last executing test programs: 5.025978698s ago: executing program 4 (id=116): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0x20100, 0x0, 0x24, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 4.405745851s ago: executing program 4 (id=122): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0xb8, "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"}) 4.245897607s ago: executing program 0 (id=123): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x4, 0x0, [{0x2, 0xbe9, 0xfffffff1, 0x1, 0xb79}, {0x80000008, 0x7f, 0x4, 0x2, 0x72}, {0x80000001, 0x536, 0x1, 0x8, 0xce}, {0x40000001, 0x7, 0x9, 0x4, 0x4}]}) 4.245607779s ago: executing program 1 (id=124): io_setup(0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x8) 3.978140291s ago: executing program 4 (id=127): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000540)=""/49, 0x0, 0x11141000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.878752447s ago: executing program 2 (id=128): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(r0) 3.686811614s ago: executing program 0 (id=129): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r2, r0, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x88, 0x1e, &(0x7f00000000c0)=0x2000000, 0x4) 3.551428024s ago: executing program 3 (id=130): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x1400}, {0xe, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 3.474665503s ago: executing program 2 (id=131): request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000003700)='ext4\x00', 0x0) 3.330058931s ago: executing program 4 (id=132): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, 0x0, 0x0) read$watch_queue(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.329763841s ago: executing program 0 (id=133): syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x4c8, &(0x7f0000000780)={[{@sbsector={'sbsector', 0x3d, 0x7fffffff}}, {@map_normal}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@sbsector={'sbsector', 0x3d, 0xffffffffffffffff}}, {@check_strict}, {}, {@overriderock}, {@nocompress}, {@dmode={'dmode', 0x3d, 0x8}}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@cruft}, {@hide}, {@session={'session', 0x3d, 0x27}}], [{@pcr={'pcr', 0x3d, 0x27}}, {@permit_directio}]}, 0x0, 0x936, &(0x7f0000001300)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) 3.322935623s ago: executing program 1 (id=134): r0 = socket(0xa, 0x1, 0x6) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x79}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) memfd_create(0x0, 0x2) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x8000006) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x41944080, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000001640)={0x80080000, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.223139176s ago: executing program 3 (id=135): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b, 0x1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x24000010) sendmmsg$inet(r0, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x4000080) 3.162124563s ago: executing program 2 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0xc}, @void, @eth={@broadcast, @multicast, @val={@val={0x88a8, 0x4, 0x0, 0x5}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "010520", 0x8, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, {[@hopopts={0x3b}]}}}}}}, 0x4a) 2.109588115s ago: executing program 3 (id=137): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r0, 0x16, 0x0, @val=@iter={0x0}}, 0x20) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x14, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) 1.921985694s ago: executing program 1 (id=138): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x0) 1.734192311s ago: executing program 0 (id=139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x1411, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x9}]}, 0x18}, 0x1, 0x0, 0x0, 0x24044180}, 0x4004094) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.440600792s ago: executing program 4 (id=140): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x12424d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0xa0, &(0x7f00000004c0)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.412607209s ago: executing program 1 (id=141): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008810, &(0x7f0000000d80)=ANY=[], 0x23, 0x824, &(0x7f0000000500)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000080}}], 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x25) 1.226139156s ago: executing program 2 (id=142): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000002100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88a817008100080086dd68ad7ef800081101fe8000000000000000000000000000aaff0200000000000000000000000000014e214e23000890"], 0x46) 1.221975494s ago: executing program 3 (id=143): syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r3, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 735.19243ms ago: executing program 3 (id=144): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x20) dup3(r1, r0, 0x80000) 670.145281ms ago: executing program 1 (id=145): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000c80)={0x0, @in6={{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0xfffffff3, 0x10000, 0xfff, 0x524d, 0x4}, &(0x7f0000000d40)=0x98) 653.667688ms ago: executing program 0 (id=146): wait4(0x0, 0x0, 0x8, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x85) 446.201913ms ago: executing program 4 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0x8, 0xb, 0xffffffff9c383d51, 0xb, 0x3, 0xbb, 0x7}, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46"], 0x69) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) 301.897943ms ago: executing program 0 (id=148): ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r0, &(0x7f00000002c0)=""/153, 0x99) r1 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee= 1 [ 88.453150][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.463317][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.475518][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.484030][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.499151][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.510670][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.520245][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.531829][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.535526][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.548168][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.548525][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.556660][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.569700][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.576463][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.595532][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.604373][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.613666][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.617808][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.629134][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.630884][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.645485][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.653413][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.666334][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.668168][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.461142][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 89.490452][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 89.572495][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 89.776945][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.805311][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 89.885306][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.892838][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.900370][ T5845] bridge_slave_0: entered allmulticast mode [ 89.908860][ T5845] bridge_slave_0: entered promiscuous mode [ 89.957857][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.965234][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.973540][ T5849] bridge_slave_0: entered allmulticast mode [ 89.981443][ T5849] bridge_slave_0: entered promiscuous mode [ 89.991102][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.998507][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.006264][ T5849] bridge_slave_1: entered allmulticast mode [ 90.014141][ T5849] bridge_slave_1: entered promiscuous mode [ 90.022577][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.029937][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.038577][ T5845] bridge_slave_1: entered allmulticast mode [ 90.046628][ T5845] bridge_slave_1: entered promiscuous mode [ 90.129029][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.136512][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.144233][ T5852] bridge_slave_0: entered allmulticast mode [ 90.152713][ T5852] bridge_slave_0: entered promiscuous mode [ 90.204777][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.212424][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.219759][ T5852] bridge_slave_1: entered allmulticast mode [ 90.227890][ T5852] bridge_slave_1: entered promiscuous mode [ 90.249685][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.264455][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.321835][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.335233][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.428677][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.436349][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.443771][ T5844] bridge_slave_0: entered allmulticast mode [ 90.451785][ T5844] bridge_slave_0: entered promiscuous mode [ 90.465671][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.508545][ T5845] team0: Port device team_slave_0 added [ 90.514949][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.522667][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.530134][ T5844] bridge_slave_1: entered allmulticast mode [ 90.538269][ T5844] bridge_slave_1: entered promiscuous mode [ 90.550809][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.560452][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.568621][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.576167][ T5850] bridge_slave_0: entered allmulticast mode [ 90.584161][ T5850] bridge_slave_0: entered promiscuous mode [ 90.593452][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.600800][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.608490][ T5850] bridge_slave_1: entered allmulticast mode [ 90.617419][ T5850] bridge_slave_1: entered promiscuous mode [ 90.624060][ T5862] Bluetooth: hci0: command tx timeout [ 90.632975][ T5849] team0: Port device team_slave_0 added [ 90.642089][ T5845] team0: Port device team_slave_1 added [ 90.705087][ T5846] Bluetooth: hci3: command tx timeout [ 90.705129][ T5853] Bluetooth: hci2: command tx timeout [ 90.711832][ T5862] Bluetooth: hci4: command tx timeout [ 90.718153][ T51] Bluetooth: hci1: command tx timeout [ 90.732439][ T5849] team0: Port device team_slave_1 added [ 90.809746][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.816994][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.843010][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.861028][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.874420][ T5852] team0: Port device team_slave_0 added [ 90.885367][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.911763][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.919068][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.945088][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.960309][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.973047][ T5852] team0: Port device team_slave_1 added [ 90.983045][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.009651][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.016697][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.044204][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.113177][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.120177][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.146388][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.191538][ T5850] team0: Port device team_slave_0 added [ 91.225329][ T5844] team0: Port device team_slave_0 added [ 91.233020][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.240103][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.266952][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.282093][ T5850] team0: Port device team_slave_1 added [ 91.307602][ T5844] team0: Port device team_slave_1 added [ 91.315285][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.322896][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.348998][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.398013][ T5845] hsr_slave_0: entered promiscuous mode [ 91.405519][ T5845] hsr_slave_1: entered promiscuous mode [ 91.452437][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.459565][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.486166][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.539497][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.546656][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.572904][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.596002][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.603102][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.629487][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.649543][ T5849] hsr_slave_0: entered promiscuous mode [ 91.656653][ T5849] hsr_slave_1: entered promiscuous mode [ 91.664022][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 91.669964][ T5849] Cannot create hsr debugfs directory [ 91.704161][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.711238][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.737721][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.892707][ T5852] hsr_slave_0: entered promiscuous mode [ 91.899778][ T5852] hsr_slave_1: entered promiscuous mode [ 91.908142][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 91.914045][ T5852] Cannot create hsr debugfs directory [ 91.988758][ T5850] hsr_slave_0: entered promiscuous mode [ 91.996485][ T5850] hsr_slave_1: entered promiscuous mode [ 92.003512][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 92.009278][ T5850] Cannot create hsr debugfs directory [ 92.032575][ T5844] hsr_slave_0: entered promiscuous mode [ 92.039701][ T5844] hsr_slave_1: entered promiscuous mode [ 92.047586][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 92.053461][ T5844] Cannot create hsr debugfs directory [ 92.148862][ T24] cfg80211: failed to load regulatory.db [ 92.702640][ T51] Bluetooth: hci0: command tx timeout [ 92.760185][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.778989][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.786728][ T51] Bluetooth: hci4: command tx timeout [ 92.792278][ T5853] Bluetooth: hci3: command tx timeout [ 92.793052][ T5862] Bluetooth: hci1: command tx timeout [ 92.799014][ T51] Bluetooth: hci2: command tx timeout [ 92.817616][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.841214][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.928652][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.947256][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.961432][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.975115][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.081745][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.109120][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.120740][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.139039][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.278866][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.291484][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.305677][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.319095][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.399076][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.499911][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.519513][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.541678][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.563651][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.571433][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.582945][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.596932][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.644829][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.670018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.677266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.783403][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.834084][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.851903][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.859131][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.925321][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.932686][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.001434][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.049664][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.056972][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.087599][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.151348][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.158723][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.247536][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.286249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.293586][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.347818][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.355116][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.380476][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.456421][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.566434][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.664141][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.671671][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.721145][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.728371][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.782404][ T51] Bluetooth: hci0: command tx timeout [ 94.865334][ T5853] Bluetooth: hci4: command tx timeout [ 94.871482][ T51] Bluetooth: hci1: command tx timeout [ 94.877554][ T5853] Bluetooth: hci2: command tx timeout [ 94.878233][ T5862] Bluetooth: hci3: command tx timeout [ 94.923882][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.999104][ T5845] veth0_vlan: entered promiscuous mode [ 95.057158][ T5845] veth1_vlan: entered promiscuous mode [ 95.118858][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.146111][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.259054][ T5849] veth0_vlan: entered promiscuous mode [ 95.355741][ T5845] veth0_macvtap: entered promiscuous mode [ 95.384934][ T5849] veth1_vlan: entered promiscuous mode [ 95.405396][ T5845] veth1_macvtap: entered promiscuous mode [ 95.569932][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.602526][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.609988][ T5852] veth0_vlan: entered promiscuous mode [ 95.649742][ T1075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.660008][ T1075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.684376][ T1075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.693392][ T1075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.711640][ T5852] veth1_vlan: entered promiscuous mode [ 95.724211][ T5849] veth0_macvtap: entered promiscuous mode [ 95.769592][ T5849] veth1_macvtap: entered promiscuous mode [ 95.804802][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.924929][ T5852] veth0_macvtap: entered promiscuous mode [ 95.949625][ T5852] veth1_macvtap: entered promiscuous mode [ 95.970652][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.981545][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.990114][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.003433][ T5844] veth0_vlan: entered promiscuous mode [ 96.045230][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.082356][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.092946][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.120767][ T5844] veth1_vlan: entered promiscuous mode [ 96.129128][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.139259][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.154611][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.164481][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.236582][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.276003][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.278481][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.336194][ T5850] veth0_vlan: entered promiscuous mode [ 96.425060][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.437296][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.456094][ T5963] loop1: detected capacity change from 0 to 2048 [ 96.473482][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.491004][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.502910][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.526413][ T5963] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 96.536716][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.574217][ T5963] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 96.599425][ T5963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.658090][ T5850] veth1_vlan: entered promiscuous mode [ 96.713124][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.721734][ T5844] veth0_macvtap: entered promiscuous mode [ 96.727922][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.792635][ T5844] veth1_macvtap: entered promiscuous mode [ 96.871294][ T5862] Bluetooth: hci0: command tx timeout [ 96.960452][ T5862] Bluetooth: hci3: command tx timeout [ 96.961142][ T51] Bluetooth: hci1: command tx timeout [ 96.966013][ T5862] Bluetooth: hci2: command tx timeout [ 96.971758][ T5853] Bluetooth: hci4: command tx timeout [ 97.105633][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.133978][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.714669][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.727218][ T5850] veth0_macvtap: entered promiscuous mode [ 98.537854][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.578339][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.588644][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.659936][ T5850] veth1_macvtap: entered promiscuous mode [ 98.747857][ T5975] loop1: detected capacity change from 0 to 64 [ 98.790441][ T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.812507][ T71] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.843882][ T71] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.190346][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.207306][ T71] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.414926][ T5977] Bluetooth: MGMT ver 1.23 [ 99.426514][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.498674][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.557439][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.578735][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.619830][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.709172][ T5982] loop3: detected capacity change from 0 to 512 [ 99.753821][ T5982] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.809868][ T5982] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.030492][ T5986] loop0: detected capacity change from 0 to 256 [ 100.377519][ T5982] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.582690][ T5982] EXT4-fs (loop3): 1 truncate cleaned up [ 100.620352][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.667184][ T5982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.689717][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.778001][ T5991] loop1: detected capacity change from 0 to 512 [ 100.818746][ T5991] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.10: inode has both inline data and extents flags [ 100.842490][ T5991] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.844174][ T5991] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.10: couldn't read orphan inode 15 (err -117) [ 100.853654][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 100.854154][ C0] EXT4-fs (loop1): initial error at time 1774031028: ext4_orphan_get:1391: inode 15 [ 100.854206][ C0] EXT4-fs (loop1): last error at time 1774031028: ext4_orphan_get:1391: inode 15 [ 100.895572][ T5991] loop1: lost filesystem error report for type 5 error -117 [ 100.914976][ T5991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.957561][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.174272][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.293406][ T5994] Zero length message leads to an empty skb [ 101.840816][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.879376][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.987181][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.017104][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.037141][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.463930][ T6006] loop1: detected capacity change from 0 to 512 [ 103.051233][ T6006] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.12: inode has both inline data and extents flags [ 103.137159][ T6006] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.141891][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 103.158461][ C0] EXT4-fs (loop1): initial error at time 1774031030: ext4_orphan_get:1391: inode 15 [ 103.168218][ C0] EXT4-fs (loop1): last error at time 1774031030: ext4_orphan_get:1391: inode 15 [ 103.177819][ T6006] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.12: couldn't read orphan inode 15 (err -117) [ 103.198133][ T6006] loop1: lost filesystem error report for type 5 error -117 [ 103.230455][ T6006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.317153][ T6000] libceph: resolve '0..' (ret=-3): failed [ 103.592488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.873969][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.683291][ T6026] capability: warning: `syz.1.14' uses deprecated v2 capabilities in a way that may be insecure [ 105.172777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.181993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.582231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.856626][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 106.733687][ T6033] loop1: detected capacity change from 0 to 512 [ 106.849738][ T6033] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.15: inode has both inline data and extents flags [ 106.953823][ T6033] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.955989][ T6033] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.15: couldn't read orphan inode 15 (err -117) [ 106.965427][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 106.965455][ C1] EXT4-fs (loop1): initial error at time 1774031034: ext4_orphan_get:1391: inode 15 [ 106.965487][ C1] EXT4-fs (loop1): last error at time 1774031034: ext4_orphan_get:1391: inode 15 [ 107.099590][ T6033] loop1: lost filesystem error report for type 5 error -117 [ 107.158852][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.356602][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.994108][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.044842][ T6043] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.229292][ T6045] loop1: detected capacity change from 0 to 4096 [ 110.795973][ T6056] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.210847][ T6064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.219099][ T6064] IPv6: NLM_F_CREATE should be set when creating new route [ 111.226757][ T6064] IPv6: NLM_F_CREATE should be set when creating new route [ 111.234216][ T6064] IPv6: NLM_F_CREATE should be set when creating new route [ 112.116269][ T6071] loop2: detected capacity change from 0 to 512 [ 112.146970][ T6070] loop3: detected capacity change from 0 to 512 [ 112.218383][ T6071] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.24: inode has both inline data and extents flags [ 112.244846][ T6070] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.363260][ T6070] EXT4-fs (loop3): 1 truncate cleaned up [ 112.391231][ T6071] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.392318][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 112.407967][ C0] EXT4-fs (loop2): initial error at time 1774031039: ext4_orphan_get:1391: inode 15 [ 112.417412][ C0] EXT4-fs (loop2): last error at time 1774031039: ext4_orphan_get:1391: inode 15 [ 112.430484][ T6071] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.24: couldn't read orphan inode 15 (err -117) [ 112.460735][ T6070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.496224][ T6071] loop2: lost filesystem error report for type 5 error -117 [ 112.524036][ T6071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.569621][ T6076] loop4: detected capacity change from 0 to 64 [ 113.484251][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.915638][ T6093] loop4: detected capacity change from 0 to 512 [ 114.947913][ T6093] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.31: inode has both inline data and extents flags [ 115.034994][ T6093] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.038354][ T6093] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.31: couldn't read orphan inode 15 (err -117) [ 115.047611][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 115.047633][ C1] EXT4-fs (loop4): initial error at time 1774031042: ext4_orphan_get:1391: inode 15 [ 115.047666][ C1] EXT4-fs (loop4): last error at time 1774031042: ext4_orphan_get:1391: inode 15 [ 115.052543][ T6098] libceph: resolve '0..' (ret=-3): failed [ 115.139883][ T6093] loop4: lost filesystem error report for type 5 error -117 [ 115.149123][ T6093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.904823][ T6090] loop2: detected capacity change from 0 to 32768 [ 116.836947][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.445891][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.031593][ T6130] loop4: detected capacity change from 0 to 512 [ 120.047469][ T6130] ======================================================= [ 120.047469][ T6130] WARNING: The mand mount option has been deprecated and [ 120.047469][ T6130] and is ignored by this kernel. Remove the mand [ 120.047469][ T6130] option from the mount to silence this warning. [ 120.047469][ T6130] ======================================================= [ 120.083650][ T6130] EXT4-fs: Ignoring removed orlov option [ 120.089569][ T6130] EXT4-fs: Ignoring removed bh option [ 120.440551][ T6129] loop3: detected capacity change from 0 to 512 [ 120.544823][ T6129] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.37: inode has both inline data and extents flags [ 120.584888][ T6130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.774256][ T6129] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.774643][ T6129] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.37: couldn't read orphan inode 15 (err -117) [ 120.783874][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 120.783899][ C1] EXT4-fs (loop3): initial error at time 1774031048: ext4_orphan_get:1391: inode 15 [ 120.783936][ C1] EXT4-fs (loop3): last error at time 1774031048: ext4_orphan_get:1391: inode 15 [ 120.854644][ T6129] loop3: lost filesystem error report for type 5 error -117 [ 121.580653][ T6129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.962194][ T6130] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.36: bg 0: block 248: padding at end of block bitmap is not set [ 122.082214][ T6130] loop4: lost filesystem error report for type 5 error -117 [ 122.085614][ T6130] Quota error (device loop4): write_blk: dquota write failed [ 122.093210][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 122.093234][ C1] EXT4-fs (loop4): last error at time 1774031049: ext4_validate_block_bitmap:441 [ 122.151397][ T6130] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 122.180417][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.194070][ T6130] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.36: Failed to acquire dquot type 1 [ 122.252346][ T6130] loop4: lost filesystem error report for type 5 error -117 [ 122.326762][ T6130] EXT4-fs (loop4): 1 truncate cleaned up [ 122.400804][ T6130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.429917][ T6130] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.666263][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.927818][ T6154] loop4: detected capacity change from 0 to 512 [ 123.966946][ T6154] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.003121][ T6141] loop0: detected capacity change from 0 to 32768 [ 124.051276][ T6154] EXT4-fs (loop4): 1 truncate cleaned up [ 124.104832][ T6154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.123302][ T6141] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.977102][ T6141] XFS (loop0): Ending clean mount [ 125.188245][ T5849] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.256409][ T6171] loop3: detected capacity change from 0 to 128 [ 125.355195][ T6171] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.370300][ T6174] loop1: detected capacity change from 0 to 512 [ 125.478773][ T6171] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.558969][ T6174] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.48: inode has both inline data and extents flags [ 125.663320][ T6174] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.665191][ T6174] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.48: couldn't read orphan inode 15 (err -117) [ 125.674453][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 125.674477][ C1] EXT4-fs (loop1): initial error at time 1774031053: ext4_orphan_get:1391: inode 15 [ 125.674512][ C1] EXT4-fs (loop1): last error at time 1774031053: ext4_orphan_get:1391: inode 15 [ 125.950671][ T6174] loop1: lost filesystem error report for type 5 error -117 [ 126.286476][ T6174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.679614][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.794272][ T5852] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.618111][ T6204] loop1: detected capacity change from 0 to 64 [ 130.142629][ T6199] syz.3.51 (6199) used greatest stack depth: 17080 bytes left [ 130.232156][ T5853] Bluetooth: hci5: command 0x1003 tx timeout [ 130.239151][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.591948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.310922][ T6211] loop3: detected capacity change from 0 to 32768 [ 132.338471][ T6211] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.58 (6211) [ 132.365381][ T6211] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.375795][ T6211] BTRFS info (device loop3): using sha256 checksum algorithm [ 132.447913][ T6211] BTRFS info (device loop3): enabling ssd optimizations [ 132.455139][ T6211] BTRFS info (device loop3): turning on async discard [ 132.467098][ T6211] BTRFS info (device loop3): enabling free space tree [ 133.230812][ T6229] loop2: detected capacity change from 0 to 32768 [ 133.241476][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.250210][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.492404][ T5852] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.347801][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.990860][ T6254] loop4: detected capacity change from 0 to 64 [ 138.617709][ T6288] netlink: 'syz.1.79': attribute type 30 has an invalid length. [ 138.649914][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 138.666083][ T6283] netlink: 'syz.4.77': attribute type 5 has an invalid length. [ 138.691636][ T6288] bond0: option arp_missed_max: invalid value (0) [ 138.753154][ T6288] bond0: option arp_missed_max: allowed values 1 - 255 [ 140.175281][ T6322] vlan2: entered promiscuous mode [ 140.200379][ T6322] bond0: entered promiscuous mode [ 140.224751][ T6322] bond_slave_0: entered promiscuous mode [ 140.244167][ T6322] bond_slave_1: entered promiscuous mode [ 140.308458][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'. [ 140.363996][ T30] audit: type=1326 audit(1774031067.801:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.4.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f985ef96517 code=0x0 [ 140.639380][ T6338] xt_connbytes: Forcing CT accounting to be enabled [ 140.661622][ T6340] loop1: detected capacity change from 0 to 128 [ 141.791759][ T6370] loop0: detected capacity change from 0 to 512 [ 141.810795][ T6370] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.970728][ T6370] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 142.465273][ T6389] loop0: detected capacity change from 0 to 512 [ 142.490554][ T6389] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.694336][ T6413] sch_tbf: peakrate 5120 is lower than or equals to rate 5120 ! [ 144.771179][ T6419] loop0: detected capacity change from 0 to 2364 [ 144.810995][ T6419] iso9660: Bad value for 'sbsector' [ 145.999616][ T6443] loop1: detected capacity change from 0 to 764 [ 146.085583][ T6449] overlayfs: failed to clone upperpath [ 147.225276][ T6471] node ffff888059832680 offset 0 parent ffff888059830580 shift 0 count 1 values 0 array ffff888033f5d920 list ffff888059832698 ffff888059832698 marks 0 0 0 [ 147.241465][ T6471] ------------[ cut here ]------------ [ 147.247006][ T6471] kernel BUG at ./include/linux/xarray.h:1441! [ 147.253362][ T6471] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 147.259657][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.2.152 Not tainted syzkaller #0 PREEMPT(full) [ 147.268886][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.278973][ T6471] RIP: 0010:collapse_scan_file+0x4fba/0x5220 [ 147.285008][ T6471] Code: ff 4c 89 e7 48 c7 c6 60 b3 dc 8b e8 00 e4 f1 fe 90 0f 0b 48 85 db 0f 84 d1 00 00 00 e8 0f 10 90 ff 48 89 df e8 d7 e1 77 09 90 <0f> 0b e8 ff 0f 90 ff 48 89 df 48 c7 c6 60 b3 dc 8b e8 d0 e3 f1 fe [ 147.304652][ T6471] RSP: 0018:ffffc9000dd0ee20 EFLAGS: 00010246 [ 147.310758][ T6471] RAX: 0000000000000000 RBX: ffff888059832680 RCX: e151c8e44ef20000 [ 147.318866][ T6471] RDX: ffffc90006731000 RSI: 00000000000047df RDI: 00000000000047e0 [ 147.326873][ T6471] RBP: ffffc9000dd0f130 R08: 0000000000000003 R09: 0000000000000004 [ 147.334879][ T6471] R10: dffffc0000000000 R11: fffffbfff1cbd3dc R12: dffffc0000000000 [ 147.342890][ T6471] R13: ffffea00014a02f0 R14: 0000000000000000 R15: ffffc9000dd0f010 [ 147.350898][ T6471] FS: 00007fcdd5d336c0(0000) GS:ffff888125449000(0000) knlGS:0000000000000000 [ 147.359864][ T6471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.366485][ T6471] CR2: 0000200000739000 CR3: 000000006b27a000 CR4: 00000000003526f0 [ 147.374488][ T6471] Call Trace: [ 147.377817][ T6471] [ 147.380778][ T6471] ? collapse_scan_file+0x1bf/0x5220 [ 147.386090][ T6471] ? __pfx_collapse_scan_file+0x10/0x10 [ 147.391679][ T6471] ? __lock_acquire+0x6b5/0x2cf0 [ 147.396666][ T6471] ? schedule+0x90/0x360 [ 147.400925][ T6471] ? schedule+0x16e/0x360 [ 147.405269][ T6471] ? __lock_acquire+0x6b5/0x2cf0 [ 147.410225][ T6471] ? __up_read+0x291/0x6b0 [ 147.414661][ T6471] ? __pfx___up_read+0x10/0x10 [ 147.419449][ T6471] collapse_single_pmd+0x22b/0x4480 [ 147.424665][ T6471] ? __free_object+0x433/0x5d0 [ 147.429446][ T6471] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.434668][ T6471] ? debug_object_free+0x2d7/0x490 [ 147.439813][ T6471] ? __flush_work+0xa26/0xc50 [ 147.444595][ T6471] ? __pfx_collapse_single_pmd+0x10/0x10 [ 147.450363][ T6471] ? __flush_work+0x100/0xc50 [ 147.455063][ T6471] ? madvise_collapse+0x18c/0x820 [ 147.460105][ T6471] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 147.465792][ T6471] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.471901][ T6471] madvise_collapse+0x34c/0x820 [ 147.476787][ T6471] madvise_vma_behavior+0x1094/0x4460 [ 147.482191][ T6471] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 147.487931][ T6471] ? __lock_acquire+0x6b5/0x2cf0 [ 147.492899][ T6471] ? pick_next_task_fair+0x1782/0x1ab0 [ 147.498375][ T6471] ? irqentry_exit+0x61a/0x700 [ 147.503273][ T6471] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.508495][ T6471] ? irqentry_exit+0x61a/0x700 [ 147.513275][ T6471] ? rcu_is_watching+0x15/0xb0 [ 147.518062][ T6471] ? finish_task_switch+0x427/0xbe0 [ 147.523304][ T6471] ? rcu_is_watching+0x15/0xb0 [ 147.528082][ T6471] ? trace_sched_exit_tp+0x3a/0x130 [ 147.533299][ T6471] ? __schedule+0x1672/0x5560 [ 147.537994][ T6471] ? __lock_acquire+0x6b5/0x2cf0 [ 147.542960][ T6471] ? mas_prev_slot+0xb7b/0xbf0 [ 147.547741][ T6471] ? find_vma_prev+0x123/0x1b0 [ 147.552535][ T6471] ? __pfx_find_vma_prev+0x10/0x10 [ 147.557695][ T6471] ? futex_unqueue+0x22/0x240 [ 147.562399][ T6471] ? __futex_wait+0x371/0x420 [ 147.567095][ T6471] madvise_walk_vmas+0x573/0xae0 [ 147.572055][ T6471] ? __lock_acquire+0x6b5/0x2cf0 [ 147.577043][ T6471] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 147.582571][ T6471] ? blk_start_plug+0x6e/0x1b0 [ 147.587369][ T6471] madvise_do_behavior+0x386/0x540 [ 147.592504][ T6471] ? __pfx_madvise_do_behavior+0x10/0x10 [ 147.598158][ T6471] ? down_read+0x270/0x2e0 [ 147.602595][ T6471] ? madvise_lock+0x146/0x2e0 [ 147.607292][ T6471] do_madvise+0x1fa/0x2e0 [ 147.611642][ T6471] ? __pfx_do_madvise+0x10/0x10 [ 147.616534][ T6471] ? __se_sys_futex+0x3a8/0x450 [ 147.621424][ T6471] ? rcu_is_watching+0x15/0xb0 [ 147.626243][ T6471] __x64_sys_madvise+0xa6/0xc0 [ 147.631077][ T6471] do_syscall_64+0x14d/0xf80 [ 147.635725][ T6471] ? trace_irq_disable+0x3b/0x140 [ 147.640774][ T6471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.646880][ T6471] ? clear_bhb_loop+0x40/0x90 [ 147.651580][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.657574][ T6471] RIP: 0033:0x7fcdd4d9c799 [ 147.662035][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.681668][ T6471] RSP: 002b:00007fcdd5d33028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 147.690116][ T6471] RAX: ffffffffffffffda RBX: 00007fcdd5015fa0 RCX: 00007fcdd4d9c799 [ 147.698108][ T6471] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 147.706180][ T6471] RBP: 00007fcdd4e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 147.714252][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.722246][ T6471] R13: 00007fcdd5016038 R14: 00007fcdd5015fa0 R15: 00007ffe8db77b18 [ 147.730248][ T6471] [ 147.733285][ T6471] Modules linked in: [ 147.738443][ T6471] ---[ end trace 0000000000000000 ]--- [ 147.743975][ T6471] RIP: 0010:collapse_scan_file+0x4fba/0x5220 [ 147.750002][ T6471] Code: ff 4c 89 e7 48 c7 c6 60 b3 dc 8b e8 00 e4 f1 fe 90 0f 0b 48 85 db 0f 84 d1 00 00 00 e8 0f 10 90 ff 48 89 df e8 d7 e1 77 09 90 <0f> 0b e8 ff 0f 90 ff 48 89 df 48 c7 c6 60 b3 dc 8b e8 d0 e3 f1 fe [ 147.770504][ T6471] RSP: 0018:ffffc9000dd0ee20 EFLAGS: 00010246 [ 147.776902][ T6471] RAX: 0000000000000000 RBX: ffff888059832680 RCX: e151c8e44ef20000 [ 147.784961][ T6471] RDX: ffffc90006731000 RSI: 00000000000047df RDI: 00000000000047e0 [ 147.793104][ T6471] RBP: ffffc9000dd0f130 R08: 0000000000000003 R09: 0000000000000004 [ 147.801120][ T6471] R10: dffffc0000000000 R11: fffffbfff1cbd3dc R12: dffffc0000000000 [ 147.809200][ T6471] R13: ffffea00014a02f0 R14: 0000000000000000 R15: ffffc9000dd0f010 [ 147.817262][ T6471] FS: 00007fcdd5d336c0(0000) GS:ffff888125449000(0000) knlGS:0000000000000000 [ 147.826760][ T6471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.833423][ T6471] CR2: 0000200000739000 CR3: 000000006b27a000 CR4: 00000000003526f0 [ 147.841564][ T6471] Kernel panic - not syncing: Fatal exception [ 147.848258][ T6471] Kernel Offset: disabled [ 147.852592][ T6471] Rebooting in 86400 seconds..