last executing test programs: 14.035589611s ago: executing program 2 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 13.989147222s ago: executing program 2 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x5) sendmmsg$inet6(r0, &(0x7f0000000f40), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001c22300830406dd7e40ab000000000000000000ac1e0101000000000000000000b41000"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000002000000020001036f0000000000000048000200656362286369706865725f6e756c6c2900"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) rmdir(&(0x7f0000000040)='./control\x00') r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) 12.962725568s ago: executing program 2 (id=195): syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x68, &(0x7f0000000100)=ANY=[@ANYBLOB="680337858f0e976d5da75157a649660dac57cc4c0ecc47565c68c8bb5056ff8409002b00f47f37a3bd3b7d7837fc8d70f4a446e2678830196314f74e61eccc6d6c482f7c3da82b"]}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\t'], 0xa) 11.158963506s ago: executing program 2 (id=205): unshare(0x22020400) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x2, 0x80000) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_disconnect(0xffffffffffffffff) sync() 9.00419908s ago: executing program 2 (id=219): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0xa, 0x0, @loopback}, 0x57) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r2, 0x381, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe71f, 0x1f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x24004010) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x45b, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000027c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000054}, 0x50) 6.607841217s ago: executing program 1 (id=237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x58, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3d}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x10) 4.527818449s ago: executing program 1 (id=239): r0 = syz_open_dev$sg(&(0x7f0000000300), 0x7, 0x202280) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x70}], 0x1, 0x0, 0x0) 4.335324322s ago: executing program 0 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='mm_page_alloc\x00', r1, 0x0, 0x10000000007}, 0x18) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x7ec5, 0x18}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.247903464s ago: executing program 1 (id=242): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$vcsn(0x0, 0x7fff, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000100), 0x80000) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) 4.212410184s ago: executing program 2 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x8000}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 3.943087168s ago: executing program 1 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) unlink(0x0) 3.942407408s ago: executing program 4 (id=246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000002c0)=ANY=[], 0x20) 3.82772252s ago: executing program 3 (id=247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f00000002c0), &(0x7f0000000440)=r2}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 3.796402651s ago: executing program 0 (id=248): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 3.749521302s ago: executing program 4 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 3.619441113s ago: executing program 1 (id=250): unshare(0x28000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) 3.593100694s ago: executing program 3 (id=251): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800000000000007, 0x400405}) 3.474544706s ago: executing program 0 (id=252): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="6219646a33", 0x5}], 0x1}}], 0x1, 0x14) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)={0x0, 0x4, [0xd81, 0x826, 0xef9, 0x14f]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(r0, 0x1) 2.483341091s ago: executing program 1 (id=253): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0xa, 0x0, @loopback}, 0x57) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r2, 0x381, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe71f, 0x1f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x24004010) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x45b, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000027c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000054}, 0x50) 2.482862921s ago: executing program 4 (id=254): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() kcmp(r2, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 1.755937502s ago: executing program 4 (id=255): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@volatile={0x7}, @restrict={0x2, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000001c0)=""/52, 0x34, 0x34, 0x1, 0x7, 0x0, @void, @value}, 0x28) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0), 0xfd, 0x587, &(0x7f0000002100)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1f, 0x4, 0xb, 0x6, 0x420, 0x1, 0x71f, '\x00', 0x0, r0, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x30, 0x0, 0x5f, 0x60]}}, 0x0, 0x2a, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000400)='.\x00', 0xa4000021) close(r8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@id, 0x10, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$rxrpc(0x21, 0x2, 0x2) 1.744492933s ago: executing program 0 (id=256): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210cc209800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d0000001400000011000100"], 0xf0}}, 0x800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000640)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001640)={{0x0, 0xe062, 0x71, 0xea, 0xb, 0xffffffff, 0x7, 0x6, 0x7, 0x9, 0x1, 0x25, 0xfffffffffffffffc, 0x1b7, 0x8000000000000001}}) 1.627366694s ago: executing program 3 (id=257): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\t'], 0xa) 1.554728056s ago: executing program 0 (id=258): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@oldalloc}, {@orlov}, {@oldalloc}, {@auto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x580, &(0x7f0000001b40)="$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") r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11e, 0x1, 0x0, 0x0) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) setgroups(0x2, &(0x7f0000000340)=[0xee01, r2]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) fchmodat(r3, &(0x7f0000000180)='.\x02\x00', 0x6) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000680)=ANY=[]) 1.520938606s ago: executing program 3 (id=259): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4, &(0x7f0000000200)={0x11, 0x75, r2, 0x1, 0x2, 0x6, @multicast}, 0x14) 1.134824612s ago: executing program 3 (id=260): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xf9d, @rand_addr=' \x01\x00'}}}, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 947.406735ms ago: executing program 4 (id=261): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x86) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000300000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f00000001c0)=0x700, 0x12) 914.306886ms ago: executing program 3 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1205, &(0x7f0000002a80)="$eJzs3M9rHGUYB/AnMTZtan6otdqC+KAXvQxNDl70EiQF6YLSNkIrCFOz0SXjbsgsgRWxevLq3yGCCN4E8aaXXPwPBG+5eKwgjiSrbaMrGJFOKZ/PZR943u/yvrvswjvMO/svf/re1mZdbJbDmJ6aiuntiLyVkTEdf/ooXnjpu++fvnLt+qXVTmftcubF1avLL2bmwjPfvPnB589+Ozz9xlcLX8/G3tJb+z+v/LR3du/c/m9X3+3V2auzPxhmmTcGg2F5o+rmRq/eKjJfr7pl3c1ev+7uHOlvVoPt7VGW/Y35ue2dbl1n2R/lVneUw0EOd0ZZvlP2+lkURc7PBcc3c7ta/+xW0zQRTfNwnIimaZpTMRen45GYj4VYjKV4NB6Lx+NMPBFn48l4Kr788YvRQQIAAAAAAAAAAAAAAAAAAAD4/xz3/P+5w1FtzxoAAAAAAAAAAAAAAAAAAAAeLFeuXb+02umsXc48GVF9sru+uz5+HfdXN6MXVXTjQizGr3F4+n9sXF98tbN24VREZC7Fx9XNP/I3d9cfOppfPnycwMT8co4dzc/G3N35lViMM5PzKxPzJ+P55+7KF7EYP7wdg6hiIw6yd/IfLme+8lrnL/nzh+MAAADgQVDkbRP370XxT/1x/l9dH5iwPz/Inp9pdelERD16f2umqro7B0WpuJ+LE+1O45emadr/EFoqxr+USa3ZiPjP7zwVEffHAv9WtP3PxL1w50tveyYAAAAAAAAAAAAcx724nbDtNQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KsAAAD//yo00kk=") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 531.628092ms ago: executing program 4 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r2, &(0x7f0000000240)="2338dcfa67c78a50095e74401b6cc0914ab28f7554d2f66e4932ccbd9df4aa717439252e20a2196296f5328f0800000000d05807f47d5d5db836f81553dae5", 0xfffffd5f) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 0s ago: executing program 0 (id=264): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 64.726621][ T4240] cgroup: Unknown subsys name 'net' [ 64.857754][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.210431][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.156810][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.164958][ T4263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.169505][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.173795][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.182962][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.187321][ T4263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.193739][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.207756][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.209052][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.215534][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.222396][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.229980][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.236094][ T4263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.243338][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.250816][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.257083][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.264725][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.271725][ T4265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.278154][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.285318][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.292092][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.300525][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.305534][ T4263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.313732][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.319984][ T4263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.326733][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.333522][ T4263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.340706][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.355227][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.378685][ T4261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.711131][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 68.790085][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 68.829313][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 68.909534][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 68.924294][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.931389][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.940161][ T4252] device bridge_slave_0 entered promiscuous mode [ 68.975789][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.983012][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.990731][ T4252] device bridge_slave_1 entered promiscuous mode [ 69.011334][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 69.057745][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.065003][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.073580][ T4259] device bridge_slave_0 entered promiscuous mode [ 69.113061][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.120149][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.128342][ T4259] device bridge_slave_1 entered promiscuous mode [ 69.137349][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.177966][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.191560][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.198944][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.207384][ T4266] device bridge_slave_0 entered promiscuous mode [ 69.215591][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.222763][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.230605][ T4250] device bridge_slave_0 entered promiscuous mode [ 69.260872][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.268628][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.276702][ T4266] device bridge_slave_1 entered promiscuous mode [ 69.284329][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.291423][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.300038][ T4250] device bridge_slave_1 entered promiscuous mode [ 69.309283][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.353125][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.365097][ T4252] team0: Port device team_slave_0 added [ 69.405426][ T4252] team0: Port device team_slave_1 added [ 69.413252][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.430390][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.437843][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.446037][ T4251] device bridge_slave_0 entered promiscuous mode [ 69.455918][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.473840][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.486045][ T4259] team0: Port device team_slave_0 added [ 69.492273][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.499388][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.508286][ T4251] device bridge_slave_1 entered promiscuous mode [ 69.517001][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.544631][ T4259] team0: Port device team_slave_1 added [ 69.574189][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.581168][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.607244][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.628432][ T4250] team0: Port device team_slave_0 added [ 69.651949][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.659166][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.685264][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.712138][ T4250] team0: Port device team_slave_1 added [ 69.719761][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.731146][ T4266] team0: Port device team_slave_0 added [ 69.740562][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.748515][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.775307][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.796723][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.815772][ T4266] team0: Port device team_slave_1 added [ 69.822528][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.829500][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.855956][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.876275][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.883545][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.909571][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.947952][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.955120][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.981066][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.994846][ T4251] team0: Port device team_slave_0 added [ 70.021493][ T4252] device hsr_slave_0 entered promiscuous mode [ 70.028338][ T4252] device hsr_slave_1 entered promiscuous mode [ 70.044161][ T4251] team0: Port device team_slave_1 added [ 70.050886][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.058611][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.084585][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.096683][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.103837][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.129876][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.206197][ T4250] device hsr_slave_0 entered promiscuous mode [ 70.213404][ T4250] device hsr_slave_1 entered promiscuous mode [ 70.219979][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.228007][ T4250] Cannot create hsr debugfs directory [ 70.234434][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.241381][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.267453][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.289524][ T4259] device hsr_slave_0 entered promiscuous mode [ 70.297210][ T4259] device hsr_slave_1 entered promiscuous mode [ 70.304071][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.311625][ T4259] Cannot create hsr debugfs directory [ 70.333975][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.340926][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.367210][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.410107][ T4266] device hsr_slave_0 entered promiscuous mode [ 70.416795][ T4266] device hsr_slave_1 entered promiscuous mode [ 70.423947][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.431531][ T4266] Cannot create hsr debugfs directory [ 70.433291][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 70.443209][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 70.449459][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 70.452500][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 70.456796][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 70.570990][ T4251] device hsr_slave_0 entered promiscuous mode [ 70.578199][ T4251] device hsr_slave_1 entered promiscuous mode [ 70.586467][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.594416][ T4251] Cannot create hsr debugfs directory [ 70.809493][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.821784][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.832906][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.849243][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.881966][ T4259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.891467][ T4259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.900882][ T4259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.920514][ T4259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.984228][ T4250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.015813][ T4250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.026273][ T4250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.046090][ T4250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.070093][ T4266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.080588][ T4266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.086734][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.093725][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.106334][ T4266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.116286][ T4266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.196808][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.224760][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.241312][ T4251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.251810][ T4251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.263447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.273476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.307655][ T4251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.319413][ T4251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.329274][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.339697][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.349799][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.357100][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.367836][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.377942][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.386789][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.393933][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.403241][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.413673][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.433966][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.467115][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.479242][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.489226][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.500916][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.510133][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.519366][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.543677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.553464][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.570996][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.585313][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.604003][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.616723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.634040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.641860][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.677384][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.694115][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.717000][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.739974][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.749362][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.757397][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.767248][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.776058][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.783199][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.795660][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.814592][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.855309][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.871044][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.881251][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.888450][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.903213][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.911251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.922591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.931227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.941274][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.948394][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.961077][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.970763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.979520][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.986636][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.995440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.022381][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.032100][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.042067][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.057126][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.067520][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.076640][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.086463][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.098057][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.109423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.120949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.149246][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.159505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.168180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.178567][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.187387][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.194561][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.205148][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.214578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.223321][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.231949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.240588][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.247739][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.256407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.265674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.274961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.283707][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.291991][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.300506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.308182][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.316399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.334144][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.346421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.359199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.367997][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.377402][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.388774][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.400674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.413069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.422146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.436390][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.472942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.481807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.491625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.506121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.515343][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 72.521372][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 72.531379][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 72.531497][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 72.537840][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 72.553220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.561956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.572151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.585643][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.597332][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.624007][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.643740][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.662885][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.673632][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.693331][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.700469][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.722854][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.743327][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.762875][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.781425][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.790894][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.800259][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.808931][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.816053][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.825135][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.854247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.871275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.879930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.896500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.927955][ T4252] device veth0_vlan entered promiscuous mode [ 72.935532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.945704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.978440][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.996693][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.015961][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.029159][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.040812][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.053048][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.084729][ T4252] device veth1_vlan entered promiscuous mode [ 73.098373][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.108534][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.116979][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.126944][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.134629][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.142159][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.151005][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.161215][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.173399][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.183413][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.190839][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.216821][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.247816][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.277771][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.327256][ T4252] device veth0_macvtap entered promiscuous mode [ 73.344025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.364078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.383419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.421759][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.454064][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.469359][ T4252] device veth1_macvtap entered promiscuous mode [ 73.484499][ T4250] device veth0_vlan entered promiscuous mode [ 73.500745][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.509755][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.518362][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.542018][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.563040][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.579737][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.590381][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.599903][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.614891][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.623486][ T4250] device veth1_vlan entered promiscuous mode [ 73.642413][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.658254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.681047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.703846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.738977][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.748148][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.757245][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.766239][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.811492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.826904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.838799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.851088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.862817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.877961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.886285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.907870][ T4250] device veth0_macvtap entered promiscuous mode [ 73.924205][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.939703][ T4250] device veth1_macvtap entered promiscuous mode [ 73.959977][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.970916][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.983903][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.010143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.018893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.028219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.039161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.048808][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.057559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.070703][ T4266] device veth0_vlan entered promiscuous mode [ 74.085916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.098677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.109150][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.121393][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.134488][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.148313][ T4266] device veth1_vlan entered promiscuous mode [ 74.182958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.191248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.201709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.210630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.219465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.233174][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.241889][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.251779][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.260634][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.303653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.314603][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.324478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.345425][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.348929][ T4251] device veth0_vlan entered promiscuous mode [ 74.361764][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.379937][ T4259] device veth0_vlan entered promiscuous mode [ 74.388656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.396555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.406927][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.415200][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.423682][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.432055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.442039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.469231][ T4251] device veth1_vlan entered promiscuous mode [ 74.506889][ T4259] device veth1_vlan entered promiscuous mode [ 74.535936][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.547623][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.561788][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.572175][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.581463][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.590373][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.597764][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 74.598762][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 74.604568][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 74.610292][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 74.616847][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 74.629492][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.638075][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.654915][ T4266] device veth0_macvtap entered promiscuous mode [ 74.680041][ T4251] device veth0_macvtap entered promiscuous mode [ 74.704814][ T4251] device veth1_macvtap entered promiscuous mode [ 74.712675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.721038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.737425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.747211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.759186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.767597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.784945][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.795099][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.801219][ T4266] device veth1_macvtap entered promiscuous mode [ 74.821688][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.840356][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.868613][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.879668][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.897997][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.903490][ T4332] loop0: detected capacity change from 0 to 256 [ 74.925092][ T4259] device veth0_macvtap entered promiscuous mode [ 74.936621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.955318][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.965086][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.974358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.984480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.994935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.009796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.035978][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.067329][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.087133][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.098762][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.110342][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.127176][ T4259] device veth1_macvtap entered promiscuous mode [ 75.147579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.157094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.170990][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.180563][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.189637][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.198802][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.224725][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.236257][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.248364][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.259568][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.269613][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.280554][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.294934][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.303739][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.317126][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.330807][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.347371][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.357504][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.369788][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.384602][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.396546][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.407877][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.429232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.438477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.448441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.458197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.473976][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.484700][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.494735][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.505729][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.515725][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.526241][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.538287][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.553300][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.565612][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.576011][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.586850][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.597872][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.608634][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.618556][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.629010][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.640768][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.652879][ T4343] netlink: 'syz.0.7': attribute type 4 has an invalid length. [ 75.660913][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.671566][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.688883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.698176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.716784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.725811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.740709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.772863][ T4259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.781596][ T4259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.790806][ T4259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800752][ T4259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.822024][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.836842][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.845784][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.858542][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.890083][ T4347] random: crng reseeded on system resumption [ 76.312461][ T4353] loop1: detected capacity change from 0 to 512 [ 76.341749][ T4353] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.548957][ T4353] EXT4-fs (loop1): 1 orphan inode deleted [ 76.554989][ T4353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.572447][ T4353] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.711123][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 76.717815][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 76.725917][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 76.732543][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 76.739187][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 77.732509][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.747842][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.817610][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.897017][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.931666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.001244][ T4357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.009595][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.030137][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.042245][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.052605][ T4357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.123519][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.142202][ C0] sched: RT throttling activated [ 78.155365][ T2961] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.178019][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.178294][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.186258][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.250447][ T2961] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:5: Failed to release dquot type 1 [ 78.305028][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.402933][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.486020][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.540361][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.641569][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 78.695314][ T4366] loop2: detected capacity change from 0 to 512 [ 78.701989][ T4364] loop3: detected capacity change from 0 to 2048 [ 78.790631][ T4371] syz.1.12[4371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.790739][ T4371] syz.1.12[4371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.823261][ T4364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.846514][ T4371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.858975][ T4371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.865858][ T4366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.919339][ T4366] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.083341][ T4366] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 79.149934][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 79.216584][ T4380] loop1: detected capacity change from 0 to 512 [ 79.333713][ T4380] ======================================================= [ 79.333713][ T4380] WARNING: The mand mount option has been deprecated and [ 79.333713][ T4380] and is ignored by this kernel. Remove the mand [ 79.333713][ T4380] option from the mount to silence this warning. [ 79.333713][ T4380] ======================================================= [ 79.447829][ T4380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.513485][ T4379] netlink: 6 bytes leftover after parsing attributes in process `syz.1.14'. [ 79.531623][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 79.593849][ T26] audit: type=1800 audit(1745096536.167:2): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 79.608215][ T26] audit: type=1800 audit(1745096536.177:3): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 79.662722][ T4378] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.14: bg 0: block 264: padding at end of block bitmap is not set [ 79.687726][ T4380] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 79.689764][ T4380] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 79.715380][ T4396] netlink: 'syz.2.17': attribute type 10 has an invalid length. [ 79.715428][ T4396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17'. [ 79.715654][ T4396] device batadv0 entered promiscuous mode [ 79.716302][ T4396] bridge0: port 3(batadv0) entered blocking state [ 79.716434][ T4396] bridge0: port 3(batadv0) entered disabled state [ 79.718131][ T4396] bridge0: port 3(batadv0) entered blocking state [ 79.718230][ T4396] bridge0: port 3(batadv0) entered forwarding state [ 79.755173][ T4396] batman_adv: batadv0: Adding interface: dummy0 [ 79.989743][ T4396] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.989787][ T4396] batman_adv: batadv0: Interface activated: dummy0 [ 80.022449][ T2961] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 80.022516][ T2961] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 80.040463][ T4400] batadv0: mtu less than device minimum [ 80.042342][ T4400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.044262][ T4400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.046290][ T4400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.048257][ T4400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.050208][ T4400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.051984][ T4400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.053888][ T4400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.055834][ T4400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.057735][ T4400] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.112033][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 80.172542][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 80.524672][ T4411] syz.4.27[4411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.524766][ T4411] syz.4.27[4411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.554778][ T3027] cfg80211: failed to load regulatory.db [ 80.651442][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 80.854102][ T4419] loop0: detected capacity change from 0 to 512 [ 80.887978][ T4419] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.912503][ T4419] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 81.129316][ T4429] loop1: detected capacity change from 0 to 512 [ 81.142589][ T4429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.154260][ T4429] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 81.213244][ T4419] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 81.407589][ T4419] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 81.575960][ T4419] System zones: 0-2, 18-18, 34-34 [ 81.783307][ T4419] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.294087][ T4419] EXT4-fs (loop0): 1 truncate cleaned up [ 82.460125][ T4419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.753268][ T4443] loop3: detected capacity change from 0 to 1024 [ 83.823907][ T4446] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 83.860382][ T4443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.011066][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 84.028787][ T26] audit: type=1326 audit(1745096540.597:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.036700][ T4455] loop1: detected capacity change from 0 to 2048 [ 84.081058][ T26] audit: type=1326 audit(1745096540.597:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.126067][ T4443] device macvlan1 entered promiscuous mode [ 84.132148][ T4458] loop2: detected capacity change from 0 to 512 [ 84.148460][ T4451] loop4: detected capacity change from 0 to 8192 [ 84.155876][ T4443] device ipvlan0 entered promiscuous mode [ 84.162986][ T26] audit: type=1326 audit(1745096540.627:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.173285][ T4455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.185736][ T4443] device ipvlan0 left promiscuous mode [ 84.201483][ T26] audit: type=1326 audit(1745096540.627:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.219606][ T4462] loop0: detected capacity change from 0 to 1024 [ 84.224262][ T26] audit: type=1326 audit(1745096540.627:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.243816][ T4458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.252245][ T26] audit: type=1326 audit(1745096540.627:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.285497][ T26] audit: type=1326 audit(1745096540.627:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.292680][ T4451] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 84.308685][ T26] audit: type=1326 audit(1745096540.627:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.335821][ T4443] device macvlan1 left promiscuous mode [ 84.341900][ T4455] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.342293][ T26] audit: type=1326 audit(1745096540.637:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.375078][ T26] audit: type=1326 audit(1745096540.637:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada18e169 code=0x7ffc0000 [ 84.378644][ T4462] EXT4-fs error (device loop0): ext4_map_blocks:744: inode #3: block 1: comm syz.0.40: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.398952][ T4458] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.422087][ T4451] loop4: partition table partially beyond EOD, truncated [ 84.434404][ T4451] loop4: p1 start 408832 is beyond EOD, truncated [ 84.440878][ T4451] loop4: p2 size 8388352 extends beyond EOD, truncated [ 84.496482][ T4462] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.40: Failed to acquire dquot type 0 [ 84.546937][ T4451] loop4: p5 size 8388352 extends beyond EOD, truncated [ 84.591868][ T4462] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.40: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.670536][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 84.678353][ T4462] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.40: Invalid inode bitmap blk 0 in block_group 0 [ 84.716794][ T4462] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 84.727358][ T9] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.730168][ T4462] EXT4-fs (loop0): 1 orphan inode deleted [ 84.749075][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 0 [ 84.768606][ T3623] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 84.769324][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 84.773983][ T3623] loop4: partition table partially beyond EOD, truncated [ 84.774134][ T3623] loop4: p1 start 408832 is beyond EOD, [ 84.791744][ T4462] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.822561][ T3623] truncated [ 84.825723][ T3623] loop4: p2 size 8388352 extends beyond EOD, truncated [ 84.859352][ T3623] loop4: p5 size 8388352 extends beyond EOD, truncated [ 84.918045][ T4473] loop3: detected capacity change from 0 to 2048 [ 84.946146][ T4473] EXT4-fs: Ignoring removed bh option [ 84.993588][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 85.021828][ T4473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 85.169554][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 85.241369][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 85.255285][ T4444] udevd[4444]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 85.256527][ T4471] udevd[4471]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 85.281922][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 85.297320][ T4483] xt_connbytes: Forcing CT accounting to be enabled [ 85.306636][ T4253] udevd[4253]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 85.326571][ T4484] xt_hashlimit: max too large, truncated to 1048576 [ 85.345068][ T4483] Cannot find set identified by id 0 to match [ 85.447853][ T4471] udevd[4471]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 85.450560][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 85.466149][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 85.469312][ T4444] udevd[4444]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 85.498693][ T4253] udevd[4253]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 85.941571][ T75] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.982848][ T4503] syz.1.51[4503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.982956][ T4503] syz.1.51[4503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.011920][ T75] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 86.049496][ T75] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.049496][ T75] [ 86.074942][ T75] EXT4-fs (loop3): Total free blocks count 0 [ 86.101320][ T75] EXT4-fs (loop3): Free/Dirty block details [ 86.118381][ T75] EXT4-fs (loop3): free_blocks=2415919104 [ 86.126913][ T75] EXT4-fs (loop3): dirty_blocks=3904 [ 86.135467][ T75] EXT4-fs (loop3): Block reservation details [ 86.145667][ T75] EXT4-fs (loop3): i_reserved_data_blocks=244 [ 86.166003][ T75] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 86.225620][ T4510] loop2: detected capacity change from 0 to 1024 [ 86.315784][ T4510] EXT4-fs error (device loop2): ext4_map_blocks:744: inode #3: block 1: comm syz.2.55: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.379198][ T4518] xt_connbytes: Forcing CT accounting to be enabled [ 86.396352][ T4510] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.55: Failed to acquire dquot type 0 [ 86.428572][ T4513] loop4: detected capacity change from 0 to 512 [ 86.456216][ T4510] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.55: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.458427][ T4518] Cannot find set identified by id 0 to match [ 86.535929][ T4513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.544158][ T4510] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.55: Invalid inode bitmap blk 0 in block_group 0 [ 86.562369][ T9] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.581936][ T4510] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 86.611491][ T4513] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.622011][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 0 [ 86.623433][ T4510] EXT4-fs (loop2): 1 orphan inode deleted [ 86.645160][ T4510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.711976][ T4527] xt_hashlimit: max too large, truncated to 1048576 [ 86.808145][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 87.094842][ T4535] loop1: detected capacity change from 0 to 2048 [ 87.133216][ T4535] EXT4-fs: Ignoring removed bh option [ 87.173086][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 87.188531][ T4535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 87.275920][ T4546] loop0: detected capacity change from 0 to 1024 [ 87.285931][ T4546] EXT4-fs: Ignoring removed orlov option [ 87.291622][ T4546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.321175][ T4543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.369236][ T4546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 87.514569][ T4543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.650795][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 87.767056][ T4543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.961919][ T4543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.156453][ T4543] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.244899][ T4320] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.266082][ T4543] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.297267][ T4543] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.297964][ T4320] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.325257][ T4320] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.325257][ T4320] [ 88.342001][ T4320] EXT4-fs (loop1): Total free blocks count 0 [ 88.347290][ T4543] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.351685][ T4320] EXT4-fs (loop1): Free/Dirty block details [ 88.371791][ T4320] EXT4-fs (loop1): free_blocks=2415919104 [ 88.378018][ T4320] EXT4-fs (loop1): dirty_blocks=2416 [ 88.389464][ T4320] EXT4-fs (loop1): Block reservation details [ 88.420530][ T4320] EXT4-fs (loop1): i_reserved_data_blocks=151 [ 88.453328][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 88.458638][ T2961] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 88.540825][ T4581] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.562579][ T4581] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 88.584969][ T4586] syz.0.82[4586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.585107][ T4586] syz.0.82[4586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.606825][ T4585] loop2: detected capacity change from 0 to 512 [ 88.635653][ T4585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.706381][ T4585] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.751264][ T4585] EXT4-fs (loop2): 1 truncate cleaned up [ 88.757124][ T4585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.879540][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 89.080946][ T4603] tun0: tun_chr_ioctl cmd 1074025681 [ 89.147417][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 89.147431][ T26] audit: type=1326 audit(1745096545.717:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bcf8e169 code=0x7ffc0000 [ 89.242750][ T26] audit: type=1326 audit(1745096545.757:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f33bcf8e169 code=0x7ffc0000 [ 89.278333][ T4581] syz.4.81 (4581) used greatest stack depth: 19520 bytes left [ 89.349381][ T26] audit: type=1326 audit(1745096545.757:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bcf8e169 code=0x7ffc0000 [ 89.400211][ T4614] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 89.460539][ T4613] loop1: detected capacity change from 0 to 2048 [ 89.610699][ T4621] loop2: detected capacity change from 0 to 128 [ 89.678162][ T4621] FAT-fs (loop2): Directory bread(block 162) failed [ 89.712409][ T4621] FAT-fs (loop2): Directory bread(block 163) failed [ 89.719184][ T4621] FAT-fs (loop2): Directory bread(block 164) failed [ 89.752445][ T4621] FAT-fs (loop2): Directory bread(block 165) failed [ 89.772369][ T4621] FAT-fs (loop2): Directory bread(block 166) failed [ 89.797984][ T4621] FAT-fs (loop2): Directory bread(block 167) failed [ 89.848354][ T4621] FAT-fs (loop2): Directory bread(block 168) failed [ 89.867569][ T4621] FAT-fs (loop2): Directory bread(block 169) failed [ 89.893671][ T4621] FAT-fs (loop2): Directory bread(block 162) failed [ 89.918616][ T4621] FAT-fs (loop2): Directory bread(block 163) failed [ 89.954940][ T4621] syz.2.94: attempt to access beyond end of device [ 89.954940][ T4621] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 89.979065][ T4631] loop0: detected capacity change from 0 to 2048 [ 89.997754][ T4631] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.005571][ T4621] syz.2.94: attempt to access beyond end of device [ 90.005571][ T4621] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 90.100772][ T4631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.219808][ T4631] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 90.262897][ T4645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 90.424320][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 90.850908][ T4671] loop4: detected capacity change from 0 to 512 [ 90.917582][ T4671] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.982654][ T4671] EXT4-fs (loop4): 1 truncate cleaned up [ 91.028811][ T4671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.183274][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 91.256565][ T4684] netlink: 68 bytes leftover after parsing attributes in process `syz.3.119'. [ 91.531699][ T4691] loop4: detected capacity change from 0 to 512 [ 91.575090][ T4691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.587321][ T4691] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 93.059425][ T4470] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.087420][ T4694] loop3: detected capacity change from 0 to 1024 [ 93.127382][ T4694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.467393][ T4701] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 93.543967][ T4701] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 93.612886][ T4701] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 93.802203][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 94.239759][ T4710] loop4: detected capacity change from 0 to 1024 [ 94.438470][ T4710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.527434][ T4710] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.129: bg 0: block 88: padding at end of block bitmap is not set [ 94.580415][ T26] audit: type=1326 audit(1745096550.873:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.612835][ T4724] IPv6: Can't replace route, no match found [ 94.635096][ T4720] loop3: detected capacity change from 0 to 1024 [ 94.639821][ T26] audit: type=1326 audit(1745096550.892:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.679958][ T26] audit: type=1326 audit(1745096550.892:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.718268][ T26] audit: type=1326 audit(1745096550.892:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.748992][ T26] audit: type=1326 audit(1745096550.892:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.776847][ T26] audit: type=1326 audit(1745096550.892:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.776947][ T4720] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.813625][ T26] audit: type=1326 audit(1745096550.892:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.916874][ T4733] process 'syz.2.137' launched './file0' with NULL argv: empty string added [ 94.938963][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 94.953963][ T4731] loop0: detected capacity change from 0 to 1024 [ 94.955253][ T26] audit: type=1326 audit(1745096550.892:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.955308][ T26] audit: type=1326 audit(1745096550.910:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.955341][ T26] audit: type=1326 audit(1745096550.910:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4722 comm="syz.0.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 94.987719][ T4734] loop1: detected capacity change from 0 to 1024 [ 94.988451][ T4734] EXT4-fs: Ignoring removed bh option [ 94.988496][ T4734] EXT4-fs: inline encryption not supported [ 94.988511][ T4734] EXT4-fs: Ignoring removed i_version option [ 95.044505][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.062437][ T4734] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 2: comm syz.1.135: lblock 2 mapped to illegal pblock 2 (length 1) [ 95.198357][ T4734] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 48: comm syz.1.135: lblock 0 mapped to illegal pblock 48 (length 1) [ 95.198703][ T4734] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.135: Failed to acquire dquot type 0 [ 95.199131][ T4734] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 95.199382][ T4734] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.135: mark_inode_dirty error [ 95.199606][ T4734] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 95.199677][ T4734] EXT4-fs (loop1): 1 orphan inode deleted [ 95.199706][ T4734] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.208334][ T4734] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 16: comm syz.1.135: lblock 0 mapped to illegal pblock 16 (length 1) [ 95.244398][ T41] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.249218][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:2: Failed to release dquot type 0 [ 95.307909][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 95.381211][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 95.381778][ T4250] EXT4-fs error (device loop1): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 95.385506][ T4250] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 95.386036][ T4250] EXT4-fs error (device loop1): ext4_quota_off:7091: inode #3: comm syz-executor: mark_inode_dirty error [ 95.973851][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 96.140845][ T4768] capability: warning: `syz.0.150' uses 32-bit capabilities (legacy support in use) [ 96.338646][ T4772] loop2: detected capacity change from 0 to 512 [ 96.540130][ T4772] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 96.743053][ T4772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 96.819560][ T4772] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.153: corrupted in-inode xattr [ 96.875921][ T4772] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.153: couldn't read orphan inode 15 (err -117) [ 96.896285][ T4772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.016540][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 97.182847][ T4805] loop2: detected capacity change from 0 to 164 [ 97.251125][ T4805] syz.2.160: attempt to access beyond end of device [ 97.251125][ T4805] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 97.315316][ T4808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.164'. [ 97.321012][ T4805] syz.2.160: attempt to access beyond end of device [ 97.321012][ T4805] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 97.549595][ T4811] Falling back ldisc for ttyS3. [ 97.608346][ T4820] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.166'. [ 97.655645][ T4813] can: request_module (can-proto-0) failed. [ 97.706695][ T4818] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.166'. [ 98.039260][ T4833] loop4: detected capacity change from 0 to 1024 [ 98.120966][ T4833] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 98.169652][ T4833] EXT4-fs (loop4): orphan cleanup on readonly fs [ 98.229307][ T4833] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 98.238211][ T4840] loop1: detected capacity change from 0 to 2048 [ 98.252461][ T4833] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.175: mark_inode_dirty error [ 98.298312][ T4840] EXT4-fs: Ignoring removed bh option [ 98.406498][ T4833] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.175: Invalid block bitmap block 3 in block_group 0 [ 98.430528][ T4843] syz.2.177 uses obsolete (PF_INET,SOCK_PACKET) [ 98.463289][ T4840] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.538874][ T4833] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 98.594391][ T4833] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #3: comm syz.4.175: mark_inode_dirty error [ 98.668483][ T4833] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm syz.4.175: lblock 6 mapped to illegal pblock 1 (length 1) [ 98.767200][ T4833] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 48: comm syz.4.175: lblock 0 mapped to illegal pblock 48 (length 1) [ 98.796268][ T4833] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.175: Failed to acquire dquot type 0 [ 98.841415][ T4833] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 49: comm syz.4.175: lblock 1 mapped to illegal pblock 49 (length 1) [ 98.870990][ T4833] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.175: Failed to acquire dquot type 0 [ 98.920928][ T4833] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 98.954629][ T4833] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #15: comm syz.4.175: mark_inode_dirty error [ 98.979325][ T4833] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 99.012928][ T4833] EXT4-fs (loop4): 1 orphan inode deleted [ 99.025437][ T4833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.074886][ T4833] syz.4.175[4833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.074992][ T4833] syz.4.175[4833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.119696][ T4833] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 99.166952][ T4833] EXT4-fs error (device loop4): __ext4_remount:6611: comm syz.4.175: Abort forced by user [ 99.181361][ T41] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.205544][ T4833] EXT4-fs (loop4): Remounting filesystem read-only [ 99.212111][ T4833] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 99.246910][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.265090][ T41] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.265090][ T41] [ 99.276226][ T41] EXT4-fs (loop1): Total free blocks count 0 [ 99.284099][ T41] EXT4-fs (loop1): Free/Dirty block details [ 99.290123][ T41] EXT4-fs (loop1): free_blocks=2415919104 [ 99.295987][ T41] EXT4-fs (loop1): dirty_blocks=1232 [ 99.302317][ T41] EXT4-fs (loop1): Block reservation details [ 99.308346][ T41] EXT4-fs (loop1): i_reserved_data_blocks=77 [ 99.331153][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1206 with error 28 [ 99.362128][ T4833] syz.4.175 (4833) used greatest stack depth: 18848 bytes left [ 99.370874][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 99.632143][ T4871] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 100.189106][ T4861] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.213375][ T4861] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.242738][ T4861] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 100.271805][ T4861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.298897][ T4861] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.333527][ T4861] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 100.367544][ T4861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.396439][ T4861] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.426504][ T4861] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 100.466728][ T4861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.494109][ T4861] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.521911][ T4861] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 100.569903][ T4861] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 100.584207][ T4861] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.590674][ T4861] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 100.624973][ T4889] loop4: detected capacity change from 0 to 8192 [ 101.439975][ T4910] loop4: detected capacity change from 0 to 512 [ 101.492841][ T4910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.504034][ T4910] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 101.578988][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.797908][ T4911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.202'. [ 102.659748][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.665837][ T4269] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.679990][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.765521][ T4269] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.093480][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 103.093528][ T26] audit: type=1326 audit(1745096558.833:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 103.283095][ C0] net_ratelimit: 10 callbacks suppressed [ 103.283115][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 103.325664][ T26] audit: type=1326 audit(1745096558.871:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 103.524682][ T26] audit: type=1326 audit(1745096558.871:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 103.691117][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 103.717010][ T26] audit: type=1326 audit(1745096558.871:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 103.791947][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 103.805140][ T4941] IPVS: Error joining to the multicast group [ 103.898708][ T26] audit: type=1326 audit(1745096558.889:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 103.969824][ T26] audit: type=1326 audit(1745096558.889:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 103.993408][ T26] audit: type=1326 audit(1745096558.889:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 104.015916][ T26] audit: type=1326 audit(1745096558.889:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 104.039201][ T26] audit: type=1326 audit(1745096558.889:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 104.083323][ T26] audit: type=1326 audit(1745096558.889:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4930 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 104.150576][ T4946] loop4: detected capacity change from 0 to 512 [ 104.181099][ T4946] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.228220][ T4946] journal_path: Lookup failure for './file1' [ 104.236809][ T4946] EXT4-fs: error: could not find journal device path [ 104.828947][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 104.835018][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 104.903789][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 104.989130][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 105.018534][ T4970] loop4: detected capacity change from 0 to 1024 [ 105.107187][ T4970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.213636][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.247603][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 105.307144][ T4300] Process accounting resumed [ 105.332351][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 105.427568][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 105.444211][ T32] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 105.460699][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.480407][ T32] usb 3-1: config 0 descriptor?? [ 105.505416][ T32] gspca_main: sunplus-2.14.0 probing 041e:400b [ 106.017376][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 106.354256][ T5001] loop4: detected capacity change from 0 to 256 [ 106.389649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.398001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.453986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 106.614114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.622529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.646178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.654490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 106.662842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 106.671125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 106.679434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 106.721497][ T32] gspca_sunplus: reg_r err -110 [ 106.726817][ T32] sunplus: probe of 3-1:0.0 failed with error -110 [ 108.041778][ T5012] loop0: detected capacity change from 0 to 512 [ 108.338709][ T5012] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.642365][ T5012] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.236: bg 0: block 248: padding at end of block bitmap is not set [ 108.971562][ T5012] __quota_error: 29 callbacks suppressed [ 108.971970][ T5012] Quota error (device loop0): write_blk: dquota write failed [ 109.119127][ T5012] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 109.147929][ T5012] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.236: Failed to acquire dquot type 1 [ 109.171809][ T5012] EXT4-fs (loop0): 1 truncate cleaned up [ 109.179005][ T5012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.190492][ T26] audit: type=1326 audit(1745096564.530:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f603b78cad0 code=0x7ffc0000 [ 109.272440][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 109.287455][ T26] audit: type=1326 audit(1745096564.530:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f603b78ceb7 code=0x7ffc0000 [ 109.310745][ T26] audit: type=1326 audit(1745096564.530:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f603b78cad0 code=0x7ffc0000 [ 109.345536][ T26] audit: type=1326 audit(1745096564.530:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f603b78dd6b code=0x7ffc0000 [ 109.434504][ T4299] usb 3-1: USB disconnect, device number 2 [ 109.458085][ T26] audit: type=1326 audit(1745096564.530:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f603b78cdca code=0x7ffc0000 [ 109.561590][ T5028] syz.3.241[5028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.561698][ T5028] syz.3.241[5028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.564847][ T26] audit: type=1326 audit(1745096564.530:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 109.711646][ T26] audit: type=1326 audit(1745096564.530:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f603b78e169 code=0x7ffc0000 [ 109.826972][ T5033] device syzkaller0 entered promiscuous mode [ 111.175349][ T5056] loop3: detected capacity change from 0 to 1024 [ 111.257711][ T5056] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.251: Invalid block bitmap block 0 in block_group 0 [ 111.289563][ T5056] Quota error (device loop3): write_blk: dquota write failed [ 111.315035][ T5056] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.251: Failed to acquire dquot type 0 [ 111.481165][ T5056] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.251: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.706565][ T5056] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.251: Invalid inode bitmap blk 0 in block_group 0 [ 111.749523][ T5056] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 111.801924][ T5056] EXT4-fs (loop3): 1 orphan inode deleted [ 111.836598][ T5056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.997393][ T5070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 111.998842][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 112.055170][ T5068] loop4: detected capacity change from 0 to 1024 [ 112.087493][ T4301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.150356][ T5068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.228603][ T5076] loop0: detected capacity change from 0 to 1024 [ 112.235645][ T5076] EXT4-fs: Ignoring removed oldalloc option [ 112.242584][ T5076] EXT4-fs: Ignoring removed orlov option [ 112.248418][ T5076] EXT4-fs: Ignoring removed oldalloc option [ 112.254439][ T5076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.314092][ T4301] usb 2-1: Using ep0 maxpacket: 32 [ 112.316821][ T5076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.333367][ T4301] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 112.342995][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.437886][ T4301] usb 2-1: config 0 descriptor?? [ 112.470561][ T4301] gspca_main: sunplus-2.14.0 probing 041e:400b [ 112.516626][ T5086] program syz.0.258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.716794][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 112.987217][ T5091] loop3: detected capacity change from 0 to 8192 [ 113.092292][ T5091] syz.3.262: attempt to access beyond end of device [ 113.092292][ T5091] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 113.191897][ T5091] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 113.280717][ T5091] FAT-fs (loop3): Filesystem has been set read-only [ 113.424588][ T5091] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 113.456456][ T4301] gspca_sunplus: reg_r err -110 [ 113.461474][ T4301] sunplus: probe of 2-1:0.0 failed with error -110 [ 113.532924][ T5091] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 113.740078][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 113.830827][ T5078] ------------[ cut here ]------------ [ 113.830917][ T5078] kernel BUG at fs/buffer.c:2666! [ 113.831074][ T5078] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 113.831099][ T5078] CPU: 1 PID: 5078 Comm: kmmpd-loop0 Not tainted 6.1.134-syzkaller #0 [ 113.831119][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.831130][ T5078] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 113.831171][ T5078] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 81 6a e0 ff e9 b1 fe ff ff e8 17 0b 89 ff 0f 0b e8 10 0b 89 ff <0f> 0b e8 09 0b 89 ff 0f 0b e8 02 0b 89 ff 0f 0b e8 fb 0a 89 ff 0f [ 113.831191][ T5078] RSP: 0018:ffffc9000e3a7c40 EFLAGS: 00010293 [ 113.831210][ T5078] RAX: ffffffff82014190 RBX: 0000000000000000 RCX: ffff888030b49dc0 [ 113.831224][ T5078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.831236][ T5078] RBP: ffffc9000e3a7d50 R08: ffffffff82013d6d R09: ffffed100abb5292 [ 113.831250][ T5078] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100abb5291 [ 113.831264][ T5078] R13: ffff888055da9488 R14: 0000000000000000 R15: 0000000000003801 [ 113.831277][ T5078] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 113.831293][ T5078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.831307][ T5078] CR2: 0000001b2db1dff8 CR3: 0000000018c61000 CR4: 00000000003506e0 [ 113.831323][ T5078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.831335][ T5078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.831346][ T5078] Call Trace: [ 113.831352][ T5078] [ 113.831362][ T5078] write_mmp_block_thawed+0x3b6/0x5a0 [ 113.831400][ T5078] ? read_mmp_block+0x7e0/0x7e0 [ 113.831427][ T5078] ? update_process_times+0x1b0/0x1b0 [ 113.831450][ T5078] ? kmmpd+0x263/0xa70 [ 113.831477][ T5078] write_mmp_block+0x13f/0x390 [ 113.831507][ T5078] kmmpd+0x263/0xa70 [ 113.831541][ T5078] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 113.831572][ T5078] ? __kthread_parkme+0x168/0x1c0 [ 113.831601][ T5078] kthread+0x28d/0x320 [ 113.831627][ T5078] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 113.831659][ T5078] ? kthread_blkcg+0xd0/0xd0 [ 113.831687][ T5078] ret_from_fork+0x1f/0x30 [ 113.831719][ T5078] [ 113.831725][ T5078] Modules linked in: [ 113.831786][ T5078] ---[ end trace 0000000000000000 ]--- [ 113.831796][ T5078] RIP: 0010:submit_bh_wbc+0x4c0/0x4e0 [ 113.831830][ T5078] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c be fe ff ff 48 89 ef e8 81 6a e0 ff e9 b1 fe ff ff e8 17 0b 89 ff 0f 0b e8 10 0b 89 ff <0f> 0b e8 09 0b 89 ff 0f 0b e8 02 0b 89 ff 0f 0b e8 fb 0a 89 ff 0f [ 113.831852][ T5078] RSP: 0018:ffffc9000e3a7c40 EFLAGS: 00010293 [ 113.831887][ T5078] RAX: ffffffff82014190 RBX: 0000000000000000 RCX: ffff888030b49dc0 [ 113.831918][ T5078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.831946][ T5078] RBP: ffffc9000e3a7d50 R08: ffffffff82013d6d R09: ffffed100abb5292 [ 113.831978][ T5078] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100abb5291 [ 113.831998][ T5078] R13: ffff888055da9488 R14: 0000000000000000 R15: 0000000000003801 [ 113.832028][ T5078] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 113.832048][ T5078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.832079][ T5078] CR2: 0000001b2db1dff8 CR3: 0000000018c61000 CR4: 00000000003506e0 [ 113.832102][ T5078] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.832131][ T5078] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.832163][ T5078] Kernel panic - not syncing: Fatal exception [ 113.832459][ T5078] Kernel Offset: disabled [ 114.173291][ T5078] Rebooting in 86400 seconds..