ T4447] usb 4-1: USB disconnect, device number 2 [ 156.259738][ T4864] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.439801][ T5126] loop0: detected capacity change from 0 to 256 [ 156.538113][ T4625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.580608][ T4625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.739865][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.806581][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.998980][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.405208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.257127][ T5160] loop2: detected capacity change from 0 to 512 [ 158.351046][ T5162] loop5: detected capacity change from 0 to 128 [ 159.827154][ T5160] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 159.854860][ T5160] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 159.998240][ T5173] loop0: detected capacity change from 0 to 256 [ 160.031672][ T5160] EXT4-fs (loop2): 1 truncate cleaned up [ 160.189486][ T5160] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 161.610725][ T5190] loop5: detected capacity change from 0 to 512 [ 161.836346][ T5190] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #16: comm syz.5.218: corrupted inode contents [ 161.839205][ T5174] chnl_net:caif_netlink_parms(): no params data found [ 161.868464][ T5190] EXT4-fs (loop5): Remounting filesystem read-only [ 161.908967][ T5190] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #16: comm syz.5.218: mark_inode_dirty error [ 162.014999][ T5190] EXT4-fs (loop5): Remounting filesystem read-only [ 162.045073][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 162.054483][ T5190] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #16: comm syz.5.218: corrupted inode contents [ 162.122281][ T5190] EXT4-fs (loop5): Remounting filesystem read-only [ 162.129191][ T5190] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.218: mark_inode_dirty error [ 162.262419][ T5190] EXT4-fs (loop5): Remounting filesystem read-only [ 162.343337][ T5190] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #16: comm syz.5.218: corrupted inode contents [ 162.369130][ T5190] EXT4-fs (loop5): Remounting filesystem read-only [ 162.605713][ T5190] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 162.848132][ T5190] EXT4-fs (loop5): Remounting filesystem read-only [ 163.066486][ T5190] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #16: comm syz.5.218: corrupted inode contents [ 163.146716][ T5190] EXT4-fs (loop5): Remounting filesystem read-only [ 163.203681][ T5190] EXT4-fs error (device loop5): ext4_truncate:4273: inode #16: comm syz.5.218: mark_inode_dirty error [ 163.230655][ T5190] EXT4-fs (loop5): Remounting filesystem read-only [ 163.239988][ T5190] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 163.259285][ T5190] EXT4-fs (loop5): Remounting filesystem read-only [ 163.275506][ T5190] EXT4-fs (loop5): 1 truncate cleaned up [ 163.281206][ T5190] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,data_err=ignore,. Quota mode: writeback. [ 163.315046][ T5190] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.608550][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.637012][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.678530][ T5174] device bridge_slave_0 entered promiscuous mode [ 164.437955][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 164.621410][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.694186][ T5174] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.706979][ T5174] device bridge_slave_1 entered promiscuous mode [ 165.028047][ T5174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.127951][ T5174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.292943][ T5237] loop5: detected capacity change from 0 to 128 [ 166.471313][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 166.747740][ T5174] team0: Port device team_slave_0 added [ 166.794910][ T5174] team0: Port device team_slave_1 added [ 167.651625][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.671220][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.721417][ T5174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.741167][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.756584][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.810539][ T5174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.532999][ T5259] loop0: detected capacity change from 0 to 512 [ 168.546238][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 168.855747][ T5259] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 168.892521][ T5259] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 168.964934][ T5174] device hsr_slave_0 entered promiscuous mode [ 169.010283][ T5174] device hsr_slave_1 entered promiscuous mode [ 169.057023][ T5259] EXT4-fs (loop0): 1 truncate cleaned up [ 169.092879][ T5259] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 169.171123][ T5281] loop3: detected capacity change from 0 to 512 [ 169.197804][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.411500][ T5281] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 169.457101][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.495524][ T5281] EXT4-fs (loop3): fragment/cluster size (16777216) != block size (4096) [ 170.213652][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.118891][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.182320][ T5319] loop2: detected capacity change from 0 to 128 [ 173.199467][ T5317] loop0: detected capacity change from 0 to 512 [ 173.372677][ T5324] loop3: detected capacity change from 0 to 128 [ 174.035109][ T5324] EXT4-fs (loop3): Test dummy encryption mode enabled [ 174.804200][ T5324] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 174.896122][ T5324] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.973803][ T5338] loop2: detected capacity change from 0 to 512 [ 174.987457][ T5174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.040951][ T5174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.041169][ T5317] EXT4-fs (loop0): Test dummy encryption mode enabled [ 175.084414][ T5317] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 175.092181][ T5317] EXT4-fs (loop0): Unrecognized mount option "appraise_type=imasig" or missing value [ 175.164416][ T5338] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 175.179605][ T9] tipc: Left network mode [ 175.223665][ T5338] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 175.225311][ T5348] netlink: 76 bytes leftover after parsing attributes in process `syz.5.244'. [ 175.257014][ T5338] EXT4-fs (loop2): 1 truncate cleaned up [ 175.262745][ T5338] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 175.269367][ T5174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.327964][ T5174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.145972][ T5379] loop2: detected capacity change from 0 to 128 [ 179.184671][ T5379] EXT4-fs (loop2): Ignoring removed nobh option [ 181.726344][ T5379] EXT4-fs: failed to create workqueue [ 181.757115][ T5379] EXT4-fs (loop2): mount failed [ 181.763017][ T5398] loop3: detected capacity change from 0 to 512 [ 181.851629][ T5398] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 181.879084][ T5398] EXT4-fs (loop3): fragment/cluster size (16777216) != block size (4096) [ 183.346144][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.354784][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.030345][ T5393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.414900][ T5393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.885686][ T5393] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.894599][ T5393] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.904833][ T5393] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.913728][ T5393] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.345764][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.485263][ T5427] process 'syz.0.254' launched '/dev/fd/9' with NULL argv: empty string added [ 185.909074][ T5174] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.953121][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.975541][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.991996][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 185.998150][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 186.014831][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 187.288203][ T5174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.299429][ T5174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.416265][ T5445] netlink: 76 bytes leftover after parsing attributes in process `syz.5.258'. [ 187.565862][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.575879][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.585305][ T4903] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.592412][ T4903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.600759][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.610378][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.619032][ T4903] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.626245][ T4903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.899060][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.948817][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.005779][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.052204][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.112974][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.136083][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.155359][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.167772][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.188318][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.201711][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.213186][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.230156][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.242147][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.447822][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.465812][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.353569][ T5174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.728172][ T5480] 9pnet: Insufficient options for proto=fd [ 195.096084][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.102593][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.699286][ T5517] netlink: 76 bytes leftover after parsing attributes in process `syz.2.270'. [ 195.729519][ T5521] loop5: detected capacity change from 0 to 1024 [ 195.986769][ T5521] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 196.484578][ T5521] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 196.753371][ T5521] EXT4-fs error (device loop5): ext4_lookup:1858: inode #14: comm syz.5.272: iget: bad extra_isize 17960 (inode size 256) [ 196.845340][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.973299][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.040849][ T4864] EXT4-fs error (device loop5): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 197.108036][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.132754][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.148098][ T4864] EXT4-fs error (device loop5): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 197.199228][ T5174] device veth0_vlan entered promiscuous mode [ 197.238490][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.261480][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.320313][ T5174] device veth1_vlan entered promiscuous mode [ 197.491124][ T9] device hsr_slave_0 left promiscuous mode [ 197.506448][ T9] device hsr_slave_1 left promiscuous mode [ 197.536410][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.558623][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.582357][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.602589][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.614935][ T9] device bridge_slave_1 left promiscuous mode [ 197.621435][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.637905][ T9] device bridge_slave_0 left promiscuous mode [ 197.644234][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.695942][ T9] device veth1_macvtap left promiscuous mode [ 197.704000][ T9] device veth0_macvtap left promiscuous mode [ 197.722521][ T5533] loop0: detected capacity change from 0 to 40427 [ 197.730191][ T9] device veth1_vlan left promiscuous mode [ 197.745168][ T9] device veth0_vlan left promiscuous mode [ 197.837308][ T5533] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 197.852935][ T5533] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.924218][ T5533] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.089071][ T5533] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 198.107057][ T5533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.227280][ T26] audit: type=1800 audit(1758682331.761:19): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.273" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 198.463031][ T9] team0 (unregistering): Port device team_slave_1 removed [ 198.499563][ T5553] loop3: detected capacity change from 0 to 512 [ 198.520411][ T9] team0 (unregistering): Port device team_slave_0 removed [ 198.543755][ T5553] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 198.564909][ T5553] EXT4-fs (loop3): fragment/cluster size (16777216) != block size (4096) [ 198.612244][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.650779][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.851316][ T9] bond0 (unregistering): Released all slaves [ 198.955754][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.966617][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.017771][ T5174] device veth0_macvtap entered promiscuous mode [ 199.060156][ T5174] device veth1_macvtap entered promiscuous mode [ 199.140772][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.363805][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.424812][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.496580][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.540750][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.584949][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.606962][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.624842][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.635546][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.740779][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.785898][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.817715][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.840643][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.878417][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.914399][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.949301][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.999964][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.084083][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.211575][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.231107][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.411445][ T5174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.583315][ T5174] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.779578][ T5174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.004799][ T5174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.746171][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 202.267753][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.812053][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.864778][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.047266][ T5591] netlink: 76 bytes leftover after parsing attributes in process `syz.3.283'. [ 203.139475][ T5561] chnl_net:caif_netlink_parms(): no params data found [ 203.150686][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.174902][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.226226][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.825579][ T4247] Bluetooth: hci2: command 0x041b tx timeout [ 205.037317][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.294829][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.326291][ T5561] device bridge_slave_0 entered promiscuous mode [ 205.365276][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.408963][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.423654][ T5628] loop0: detected capacity change from 0 to 512 [ 205.435970][ T5561] device bridge_slave_1 entered promiscuous mode [ 205.600295][ T5561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.606985][ T5628] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 205.650224][ T5628] EXT4-fs (loop0): fragment/cluster size (16777216) != block size (4096) [ 205.706422][ T5561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.881763][ T5561] team0: Port device team_slave_0 added [ 205.917234][ T5561] team0: Port device team_slave_1 added [ 205.942175][ T4247] Bluetooth: hci2: command 0x040f tx timeout [ 205.959000][ T5631] syz.6.207[5631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.959099][ T5631] syz.6.207[5631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.974188][ T5631] loop6: detected capacity change from 0 to 128 [ 206.137362][ T5631] EXT4-fs (loop6): Test dummy encryption mode enabled [ 206.144384][ T5631] EXT4-fs (loop6): Test dummy encryption mode enabled [ 206.204124][ T5631] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 206.219600][ T5631] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.368936][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.402662][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.602655][ T5561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.778113][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.848531][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.179863][ T5561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.995080][ T4315] Bluetooth: hci2: command 0x0419 tx timeout [ 208.736360][ T5646] netlink: 'syz.2.291': attribute type 4 has an invalid length. [ 210.070006][ T5561] device hsr_slave_0 entered promiscuous mode [ 210.128206][ T5561] device hsr_slave_1 entered promiscuous mode [ 210.814899][ T5561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.847406][ T5561] Cannot create hsr debugfs directory [ 212.322043][ T5682] loop6: detected capacity change from 0 to 256 [ 212.983633][ T5682] FAT-fs (loop6): Directory bread(block 64) failed [ 213.330568][ T5682] FAT-fs (loop6): Directory bread(block 65) failed [ 213.405632][ T5682] FAT-fs (loop6): Directory bread(block 66) failed [ 213.412376][ T5682] FAT-fs (loop6): Directory bread(block 67) failed [ 213.426760][ T5682] FAT-fs (loop6): Directory bread(block 68) failed [ 213.433352][ T5682] FAT-fs (loop6): Directory bread(block 69) failed [ 213.456372][ T5695] 9pnet: Insufficient options for proto=fd [ 213.462452][ T5682] FAT-fs (loop6): Directory bread(block 70) failed [ 213.507053][ T5682] FAT-fs (loop6): Directory bread(block 71) failed [ 213.541625][ T5682] FAT-fs (loop6): Directory bread(block 72) failed [ 213.583835][ T5561] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 213.615579][ T5682] FAT-fs (loop6): Directory bread(block 73) failed [ 213.639099][ T5561] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 213.686388][ T5561] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 213.694866][ T5701] loop3: detected capacity change from 0 to 512 [ 213.844973][ T5701] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 213.883682][ T5561] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 213.945451][ T5701] EXT4-fs (loop3): fragment/cluster size (16777216) != block size (4096) [ 215.032230][ T4903] attempt to access beyond end of device [ 215.032230][ T4903] loop6: rw=1, want=1480, limit=256 [ 215.075502][ T4903] attempt to access beyond end of device [ 215.075502][ T4903] loop6: rw=1, want=1832, limit=256 [ 215.110047][ T4903] attempt to access beyond end of device [ 215.110047][ T4903] loop6: rw=1, want=8768, limit=256 [ 215.338120][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.891683][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.327279][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.679403][ T5726] netlink: 'syz.6.306': attribute type 4 has an invalid length. [ 217.856120][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.387333][ T5740] tipc: Started in network mode [ 219.392274][ T5740] tipc: Node identity 2, cluster identity 4711 [ 219.398506][ T5740] tipc: Node number set to 2 [ 219.532830][ T5742] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.836927][ T5750] 9pnet: Insufficient options for proto=fd [ 220.189668][ T5753] loop6: detected capacity change from 0 to 256 [ 220.314533][ T5561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.591850][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.605186][ T5753] FAT-fs (loop6): Directory bread(block 64) failed [ 220.611781][ T5753] FAT-fs (loop6): Directory bread(block 65) failed [ 220.652308][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.670709][ T5753] FAT-fs (loop6): Directory bread(block 66) failed [ 220.698011][ T5561] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.706035][ T5753] FAT-fs (loop6): Directory bread(block 67) failed [ 220.741231][ T5753] FAT-fs (loop6): Directory bread(block 68) failed [ 220.814297][ T5753] FAT-fs (loop6): Directory bread(block 69) failed [ 220.887911][ T5753] FAT-fs (loop6): Directory bread(block 70) failed [ 220.895030][ T5753] FAT-fs (loop6): Directory bread(block 71) failed [ 220.896677][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.902236][ T5753] FAT-fs (loop6): Directory bread(block 72) failed [ 220.918749][ T5753] FAT-fs (loop6): Directory bread(block 73) failed [ 221.273244][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.153851][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.161063][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.218012][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.378768][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.397781][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.404958][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.413700][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.452112][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.519958][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.592758][ T5790] loop6: detected capacity change from 0 to 256 [ 225.918765][ T5790] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.929579][ T5790] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 225.992433][ T5790] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 227.914341][ T5561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.680585][ T5561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.859810][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.896102][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.918046][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.155816][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.443725][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.486714][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.547852][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.590159][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.628205][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.650812][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.802692][ T5822] loop2: detected capacity change from 0 to 256 [ 229.957692][ T5822] FAT-fs (loop2): Directory bread(block 64) failed [ 229.981090][ T5822] FAT-fs (loop2): Directory bread(block 65) failed [ 230.009156][ T5822] FAT-fs (loop2): Directory bread(block 66) failed [ 230.029384][ T5822] FAT-fs (loop2): Directory bread(block 67) failed [ 230.060235][ T5822] FAT-fs (loop2): Directory bread(block 68) failed [ 230.088370][ T5822] FAT-fs (loop2): Directory bread(block 69) failed [ 230.110850][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.124940][ T5822] FAT-fs (loop2): Directory bread(block 70) failed [ 230.131876][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.144973][ T5822] FAT-fs (loop2): Directory bread(block 71) failed [ 230.151755][ T5822] FAT-fs (loop2): Directory bread(block 72) failed [ 230.204512][ T5822] FAT-fs (loop2): Directory bread(block 73) failed [ 230.223622][ T5561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.284473][ T5804] loop6: detected capacity change from 0 to 40427 [ 230.464179][ T5804] F2FS-fs (loop6): invalid crc value [ 230.547788][ T5804] F2FS-fs (loop6): Found nat_bits in checkpoint [ 231.518346][ T4296] attempt to access beyond end of device [ 231.518346][ T4296] loop2: rw=1, want=1480, limit=256 [ 231.602781][ T4296] attempt to access beyond end of device [ 231.602781][ T4296] loop2: rw=1, want=1832, limit=256 [ 231.668613][ T4296] attempt to access beyond end of device [ 231.668613][ T4296] loop2: rw=1, want=6864, limit=256 [ 232.181855][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.201263][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.405009][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.430323][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.482256][ T5561] device veth0_vlan entered promiscuous mode [ 233.538813][ T5561] device veth1_vlan entered promiscuous mode [ 233.726146][ T5561] device veth0_macvtap entered promiscuous mode [ 233.751449][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.772746][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.819371][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.856984][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.540335][ T5561] device veth1_macvtap entered promiscuous mode [ 236.317786][ T9] device hsr_slave_0 left promiscuous mode [ 236.325178][ T9] device hsr_slave_1 left promiscuous mode [ 236.335683][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.343147][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.354526][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.364835][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.373355][ T9] device bridge_slave_1 left promiscuous mode [ 236.387882][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.398228][ T9] device bridge_slave_0 left promiscuous mode [ 236.404490][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.435866][ T9] device veth1_macvtap left promiscuous mode [ 236.461731][ T9] device veth0_macvtap left promiscuous mode [ 236.484841][ T9] device veth1_vlan left promiscuous mode [ 236.503872][ T9] device veth0_vlan left promiscuous mode [ 237.724553][ T9] team0 (unregistering): Port device team_slave_1 removed [ 237.759105][ T9] team0 (unregistering): Port device team_slave_0 removed [ 237.781724][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.829702][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.063968][ T9] bond0 (unregistering): Released all slaves [ 238.111815][ T5903] loop3: detected capacity change from 0 to 40427 [ 238.147583][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.157447][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.180693][ T5903] F2FS-fs (loop3): invalid crc value [ 238.326428][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.338589][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.348551][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.369837][ T5910] loop0: detected capacity change from 0 to 256 [ 238.394370][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.422343][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.445398][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.502201][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.526706][ T5903] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.546927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.631717][ T5910] FAT-fs (loop0): Directory bread(block 64) failed [ 238.817468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.829433][ T5910] FAT-fs (loop0): Directory bread(block 65) failed [ 238.984919][ T5910] FAT-fs (loop0): Directory bread(block 66) failed [ 239.045615][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.150072][ T5910] FAT-fs (loop0): Directory bread(block 67) failed [ 239.252473][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.262342][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.275032][ T5910] FAT-fs (loop0): Directory bread(block 68) failed [ 239.281592][ T5910] FAT-fs (loop0): Directory bread(block 69) failed [ 239.291849][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.301878][ T5903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 239.304949][ T5910] FAT-fs (loop0): Directory bread(block 70) failed [ 239.324589][ T5561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.356472][ T5561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.374994][ T5910] FAT-fs (loop0): Directory bread(block 71) failed [ 239.381657][ T5910] FAT-fs (loop0): Directory bread(block 72) failed [ 239.399380][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.409552][ T5910] FAT-fs (loop0): Directory bread(block 73) failed [ 239.524303][ T5561] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.175524][ T5918] attempt to access beyond end of device [ 240.175524][ T5918] loop3: rw=2049, want=45104, limit=40427 [ 240.674811][ T5561] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.716351][ T5561] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.703121][ T5561] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.749332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.775668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.046230][ T4184] attempt to access beyond end of device [ 243.046230][ T4184] loop3: rw=2049, want=45112, limit=40427 [ 243.206129][ T4625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.214288][ T4625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.285431][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.428216][ T4184] attempt to access beyond end of device [ 243.428216][ T4184] loop3: rw=2051, want=45064, limit=40427 [ 243.466182][ T4625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.519500][ T4625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.555859][ T4184] attempt to access beyond end of device [ 243.555859][ T4184] loop3: rw=2051, want=102400, limit=40427 [ 246.476062][ T4184] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 246.476114][ T4184] F2FS-fs (loop3): Issue discard(5639, 5639, 7161) failed, ret: -5 [ 246.526668][ T4264] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.623562][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.044627][ T5971] loop7: detected capacity change from 0 to 512 [ 248.723352][ T4315] Bluetooth: hci5: command 0x1003 tx timeout [ 248.731528][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 248.953777][ T5978] syz.2.355[5978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.954225][ T5978] syz.2.355[5978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.192122][ T5971] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 2: comm syz.7.279: invalid block [ 249.494064][ T5971] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.279: invalid indirect mapped block 10 (level 1) [ 249.769836][ T5971] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.279: invalid indirect mapped block 8 (level 1) [ 250.056039][ T26] audit: type=1326 audit(1758682383.271:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07f7e3ec9 code=0x7ffc0000 [ 250.083330][ T5971] EXT4-fs (loop7): 1 truncate cleaned up [ 250.089123][ T5971] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 250.246025][ T5985] loop0: detected capacity change from 0 to 256 [ 250.256596][ T26] audit: type=1326 audit(1758682383.271:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07f7e3ec9 code=0x7ffc0000 [ 250.407001][ T26] audit: type=1326 audit(1758682383.691:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fd07f7e3ec9 code=0x7ffc0000 [ 250.484626][ T5990] loop3: detected capacity change from 0 to 512 [ 251.491286][ T26] audit: type=1326 audit(1758682383.691:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07f7e3ec9 code=0x7ffc0000 [ 251.524145][ T26] audit: type=1326 audit(1758682383.701:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07f7e3ec9 code=0x7ffc0000 [ 251.587531][ T5985] FAT-fs (loop0): Directory bread(block 64) failed [ 251.638529][ T5990] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.643280][ T4315] Bluetooth: hci5: command 0x1001 tx timeout [ 251.657206][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 251.665509][ T5985] FAT-fs (loop0): Directory bread(block 65) failed [ 251.672247][ T5985] FAT-fs (loop0): Directory bread(block 66) failed [ 251.705054][ T5985] FAT-fs (loop0): Directory bread(block 67) failed [ 251.765026][ T5985] FAT-fs (loop0): Directory bread(block 68) failed [ 251.779117][ T5985] FAT-fs (loop0): Directory bread(block 69) failed [ 251.850612][ T5985] FAT-fs (loop0): Directory bread(block 70) failed [ 251.952779][ T5985] FAT-fs (loop0): Directory bread(block 71) failed [ 251.959594][ T5985] FAT-fs (loop0): Directory bread(block 72) failed [ 251.966342][ T5985] FAT-fs (loop0): Directory bread(block 73) failed [ 253.218474][ T4264] attempt to access beyond end of device [ 253.218474][ T4264] loop0: rw=1, want=1480, limit=256 [ 253.272924][ T4264] attempt to access beyond end of device [ 253.272924][ T4264] loop0: rw=1, want=1832, limit=256 [ 253.273329][ T6009] loop7: detected capacity change from 0 to 512 [ 253.324243][ T4264] attempt to access beyond end of device [ 253.324243][ T4264] loop0: rw=1, want=3912, limit=256 [ 253.400683][ T4264] attempt to access beyond end of device [ 253.400683][ T4264] loop0: rw=1, want=7136, limit=256 [ 253.494410][ T6016] netlink: 76 bytes leftover after parsing attributes in process `syz.3.363'. [ 253.509240][ T6009] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 253.544747][ T6009] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 253.552852][ T6009] System zones: 0-1, 15-15, 18-18, 34-34 [ 253.577035][ T6009] EXT4-fs (loop7): orphan cleanup on readonly fs [ 253.583648][ T6009] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 253.603324][ T6009] EXT4-fs warning (device loop7): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 253.667676][ T6009] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 253.674984][ T4315] Bluetooth: hci5: command 0x1009 tx timeout [ 253.684211][ T6009] EXT4-fs (loop7): 1 truncate cleaned up [ 253.705588][ T6009] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback. [ 255.874351][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.885138][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.036172][ T6053] overlayfs: missing 'lowerdir' [ 256.171407][ T6055] loop0: detected capacity change from 0 to 512 [ 256.526390][ T6055] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.369: invalid block [ 256.541567][ T6055] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.369: invalid indirect mapped block 10 (level 1) [ 256.561047][ T6055] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.369: invalid indirect mapped block 8 (level 1) [ 256.580926][ T6055] EXT4-fs (loop0): 1 truncate cleaned up [ 256.586742][ T6055] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 257.467788][ T6063] loop6: detected capacity change from 0 to 512 [ 262.299838][ T6096] netlink: 'syz.7.378': attribute type 4 has an invalid length. [ 264.273878][ T26] audit: type=1326 audit(1758682397.801:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 264.360106][ T6113] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 264.949292][ T26] audit: type=1326 audit(1758682397.831:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 265.063821][ T26] audit: type=1326 audit(1758682398.441:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 265.170877][ T26] audit: type=1326 audit(1758682398.441:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 265.261056][ T26] audit: type=1326 audit(1758682398.441:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 265.368329][ T26] audit: type=1326 audit(1758682398.471:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 265.392383][ T26] audit: type=1326 audit(1758682398.471:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 265.419733][ T6124] loop2: detected capacity change from 0 to 512 [ 265.514748][ T26] audit: type=1326 audit(1758682398.471:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 265.577794][ T26] audit: type=1326 audit(1758682398.471:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 265.607989][ T6124] EXT4-fs (loop2): Ignoring removed oldalloc option [ 265.659083][ T6124] ------------[ cut here ]------------ [ 265.676075][ T6124] WARNING: CPU: 0 PID: 6124 at mm/page_alloc.c:5462 __alloc_pages+0x391/0x470 [ 265.720063][ T6124] Modules linked in: [ 265.723777][ T26] audit: type=1326 audit(1758682398.471:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3c36bec9 code=0x7ffc0000 [ 265.748689][ T6124] CPU: 0 PID: 6124 Comm: syz.2.385 Not tainted syzkaller #0 [ 265.815452][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.911194][ T6124] RIP: 0010:__alloc_pages+0x391/0x470 [ 265.965226][ T6124] Code: 31 ff e9 b2 fe ff ff e8 3d 68 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 f4 ac 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 15 8f 4f 7e 41 83 fd 08 [ 266.487788][ T6124] RSP: 0018:ffffc9000316f360 EFLAGS: 00010246 [ 266.759124][ T6124] RAX: ffffc9000316f3a0 RBX: 1ffff9200062de70 RCX: 0000000000000000 [ 266.794904][ T6124] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000316f3c8 [ 266.848311][ T6124] RBP: ffffc9000316f460 R08: dffffc0000000000 R09: ffffc9000316f3a0 [ 266.892925][ T6124] R10: fffff5200062de79 R11: 1ffff9200062de74 R12: dffffc0000000000 [ 266.893061][ T6124] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c [ 266.893079][ T6124] FS: 00007fd07da4b6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 266.893102][ T6124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.893119][ T6124] CR2: 00007f6140cf8286 CR3: 000000005f526000 CR4: 00000000003506e0 [ 266.893141][ T6124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.893156][ T6124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.893172][ T6124] Call Trace: [ 266.893181][ T6124] [ 266.893192][ T6124] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.893229][ T6124] ? zone_statistics+0x170/0x170 [ 266.893278][ T6124] kmalloc_large_node+0x7d/0x190 [ 266.893307][ T6124] __kmalloc_node+0x232/0x3b0 [ 266.893339][ T6124] ext4_expand_extra_isize_ea+0xd55/0x19a0 [ 266.897367][ T6124] __ext4_expand_extra_isize+0x301/0x3e0 [ 266.897414][ T6124] __ext4_mark_inode_dirty+0x469/0x700 [ 266.897453][ T6124] ext4_evict_inode+0xa81/0x1080 [ 266.897476][ T6124] ? _raw_spin_unlock+0x24/0x40 [ 266.897516][ T6124] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 266.897545][ T6124] ? do_raw_spin_unlock+0x11d/0x230 [ 266.897573][ T6124] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 266.897598][ T6124] evict+0x485/0x870 [ 266.897622][ T6124] ? __lock_acquire+0x7c60/0x7c60 [ 266.897664][ T6124] ? proc_nr_inodes+0x320/0x320 [ 266.897690][ T6124] ? do_raw_spin_unlock+0x11d/0x230 [ 266.897717][ T6124] ? _raw_spin_unlock+0x24/0x40 [ 266.897742][ T6124] ? iput+0x706/0x8a0 [ 266.897774][ T6124] ext4_orphan_cleanup+0xaa9/0x12e0 [ 266.897813][ T6124] ? ext4_orphan_del+0xb90/0xb90 [ 266.897842][ T6124] ? errseq_check_and_advance+0x62/0x120 [ 266.902813][ T6124] ext4_fill_super+0x92f0/0x9a60 [ 266.902887][ T6124] ? ext4_mount+0x40/0x40 [ 266.902910][ T6124] ? set_blocksize+0x1f1/0x370 [ 266.902945][ T6124] ? sb_set_blocksize+0xa5/0xe0 [ 266.902975][ T6124] mount_bdev+0x287/0x3c0 [ 266.903002][ T6124] ? ext4_mount+0x40/0x40 [ 266.903029][ T6124] legacy_get_tree+0xe6/0x180 [ 266.903053][ T6124] ? ext4_errno_to_code+0x160/0x160 [ 266.903080][ T6124] vfs_get_tree+0x88/0x270 [ 266.903106][ T6124] do_new_mount+0x24a/0xa40 [ 266.903139][ T6124] __se_sys_mount+0x2d6/0x3c0 [ 266.903170][ T6124] ? __x64_sys_mount+0xc0/0xc0 [ 266.903200][ T6124] ? lockdep_hardirqs_on+0x94/0x140 [ 266.903223][ T6124] ? __x64_sys_mount+0x1c/0xc0 [ 266.903251][ T6124] do_syscall_64+0x4c/0xa0 [ 266.903271][ T6124] ? clear_bhb_loop+0x30/0x80 [ 266.903292][ T6124] ? clear_bhb_loop+0x30/0x80 [ 266.903317][ T6124] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.903339][ T6124] RIP: 0033:0x7fd07f7e566a [ 266.903361][ T6124] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.903381][ T6124] RSP: 002b:00007fd07da4ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.903410][ T6124] RAX: ffffffffffffffda RBX: 00007fd07da4aef0 RCX: 00007fd07f7e566a [ 266.903429][ T6124] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007fd07da4aeb0 [ 266.903447][ T6124] RBP: 00002000000002c0 R08: 00007fd07da4aef0 R09: 0000000000800700 [ 266.903464][ T6124] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 266.903481][ T6124] R13: 00007fd07da4aeb0 R14: 000000000000045d R15: 0000200000001000 [ 266.903515][ T6124] [ 266.910496][ T6124] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 266.910510][ T6124] CPU: 1 PID: 6124 Comm: syz.2.385 Not tainted syzkaller #0 [ 266.910534][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.910547][ T6124] Call Trace: [ 266.910555][ T6124] [ 266.910565][ T6124] dump_stack_lvl+0x168/0x230 [ 266.910599][ T6124] ? show_regs_print_info+0x20/0x20 [ 266.910626][ T6124] ? load_image+0x3b0/0x3b0 [ 266.910681][ T6124] panic+0x2c9/0x7f0 [ 266.910709][ T6124] ? bpf_jit_dump+0xd0/0xd0 [ 266.910731][ T6124] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.910761][ T6124] ? __warn+0x230/0x2b0 [ 266.910785][ T6124] ? __alloc_pages+0x391/0x470 [ 266.910811][ T6124] __warn+0x248/0x2b0 [ 266.910833][ T6124] ? __alloc_pages+0x391/0x470 [ 266.910859][ T6124] report_bug+0x1b7/0x2e0 [ 266.910890][ T6124] handle_bug+0x3a/0x70 [ 266.910911][ T6124] exc_invalid_op+0x16/0x40 [ 266.910931][ T6124] asm_exc_invalid_op+0x16/0x20 [ 266.910951][ T6124] RIP: 0010:__alloc_pages+0x391/0x470 [ 266.910975][ T6124] Code: 31 ff e9 b2 fe ff ff e8 3d 68 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 f4 ac 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 15 8f 4f 7e 41 83 fd 08 [ 266.910993][ T6124] RSP: 0018:ffffc9000316f360 EFLAGS: 00010246 [ 266.911013][ T6124] RAX: ffffc9000316f3a0 RBX: 1ffff9200062de70 RCX: 0000000000000000 [ 266.911030][ T6124] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000316f3c8 [ 266.911045][ T6124] RBP: ffffc9000316f460 R08: dffffc0000000000 R09: ffffc9000316f3a0 [ 266.911061][ T6124] R10: fffff5200062de79 R11: 1ffff9200062de74 R12: dffffc0000000000 [ 266.911077][ T6124] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c [ 266.911109][ T6124] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.911136][ T6124] ? zone_statistics+0x170/0x170 [ 266.911180][ T6124] kmalloc_large_node+0x7d/0x190 [ 266.911208][ T6124] __kmalloc_node+0x232/0x3b0 [ 266.911237][ T6124] ext4_expand_extra_isize_ea+0xd55/0x19a0 [ 266.911295][ T6124] __ext4_expand_extra_isize+0x301/0x3e0 [ 266.911328][ T6124] __ext4_mark_inode_dirty+0x469/0x700 [ 266.911368][ T6124] ext4_evict_inode+0xa81/0x1080 [ 266.911389][ T6124] ? _raw_spin_unlock+0x24/0x40 [ 266.911426][ T6124] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 266.911453][ T6124] ? do_raw_spin_unlock+0x11d/0x230 [ 266.911479][ T6124] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 266.911500][ T6124] evict+0x485/0x870 [ 266.911522][ T6124] ? __lock_acquire+0x7c60/0x7c60 [ 266.911554][ T6124] ? proc_nr_inodes+0x320/0x320 [ 266.911577][ T6124] ? do_raw_spin_unlock+0x11d/0x230 [ 266.911602][ T6124] ? _raw_spin_unlock+0x24/0x40 [ 266.911626][ T6124] ? iput+0x706/0x8a0 [ 266.911662][ T6124] ext4_orphan_cleanup+0xaa9/0x12e0 [ 266.911699][ T6124] ? ext4_orphan_del+0xb90/0xb90 [ 266.911726][ T6124] ? errseq_check_and_advance+0x62/0x120 [ 266.911753][ T6124] ext4_fill_super+0x92f0/0x9a60 [ 266.911811][ T6124] ? ext4_mount+0x40/0x40 [ 266.911831][ T6124] ? set_blocksize+0x1f1/0x370 [ 266.911861][ T6124] ? sb_set_blocksize+0xa5/0xe0 [ 266.911889][ T6124] mount_bdev+0x287/0x3c0 [ 266.911913][ T6124] ? ext4_mount+0x40/0x40 [ 266.911938][ T6124] legacy_get_tree+0xe6/0x180 [ 266.911961][ T6124] ? ext4_errno_to_code+0x160/0x160 [ 266.911987][ T6124] vfs_get_tree+0x88/0x270 [ 266.912012][ T6124] do_new_mount+0x24a/0xa40 [ 266.912043][ T6124] __se_sys_mount+0x2d6/0x3c0 [ 266.912071][ T6124] ? __x64_sys_mount+0xc0/0xc0 [ 266.912098][ T6124] ? lockdep_hardirqs_on+0x94/0x140 [ 266.912119][ T6124] ? __x64_sys_mount+0x1c/0xc0 [ 266.912145][ T6124] do_syscall_64+0x4c/0xa0 [ 266.912164][ T6124] ? clear_bhb_loop+0x30/0x80 [ 266.912183][ T6124] ? clear_bhb_loop+0x30/0x80 [ 266.912206][ T6124] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.912227][ T6124] RIP: 0033:0x7fd07f7e566a [ 266.912247][ T6124] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.912265][ T6124] RSP: 002b:00007fd07da4ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.912287][ T6124] RAX: ffffffffffffffda RBX: 00007fd07da4aef0 RCX: 00007fd07f7e566a [ 266.912304][ T6124] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007fd07da4aeb0 [ 266.912320][ T6124] RBP: 00002000000002c0 R08: 00007fd07da4aef0 R09: 0000000000800700 [ 266.912335][ T6124] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 266.912350][ T6124] R13: 00007fd07da4aeb0 R14: 000000000000045d R15: 0000200000001000 [ 266.912384][ T6124] [ 266.912696][ T6124] Kernel Offset: disabled [ 267.684119][ T6124] Rebooting in 86400 seconds..