last executing test programs: 10.69226404s ago: executing program 3 (id=306): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x4000001, 0x2bcdded2, 0x6d912adc6f7c7c12) 9.214756596s ago: executing program 3 (id=311): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x54d, &(0x7f0000000580)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031411d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.242875716s ago: executing program 3 (id=313): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 7.598285677s ago: executing program 2 (id=314): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4c}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x10, 0xb}, {0x0, 0x8}, {0xffff, 0xffe2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000480)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ldst={0x1, 0x1, 0x3, 0x5, 0x3, 0x100, 0x1}], &(0x7f0000000900)='GPL\x00', 0x11ed, 0xec, &(0x7f0000000940)=""/236, 0x40f00, 0x8, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0xffff}, 0x10, 0x274a3, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00), 0x10, 0x1f9a3232}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = fcntl$dupfd(r6, 0x406, r6) write$cgroup_type(r7, &(0x7f00000007c0), 0x9) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r8) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x10040000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r10 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r10, &(0x7f0000000000)={0x2a, 0x1, 0x1}, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r8) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xa8, r9, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x5}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f00000004c0)="e30080670000ec5cb68717bd86dde148f0630962bb87", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b00d2b7b6b51c97, 0x0, 0xd}, 0x50) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r11, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socketpair(0xa, 0x2, 0x88, &(0x7f0000000040)) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000000840)={&(0x7f0000000ac0)=[{&(0x7f0000000300)="d339f50c28577b3a45efca2927ea", 0xe}, {&(0x7f0000000680)="f060a5bf7c926278ced4d4ef2c2968ed67535fb0e08d2118d17b4f4e19efb9ef49af0d2a096064cfca7c752b8126b9be4b40d78fe2f61de45440d4f0f00e64a131fc20ed05491c817ff09ee0966d94167dd614d737a1aa2c82bfe4db8334caac09253f481884db887256beeb42aa0fb8a2b8dba7c8961cc2da8f59c4b146d7c7f3fa5e5182d46491bb8f37542f2504705f09d0c866d27879c6a639c946f83e5477632d6fb1aebea950ca07b8671ab8c5932005a23e19ec0376fad0639390713410cd8d55973e4e2b42aa83323d2d88549e036618d739c36574a71852e8e8e1acd5", 0xe1}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000000540)="c33819aa6b96ac8eb601f987a122fa3ca6b618a190e7399cb2217fe7b754e28fecd54221c4b460c3dfb2d9f13a730f1dec8fa25a518dfcf7f45a508a68a89ea882253ce1a0aaaae0066355fde20abb7238448bd03041d0c6ce90d05cd8eacbb091f75cd7fbd44d76bf1c5ada631a8a0a2ec17cf276dc352e9f12eeeb78f87799d9", 0x81}, {&(0x7f0000000480)}], 0x5, 0x6, 0x0, 0x2, 0x101, 0x3, 0x7, 0x8000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) 5.432734056s ago: executing program 3 (id=317): r0 = syz_usb_connect$cdc_ecm(0x2, 0x5b, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x1, 0xc0, 0x8, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "701f"}, {0x5, 0x24, 0x0, 0x9c}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x9, 0x6, 0xf7}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x89, 0x5, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x1, 0xfb}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x5, 0x8}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xed, 0x0, 0x1, 0x40, 0x9}, 0x3c, &(0x7f0000000680)={0x5, 0xf, 0x3c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "344668fc9dceeee987d2787dd87d8c6f"}, @generic={0x23, 0x10, 0x2, "20310a30617976a26550af8aa5950807ec15fa169ca48c570d7c20290c98a5fa"}]}, 0x4, [{0x56, &(0x7f0000000340)=@string={0x56, 0x3, "456b7a842097cf914ee1c5a47d2f36a679af49fffc107dfd10278daef8ddedc957298179c8eba141f4b8ee035087badf003244d4cf7a9cc301dda88d820107635274dfcaefc025a58c631c4ce30f21046637ade1"}}, {0x57, &(0x7f0000000740)=@string={0x57, 0x3, "a0253317fa435e533e06e8a7b1430a648eaaaf1985297fde619beaadbd318ad54395cabd2830e562de4390219efb519e2ef885fd8984bff70d79450b71cc5fd51e538f4e3e232c6f6571e8838adadd03718a09aea9"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2001}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000900)={0x0, 0xc}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x2}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$eJzs3c1vVFUbAPDn3n5A6fu+7UuMigvTaAgkSksLGPxYwJ4Q/Ni5sdJCkPIRWqNFE0uCGxPjxgWJKxfif6FEt66MLly4cWVI0BgSgzF6zZ25MwztTDstM73Y+f2SYe49Z2bOuaVPz7nnnjM3gJ41lv+TRuyKiItJxEhDXn8UmWPV193+7d2T+SOJLHv51ySSIq32+qR4Hi7e/NdIxLdfJbGzb2W584uXz07Pzc1eKvYnFs5dnJhfvLzvzLnp07OnZ89PPTN1+NDBQ4cn99/X8aUN28euvvHWyAfHX/3skz+Tyc9/PJ7EkfjlVDWv8Tg6ZSzG4k6Wvbc8Pf+5Hu50YSXpq/+e3JUsT+CB1VfEyEBEPBIj0dfwvzkS779YauWArsqSiAzoUYn4hx5V6wfUzu3bOw9Ou9wrATbDraNROftfGf/91bHBGK2MDexe9r4mQ3obkpfxzdfHr+aPaDkOt71DpQGNlq5sK7aWx39Sic3RIvZ23E7vGefNewAniuc8/aUNlj+2bL8b4/BAc0tXIuLRZv3/teP/tYb4f32D5Yt/AAAAAAAA6JwbRyPi6WbX/9Li2tz2eKJy/S+pXv/7/u4KwSMdKH/t63/pzQ4UAzRx62jEC03n/9bn+I7W1gj+tzobMDl1Zm52f0T8LyL2xsC2fH9ylTL2fbjzWqu8xvl/+SMvvzYXsKjHzf5t975nZnph+n6OGai6dSXisf7W83/y9j9pbP8L+d+Di22WsXP39ROt8taOf6Bbsk8j9jRt/5P6a5LVv59jotIfmKj1ClZ6/J2PvmhVvviH8uTt/47V4380afy+nvn1ff5gRBxY7M9a5W+0/z+YvNJX+/zc29MLC5cmIwaTYyvTp9ZXZ9iqavFQi5c8/vc+ufr4X73/3xCHQxGx1GaZD/89/FOrvLGIrPhY7T9ssjz+Z5q0/0Mt2//1b0xdH/2yVfnttf8HK2363iLF+B+srt0ALbueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBvlEbEfyJJx+vbaTo+HjEcEQ/FjnTuwvzCU6cuvHl+Js+r3P8/rd3pd6S6n9Tu/z/asD+1bP9ARPw/Ij7uG6rsj5+8MDdT9sEDAAAAAAAAAAAAAAAAAADAA2K4xfr/3M99ZdcO6Lr+4lm8Q+/pL7sCQGnEP/Qu8Q+9S/xD72oj/u9sRj2AzbfB9t/lAtgC9P+hVw2097Lt3a4HUAbtPwAAAAAAbCk3nn/2WhIRS88NVR65wSKvfmFwqKzaAd2Ull0BoDTm8ELvMvUHelebk3+BLSypb/2RNctvPfs/6U6FAAAAAAAAAAAAAIAV9uy68cOa6/+BLSmNOFJ2HYByWP8Pvcv6f+hdLc7xnRNAD1lrFf+G1v+7ZSAAAAAAAAAAAAAAdNT84uWz07WbgE/Pzc1eqqTY2KIb3/2eZet6V5aV97sxEBGl/8RK2RhsDM/NKDQillakAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4R/AgAA//93yh8n") pipe2(&(0x7f00000003c0), 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_pidfd_open(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x0, 0x3, 0x6d}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 5.23933831s ago: executing program 2 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 5.126697509s ago: executing program 1 (id=321): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008"], 0x28}}, 0x80) 5.057100896s ago: executing program 1 (id=322): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.061038412s ago: executing program 2 (id=324): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 3.795225732s ago: executing program 2 (id=325): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket(0x10, 0x3, 0x0) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240400c1}, 0x40) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.197423542s ago: executing program 0 (id=328): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) 3.101622964s ago: executing program 2 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) clock_gettime(0x7, &(0x7f0000000040)) eventfd2(0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r0}, 0xc) 2.786954816s ago: executing program 0 (id=330): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4c}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x10, 0xb}, {0x0, 0x8}, {0xffff, 0xffe2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000480)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ldst={0x1, 0x1, 0x3, 0x5, 0x3, 0x100, 0x1}], &(0x7f0000000900)='GPL\x00', 0x11ed, 0xec, &(0x7f0000000940)=""/236, 0x40f00, 0x8, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0xffff}, 0x10, 0x274a3, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00), 0x10, 0x1f9a3232}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = fcntl$dupfd(r6, 0x406, r6) write$cgroup_type(r7, &(0x7f00000007c0), 0x9) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r8) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x10040000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r10 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r10, &(0x7f0000000000)={0x2a, 0x1, 0x1}, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r8) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xa8, r9, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x5}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x16, 0x0, &(0x7f00000004c0)="e30080670000ec5cb68717bd86dde148f0630962bb87", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b00d2b7b6b51c97, 0x0, 0xd}, 0x50) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r11, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socketpair(0xa, 0x2, 0x88, &(0x7f0000000040)) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000000840)={&(0x7f0000000ac0)=[{&(0x7f0000000300)="d339f50c28577b3a45efca2927ea", 0xe}, {&(0x7f0000000680)="f060a5bf7c926278ced4d4ef2c2968ed67535fb0e08d2118d17b4f4e19efb9ef49af0d2a096064cfca7c752b8126b9be4b40d78fe2f61de45440d4f0f00e64a131fc20ed05491c817ff09ee0966d94167dd614d737a1aa2c82bfe4db8334caac09253f481884db887256beeb42aa0fb8a2b8dba7c8961cc2da8f59c4b146d7c7f3fa5e5182d46491bb8f37542f2504705f09d0c866d27879c6a639c946f83e5477632d6fb1aebea950ca07b8671ab8c5932005a23e19ec0376fad0639390713410cd8d55973e4e2b42aa83323d2d88549e036618d739c36574a71852e8e8e1acd5", 0xe1}, {&(0x7f0000001900)="a5d812fb09b2281a2eaca8df50980c47b50b31a01f2842bc4472110d03feba2b4bd53af21614efe864790cf03c4fe4d9f298a9134c6f29ee3b51332a0a2ad5696c7519a9eadc645f06981c3c340142148060ff2d870fb956c9d5c3f854386a416497707712b556c435cce44f461c6f06a964eb08ec7e17e2a8410c287dcaef4042039da8c76423c6c847511abbcc09c4622bd0e8d9439db5490062c34ef197f49ba666b9a49514a1c2c954c71e7021e9eee6a651faedae353ace889f314e1ed776cfcd7d3ed20a08c5edfbe9585ba02a767f8e90ba0e24f1d720c38b61555a0c45742d157b67de28ba925f2b7d049502d44f29f860eecc9250cf507fce6227237e4d009f88b1e89ba14e5d7ac3fe2e63e715a9b3e98d364b513cf6ff1f10681049b41917354d163a941a43bb214a039a7f843df454a5176113ba082277ae985b1d66f7c391a8ed19afcf7044951392d6e503f908f7c8e8db75f14f68b79e1bf7819c3718f0abf87871d7a9fdee6060c1bc9fdc60413cdc402330add4b0ebdbeb990cdcbadcc06e430c112e737bdc7ad0cd631b6e2417b23cb681369ac9c9f71325c6fa9a654f6e1edc03bfae0426817aeab98bbafa788505b0276b85c33e5e26320a67264199ce45a3cee505754626557920fb503c22ae8d3d909a050e98a4b9af510800e679f9669be6d865443dfc22a3623707a4d42b906f915a5326db5518d639e1e4879742fcb7543faf889f2a8df5f6c6c646c17b2f93e0a3d4def16edf12a6bef97ef1469d660a01891f25b3a62a35b78f1205b1aaca064e5488ae9f9bd9ceaf809fd8d8558e9c0fa625dec76f94e0cb6c6aaafbd50190a657e4f97637aef8ff02bb20e317871dd19f00c3e5d103b23c564132673dea83e5acfca88cac97f792f374312441b93021e92495c5ce84421f292906afa994403b399e5146e745e70d054a8876b9d5d2be6a9c0bde777425f481aa1fa638f4a0fb13e76e67e5115b319d70503dbbd19577b1a13345088a1e1354a4597b7787aff762d06586685816c9c2b45fe977d58faa55d2185d07e47f3ae144832f4266feaa2656db3198c9091bdb9cb875ee59c35878c448c444fe7d8bdbd236cd7ccb40f471fda676a15cc273059951ca401d8fc9fc307f1be45ea0367907a2e21dbd299563df7931f91b574a32f7f02e6c3c2a32cb581db174ea02c70f6f6c6a2824de1bdd084c0146bd9480541d53459d245f0b6a56135d5e4d57ace990f16b34537d1cf1b068d42f851dca72a4576cfc572e3e06f7ff430b30d4ece6998c9338fcc1539998bdf0e2347c06b1d117205f790585d14c31282beb3ef004ce3363ebab243a7508b8036014ab3ee42ca397170f9d9eea7347302484eebb73da4c9161eb7e6a279d7c1fde1467d8f015129d8888b623723f4a3554cb7485eed9679c9ff90b2a741fc92b82cddf199f31b3a20b4625adae4dd8561c5254c3155422bd2615c5481cb6226ef74f66a3cc75a07b704bb0456ab723fcefc25813b02748df08d1b794d894d538cb3666a01df200087e04968edaa1db9cd55b525fef0623809efe967d58a6ae3688aecbe64fa7b168227d648ea47d33daf63d835bc7159883d97dc734e95bc4f26f040b512adad68fd23e55073c16630ffe643caddc7756013702a582c6b5979a1cdae0558bbf71e221d40b687977602d84c300e8715ccdec22ef1f5c69cbc369d624eb41ac25b14bea087cc43b39ee89071350027f1794e0829bf44a9a92fff4c71b17e130a4fe8d4b910c688ebd624aa421349002f7c5bc31c8c4efc1c485317b3cd87ad07650217172b776c67ffe409fa7c260c4bed7eb96ac4239941db4bd687783f2336692dd8fbb8c76e94ffc2bf91563ba4825f118021f421315d03e8b55068c1bc80f11bfb4977b0d66f0f1dc1d4a7048e4a121436f7cafbce5b5d37465de772efca87c11da61560e41a06bf3340639a7b985742e336272d58b4bf3d537b9b188f518e0d9a06847c4646876a9500f3b8458ccbcf44dfbd4b9e6b5485d2a56af6fa5cda6c23e613471dae4670c851fa1f0c4f72a9a0600f0e970c578a6ea19435406c4a26a1181fa89b27c2822b62ed0d4d19d90e69f68256d74a40d1d0e25ddc2a7d7839037b0dafb4299d60b249c07fd7bbd37378a0de5a5014cad457f2027e66219172435374d953cf2ecb11dba2cdd4903da3bcc95ac2c7f7f835e544be5a68d6756effa344a2cacdb4ed9425633f7cc80f7f3c90e25b414666fdb4060ee53cf5ac279a0b842b55260069257c98b7af52fabb1b8bfc1ef2c2f1c74aafc64107998432d8a95295d09bd0cefc6baa28d831f66a226a0aa73c5640f62429aa9051c5900e57ae3a8dc8cae47e3978fcc61b03df8e9aa57fd20583aa142dfb7b0587759d53af9e38aae5bc2521db87db69e76c84e44c1d4df8d17881af0ba5006f19876604c176a8f9466a4a06fe36e750b6a9f487be8d9b5e4e4776f9727c17ffbaea82d6325f56f6284d8b30c824bd2ba3afdd9bb93dd32a1b1d934f2e605f293bdec9f590b95755e1c61793108800998422f0639135593b761005cc3d508fbd902fa4fc544495ae8656d088b71a54e65bd2147d88bef7fe4beacd016f45938639ccb0e4385d576b37176b113fc75f1f04b9417f44265a8047ad89281ce30445bf145501d236f36886f2a70bc1c6c5c28cf5183dad9cccebd7bbe7b74674aadd6f315fdf55db31794c3c18f0978a655f12b0d710304bcf6beadcb3a9cea23aa9471c1fdac80266463114a17be8c4fff95f9989d44b7a8a06f642e36b8fb2fabb246f2d929a517e3202e837c4ff6f3f8bf760ca493af8a3f1adf5a79d72994f66a244b79e8e3309d1a4d5b20bfa76246d8c76a9c7a5ef9af5617cc35de6231bb7788e0c0171dc84e0c8518e6b91188f5b68ae786a65afb7ee6249507644b4cd5105de49a18ba0ede4634892212f1a6dccd7693e1ee2d6ab7ce8c738b17b04f68f53c41b27e8865eac27e94b7f4b3fc57b321d40398506a7a78001ebc3034235b540a62b84c2b90fae4f76789af3bfb0e8d5fcb801db3d09cb507f388c5080213ea8f25417e0f24f87a99c997becb9a417a56eb08c60383672bfa329ccf6a66fa244cee8712bc4772491eb35d9266759ea0c41c73b66c421691932dbfc1baf160792d3cc627d9e006aa2d711dfd729ebd2ed1ac9500c9508aa8843ee5bee99ff9151877f11f775767ccc9273e1166f6f6a7a81c342440e050f655ef9dff7658babd329ca5965ee9a80a186ae9ed5b19cf3140d62581ecfc566695a008a00a18798d2ceb349e10e990e58ac405ebd2c0573fb0a55f83f170f3c3bda32149d471a18a75a4f606e49dcc3ba6407f0e638309a2f316fd455bbb069b9cb3879dfaa58f159fc02d0e2ec5c997d97950c4b13ebc9e84119bcca1bf485ce4532a5fb737d41088ae90c4660db80223107efa6b5667d10cd7fecc6d8e09b72769df8c1803fedd45652e8e9b7a36d8a2ab4699445b5745b963e3c977644bec21b1342cc2aad08fe5153a9626a3cb85bc04eadb2e17192fcbb117a0f3a89e8169a8e585472074b044cea1f3b3e0e44e6a14475e653e9125228a7af6db6d15149704c42835118b6769a6c9b54aa44461406cad2a4f76edb356cfe15c3eff590c384f22e51d07cb162319ffcb99cf1c84e911effe9303d7ef9ad17ee3285004703f049b2f7fc82b7b8a298d43b38e8b411fdd63c9ac1a4a69f5121f550093f3e307dc1fe23f1efb9283b32d1a0eaac88cb4826d9926ef5c1afc2666880aadaced2de1de9b10864e19831e2956db80057ce507651c0694044ba4699dbe2e1ddb4575ae272f49d34ba412be5686325851884cde5e93896fb71fb148fe7ff916f237f75edc7abda0af61a772b00f5a72494253ab617028d038305b6633ed67c258d37944c9f2dd4102a9540c2f26c4ec23384a0167b01f899aca9c4c94a5761b0bde8007e3b1c45f63de13aa9d363d4eb734c7f5962a9dd3b25084dc5d36f76036d78fff2d681caff01bf01cf7bb3d44aa867e564d9583da369cc2b91ac91b2478a1c2cfd0d99e8d18f0678cf0f53b8f1dcd977d160226766fd497bf4dcd230384e030bddcda2166d87c069ba97d3fa89d0c4ef1ca7bfb0f4f3b68a8351a1764105d2cbc2278b19f7d880531c477729b9237b232ccb05c68c6ffbee3a11bc7ce44c2200751398da71e7af09b6f815cfa598286f5bd8bb353763eba1004b24139f4ed3bd37c5838198457e0df572c45c2aeccb047228db9793f3472433e52cea2ce2d957e0b18a8fde1c0deec2b99fa20c57be3f83f354844120e8153d99cb5cda34aa22a8e7fb41e67e030cbdb3020adf4ae8ac6a0280d1ba41c42f773149b893bd9e6fc2258d56e639766be7383d9c3e6f2db79da5c8036debbcc07bceb63dcc5132f63db95b5f78b7a6b64accea9ff72e2b50a2d361730b23b7be182cc6351a3b4d25ba64b14b1ddd97a617498726864c54cdee82b510f1a2f4be7f8e77d98b5d65c71d6e782c62673556874cfea34e9f96f1cbbb67b888f175a8415ecc7760bd23b4e624b7987e351284c2754aa5210639f83d0fd54d711148d0ff16f1450de605ea5d7fdaaaee5faf2e82b125c0ac5a86fa86da2489434817d476862d9f1b0dbad8ee333140892c2529c9919d3d41fb435fb9a11adac4985297caa59b7d6653a2a0b27880893e925ccd7d90bf50655ef2901bd17ee6c3e19292e4ad44713e4eb0c66415dc9bd7c4c8ff207ce87e4cb8e85476d4b290d9ebefe99abda4631965f37a56bb89d82e033c7fb2d81d7861510149614fb1e4fc227c7000a22e9b5def3e999bbf1957a0ec6e51818c01a1b866baa6886431fc70261b5d8976cf9a83ff3c57a4704db412b0b4b43a3362c271f332ca90659c2b963e82d70328ff462d5acc840f55a439379f6a34b7a517ce544a24f525088c1e95b7b1076194b582f3340217c5ef2632d5417af368d3018b25d2d512820d20cfaea4ea3280242766c68f26592201f42c51d39b341bedafe6c28620e793f3f9bda0751a6f4b761e817973fbc863428b9cb27392099fd06541058ec2fe796dadb7fd2a335d1891b44e9f391c3a55af63073c31ff9805a9097f6df95322ef4fad708f1ef90cd45d6715512600d906015480ace7daa2933a6fa0bad7a5776dab4fdaf906186a198e24e7bd0b73ba315c91a862ff2f3a2312acfdd6368ba8ac2c80c3a9751bd592db34956f46c68ccc15cb2825e6820285b702fdf9a1b6d9fd7c73abafcf712082e0613f23b4e97083ebc504e33cf4dd93edc8f66448bb6f5770d8af5cff4d72617dda21f9a16fef69d65399fc2d6dc840f8cb3bdf4801f09a8af027e5c9fffa71e0ac8cd88b99e2810a399336d3fb617f7ec766065d80e20489ba8d1dd78bec82e8651093e64b070c5b8c67f2b2f9dcd4961b3f87b36c38d838900cae0b548110912573371b79207e44089c17ac48c60e3e5250a9162393048a28a64f5406661e3348147d28d24166208026acb448c2ae718aa900a475ba7a20dc2928ff8f95582ea7c6046d7857ffee348e6d55d3860ad8de8a46af9b8f8ba043558a059213d77783db3c970cffbe88c8589872643c427b49815e579b3d518ea6951415d01cc03a2a1c63fd1c1d85874491aeec4f34089058c280250e5ab035d0c1376fbcf57fc28916d5a2e2572e70c8799bbb40cf0e732f9288b447f843abc2c3c0177af73f10834f3b0b9fb660d83f02d89a8e2a2de4b32e801b463a481d35cfd1c9bb0e9a6eb4f4c0c2e18047b8b2f", 0x1000}, {&(0x7f0000000540)="c33819aa6b96ac8eb601f987a122fa3ca6b618a190e7399cb2217fe7b754e28fecd54221c4b460c3dfb2d9f13a730f1dec8fa25a518dfcf7f45a508a68a89ea882253ce1a0aaaae0066355fde20abb7238448bd03041d0c6ce90d05cd8eacbb091f75cd7fbd44d76bf1c5ada631a8a0a2ec17cf276dc352e9f12eeeb78f87799d9", 0x81}, {&(0x7f0000000480)}], 0x5, 0x6, 0x0, 0x2, 0x101, 0x3, 0x7, 0x8000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) 2.21500088s ago: executing program 0 (id=331): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f00000003c0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_open_procfs(0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 2.122395863s ago: executing program 1 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 1.935290858s ago: executing program 2 (id=333): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000000000f7) 1.151095003s ago: executing program 0 (id=334): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'freezer'}]}, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0xffffffffffffffa1, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)='\v&', 0x2}], 0x1}}], 0x1, 0x1) 1.007388066s ago: executing program 3 (id=335): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000229d00000a0001007770616e31"], 0x20}}, 0x4000000) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 937.616323ms ago: executing program 1 (id=336): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) 620.658944ms ago: executing program 1 (id=337): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/78, 0x4e}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000200)=""/219, 0xdb}], 0x4, 0x10, 0x3ff, 0x11) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x29, 0xc0, 0x9, 0x80000001, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7897, 0x8, 0xffffffff, 0x8000}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="17000000000000"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r5, 0x0, 0x0, 0x4}, 0x20) sendfile(r1, r0, &(0x7f00000001c0)=0xb, 0x8) 555.209803ms ago: executing program 0 (id=338): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket(0x10, 0x3, 0x0) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 412.719576ms ago: executing program 3 (id=339): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7ff, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f00000005c0)=""/59, 0x3b) 65.771982ms ago: executing program 1 (id=340): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x7ffe}, 0x50) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000980)={[{@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@block_validity}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000900)=ANY=[], 0x361, 0x1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0xba87317d461c07c9, 0x70bd3d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x40000c9}, 0x1000) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 0s ago: executing program 0 (id=341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) clock_gettime(0x7, &(0x7f0000000040)) eventfd2(0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r0}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 82.051193][ T5760] cgroup: Unknown subsys name 'net' [ 82.191139][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.983000][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.087353][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.100958][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.112937][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.122037][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.130373][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.138453][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.179714][ T5088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.191641][ T5088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.199907][ T5088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.222045][ T5088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.233871][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.243981][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.271309][ T5088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.289791][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.305964][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.317076][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.325160][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.336420][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.347943][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.355491][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.364497][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.385738][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.402075][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.410330][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.699730][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 86.895102][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.903534][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.911366][ T5772] bridge_slave_0: entered allmulticast mode [ 86.919222][ T5772] bridge_slave_0: entered promiscuous mode [ 86.949786][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.957127][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.965180][ T5772] bridge_slave_1: entered allmulticast mode [ 86.972888][ T5772] bridge_slave_1: entered promiscuous mode [ 86.980298][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.057104][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.071347][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.185674][ T5772] team0: Port device team_slave_0 added [ 87.196980][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 87.229021][ T5772] team0: Port device team_slave_1 added [ 87.237344][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 87.249412][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.263991][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.273087][ T5776] bridge_slave_0: entered allmulticast mode [ 87.281088][ T5776] bridge_slave_0: entered promiscuous mode [ 87.293802][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.301041][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.313010][ T5776] bridge_slave_1: entered allmulticast mode [ 87.320714][ T5776] bridge_slave_1: entered promiscuous mode [ 87.494967][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.544045][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.551075][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.579046][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.608190][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.669536][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.676922][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.704430][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.757166][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.768101][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.777259][ T5781] bridge_slave_0: entered allmulticast mode [ 87.789057][ T5781] bridge_slave_0: entered promiscuous mode [ 87.798270][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.806227][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.823442][ T5781] bridge_slave_1: entered allmulticast mode [ 87.831142][ T5781] bridge_slave_1: entered promiscuous mode [ 87.876514][ T5776] team0: Port device team_slave_0 added [ 87.896154][ T5776] team0: Port device team_slave_1 added [ 87.985444][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.992791][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.019453][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.041610][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.052098][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.059638][ T5783] bridge_slave_0: entered allmulticast mode [ 88.067353][ T5783] bridge_slave_0: entered promiscuous mode [ 88.077488][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.090609][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.100826][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.108278][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.134528][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.189693][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.197213][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.204682][ T5783] bridge_slave_1: entered allmulticast mode [ 88.212471][ T5088] Bluetooth: hci0: command tx timeout [ 88.213721][ T5783] bridge_slave_1: entered promiscuous mode [ 88.253032][ T5772] hsr_slave_0: entered promiscuous mode [ 88.259594][ T5772] hsr_slave_1: entered promiscuous mode [ 88.273199][ T5776] hsr_slave_0: entered promiscuous mode [ 88.279754][ T5776] hsr_slave_1: entered promiscuous mode [ 88.286531][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.296259][ T5088] Bluetooth: hci1: command tx timeout [ 88.303888][ T5776] Cannot create hsr debugfs directory [ 88.347815][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.360847][ T5781] team0: Port device team_slave_0 added [ 88.371337][ T5781] team0: Port device team_slave_1 added [ 88.397992][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.451586][ T5088] Bluetooth: hci3: command tx timeout [ 88.451639][ T51] Bluetooth: hci2: command tx timeout [ 88.492082][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.499068][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.525589][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.567006][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.574441][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.601049][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.629381][ T5783] team0: Port device team_slave_0 added [ 88.641160][ T5783] team0: Port device team_slave_1 added [ 88.698100][ T5781] hsr_slave_0: entered promiscuous mode [ 88.705521][ T5781] hsr_slave_1: entered promiscuous mode [ 88.712422][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.720110][ T5781] Cannot create hsr debugfs directory [ 88.804374][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.811966][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.838862][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.882673][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.889686][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.919381][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.108744][ T5783] hsr_slave_0: entered promiscuous mode [ 89.115852][ T5783] hsr_slave_1: entered promiscuous mode [ 89.123606][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.131248][ T5783] Cannot create hsr debugfs directory [ 89.222672][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.235633][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.251725][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.272582][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.390596][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.416131][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.435427][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.445861][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.529476][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.541108][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.565660][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.595793][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.659825][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.669961][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.690622][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.702423][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.832532][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.915612][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.943762][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.956674][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.985795][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.993530][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.010962][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.018330][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.048826][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.056121][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.079125][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.095048][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.109455][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.116715][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.197452][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.214211][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.239594][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.246840][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.259604][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.267010][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.291605][ T51] Bluetooth: hci0: command tx timeout [ 90.320687][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.355861][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.363084][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.372230][ T51] Bluetooth: hci1: command tx timeout [ 90.379823][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.387109][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.532518][ T51] Bluetooth: hci2: command tx timeout [ 90.534746][ T5088] Bluetooth: hci3: command tx timeout [ 90.849990][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.010423][ T5772] veth0_vlan: entered promiscuous mode [ 91.061307][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.073238][ T5772] veth1_vlan: entered promiscuous mode [ 91.091103][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.170819][ T5772] veth0_macvtap: entered promiscuous mode [ 91.190015][ T5776] veth0_vlan: entered promiscuous mode [ 91.210436][ T5772] veth1_macvtap: entered promiscuous mode [ 91.226621][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.239919][ T5776] veth1_vlan: entered promiscuous mode [ 91.287070][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.341154][ T5776] veth0_macvtap: entered promiscuous mode [ 91.355077][ T5783] veth0_vlan: entered promiscuous mode [ 91.382006][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.395151][ T5776] veth1_macvtap: entered promiscuous mode [ 91.427577][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.440878][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.450776][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.459747][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.479144][ T5783] veth1_vlan: entered promiscuous mode [ 91.504162][ T5781] veth0_vlan: entered promiscuous mode [ 91.536643][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.548444][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.562435][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.582104][ T5781] veth1_vlan: entered promiscuous mode [ 91.605011][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.617712][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.629605][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.661152][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.670535][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.687173][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.696345][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.729495][ T5783] veth0_macvtap: entered promiscuous mode [ 91.772445][ T5783] veth1_macvtap: entered promiscuous mode [ 91.810329][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.828075][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.879226][ T5781] veth0_macvtap: entered promiscuous mode [ 91.900721][ T5781] veth1_macvtap: entered promiscuous mode [ 91.928621][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.939671][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.950313][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.964197][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.977021][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.998808][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.012985][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.038353][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.049962][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.060766][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.071909][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.082156][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.092867][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.104492][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.136830][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.158542][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.168527][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.179602][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.194412][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.208827][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.229127][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.240045][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.250871][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.262911][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.273549][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.286188][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.311986][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.320790][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.330179][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.345512][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.355548][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.368992][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.378669][ T5088] Bluetooth: hci0: command tx timeout [ 92.397612][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.410509][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.426545][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.436168][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.455784][ T5088] Bluetooth: hci1: command tx timeout [ 92.586159][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.608699][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.626139][ T5088] Bluetooth: hci2: command tx timeout [ 92.632009][ T51] Bluetooth: hci3: command tx timeout [ 92.774518][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.809254][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.876482][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.922611][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.046088][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.062769][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.146276][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.178415][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.208298][ T5845] ======================================================= [ 93.208298][ T5845] WARNING: The mand mount option has been deprecated and [ 93.208298][ T5845] and is ignored by this kernel. Remove the mand [ 93.208298][ T5845] option from the mount to silence this warning. [ 93.208298][ T5845] ======================================================= [ 93.772608][ T5854] syz.0.9[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.796387][ T5854] loop0: detected capacity change from 0 to 1024 [ 93.816062][ T5854] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.850277][ T5854] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #3: block 5: comm syz.0.9: lblock 5 mapped to illegal pblock 5 (length 1) [ 93.869328][ T5854] Quota error (device loop0): write_blk: dquota write failed [ 93.878613][ T5854] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 93.887951][ T5854] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.898407][ T5854] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.9: Failed to acquire dquot type 0 [ 93.913213][ T5854] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 5: comm syz.0.9: lblock 5 mapped to illegal pblock 5 (length 1) [ 93.932904][ T5854] Quota error (device loop0): do_insert_tree: Can't read tree quota block 5 [ 93.942100][ T5854] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.952125][ T5854] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.9: Failed to acquire dquot type 0 [ 93.973509][ T5854] EXT4-fs error (device loop0): ext4_free_blocks:6690: comm syz.0.9: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.991973][ T5854] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 5: comm syz.0.9: lblock 5 mapped to illegal pblock 5 (length 1) [ 94.007478][ T5854] Quota error (device loop0): do_insert_tree: Can't read tree quota block 5 [ 94.016421][ T5854] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 94.026512][ T5854] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.9: Failed to acquire dquot type 0 [ 94.040122][ T5854] EXT4-fs (loop0): 1 orphan inode deleted [ 94.108042][ T5854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.459659][ T5088] Bluetooth: hci0: command tx timeout [ 94.509222][ T5863] capability: warning: `syz.3.11' uses 32-bit capabilities (legacy support in use) [ 94.533788][ T5088] Bluetooth: hci1: command tx timeout [ 94.543914][ T5862] loop2: detected capacity change from 0 to 164 [ 94.596726][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.694058][ T5088] Bluetooth: hci2: command tx timeout [ 94.704586][ T51] Bluetooth: hci3: command tx timeout [ 95.497724][ T5888] loop0: detected capacity change from 0 to 164 [ 96.208531][ T5905] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.329774][ T5905] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.489448][ T5905] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.540675][ T5910] loop2: detected capacity change from 0 to 512 [ 96.562299][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.570370][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.611636][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.651599][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.669549][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.679546][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.696421][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.705580][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.721957][ T5905] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.741979][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.756788][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.781264][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.800176][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.809226][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.824648][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.850389][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.885792][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.905898][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.919283][ T5762] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 96.970673][ T5762] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 97.015196][ T5910] EXT4-fs: Ignoring removed bh option [ 97.043437][ T5910] EXT4-fs (loop2): Test dummy encryption mode enabled [ 97.051022][ T5910] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.084709][ T5905] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.105463][ T5910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.150103][ T5905] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.212140][ T5905] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.232043][ T5910] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.21: inode has both inline data and extents flags [ 97.297765][ T5905] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.319914][ T5910] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.21: couldn't read orphan inode 15 (err -117) [ 97.350920][ T5914] fido_id[5914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 97.368341][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.388143][ T5919] loop0: detected capacity change from 0 to 1024 [ 97.398298][ T5919] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.418326][ T5919] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #3: block 5: comm syz.0.22: lblock 5 mapped to illegal pblock 5 (length 1) [ 97.435897][ T5919] Quota error (device loop0): write_blk: dquota write failed [ 97.443503][ T5919] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 97.453031][ T5919] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 97.466196][ T5919] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.22: Failed to acquire dquot type 0 [ 97.479711][ T5919] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 5: comm syz.0.22: lblock 5 mapped to illegal pblock 5 (length 1) [ 97.494406][ T5919] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.22: Failed to acquire dquot type 0 [ 97.506287][ T5919] EXT4-fs error (device loop0): ext4_free_blocks:6690: comm syz.0.22: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.522265][ T5919] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 5: comm syz.0.22: lblock 5 mapped to illegal pblock 5 (length 1) [ 97.539017][ T5919] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.22: Failed to acquire dquot type 0 [ 97.554095][ T788] cfg80211: failed to load regulatory.db [ 97.582483][ T5919] EXT4-fs (loop0): 1 orphan inode deleted [ 97.589927][ T5919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.612802][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 98.073620][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.094352][ T5921] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 98.426556][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.634281][ T5942] loop0: detected capacity change from 0 to 164 [ 98.763709][ T9] hid-generic FFFF:0004:0009.0002: item fetching failed at offset 8/39 [ 98.792481][ T9] hid-generic: probe of FFFF:0004:0009.0002 failed with error -22 [ 100.218432][ T5969] loop3: detected capacity change from 0 to 4096 [ 100.275232][ T5969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.291226][ T5977] process 'syz.1.39' launched './file0' with NULL argv: empty string added [ 100.335712][ T5969] EXT4-fs error (device loop3): ext4_empty_dir:3154: inode #12: block 80: comm syz.3.36: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 100.367111][ T5969] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #12: comm syz.3.36: directory missing '..' [ 100.446917][ T5971] syzkaller0: entered promiscuous mode [ 100.448685][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.454354][ T5971] syzkaller0: entered allmulticast mode [ 100.459672][ T5975] team0: No ports can be present during mode change [ 100.662893][ T5981] loop1: detected capacity change from 0 to 512 [ 100.809263][ T5981] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.41: Unrecognised inode hash code 255 [ 100.872732][ T5981] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.41: Corrupt directory, running e2fsck is recommended [ 100.941176][ T5981] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 100.951161][ T5981] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.41: corrupted in-inode xattr: invalid ea_ino [ 100.975937][ T5981] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.41: couldn't read orphan inode 15 (err -117) [ 100.997579][ T5981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.019776][ T5981] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.41: Unrecognised inode hash code 255 [ 101.032460][ T5981] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.41: Corrupt directory, running e2fsck is recommended [ 101.047467][ T5981] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.41: Unrecognised inode hash code 255 [ 101.060260][ T5981] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.41: Corrupt directory, running e2fsck is recommended [ 101.111062][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.355131][ T5992] loop1: detected capacity change from 0 to 2048 [ 101.409130][ T5992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.444015][ T5992] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.670820][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.141281][ T6012] loop1: detected capacity change from 0 to 512 [ 102.149060][ T6012] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.242425][ T6012] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 102.340948][ T6012] block device autoloading is deprecated and will be removed. [ 102.351145][ T6012] EXT4-fs (loop1): external journal has bad superblock [ 103.076343][ T6018] loop0: detected capacity change from 0 to 164 [ 104.544074][ T6011] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 104.826968][ T6031] syzkaller0: entered promiscuous mode [ 104.853201][ T6031] syzkaller0: entered allmulticast mode [ 105.242951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.251907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.069921][ T6066] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 107.107644][ T6066] loop3: detected capacity change from 0 to 512 [ 107.115170][ T6066] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.544188][ T6066] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 107.555230][ T6066] EXT4-fs (loop3): external journal has bad superblock [ 107.958956][ T6069] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 108.300825][ T6083] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 108.307777][ T6083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.379417][ T6083] vhci_hcd vhci_hcd.0: Device attached [ 108.411697][ T6084] vhci_hcd: connection closed [ 108.418938][ T3567] vhci_hcd: stop threads [ 108.429868][ T3567] vhci_hcd: release socket [ 108.447049][ T3567] vhci_hcd: disconnect device [ 108.690329][ T6098] loop0: detected capacity change from 0 to 512 [ 108.713670][ T6098] EXT4-fs: Ignoring removed bh option [ 108.744585][ T6098] EXT4-fs (loop0): Test dummy encryption mode enabled [ 108.766915][ T6098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.811357][ T6098] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.65: inode has both inline data and extents flags [ 108.840826][ T6098] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.65: couldn't read orphan inode 15 (err -117) [ 108.858607][ T6101] loop1: detected capacity change from 0 to 2048 [ 108.893385][ T6098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.990554][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.016478][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 110.420845][ T3530] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 110.598876][ T3530] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 110.617687][ T3530] EXT4-fs (loop1): This should not happen!! Data will be lost [ 110.617687][ T3530] [ 110.648644][ T3530] EXT4-fs (loop1): Total free blocks count 0 [ 110.688106][ T3530] EXT4-fs (loop1): Free/Dirty block details [ 110.719247][ T3530] EXT4-fs (loop1): free_blocks=2415919504 [ 110.729491][ T3530] EXT4-fs (loop1): dirty_blocks=3328 [ 110.735098][ T3530] EXT4-fs (loop1): Block reservation details [ 110.741558][ T3530] EXT4-fs (loop1): i_reserved_data_blocks=208 [ 110.781707][ T9] IPVS: starting estimator thread 0... [ 110.794365][ T6120] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 110.880575][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.902099][ T6121] IPVS: using max 17 ests per chain, 40800 per kthread [ 111.174138][ T3530] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1278 with error 28 [ 112.366397][ T6146] syz.1.70 uses obsolete (PF_INET,SOCK_PACKET) [ 112.607250][ T6149] loop2: detected capacity change from 0 to 2048 [ 112.660519][ T6149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.777647][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 112.827198][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.836505][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.028935][ T3530] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 114.117095][ T3530] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 114.179160][ T6162] loop1: detected capacity change from 0 to 512 [ 114.200267][ T3530] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.200267][ T3530] [ 114.226652][ T6162] EXT4-fs: Ignoring removed bh option [ 114.251997][ T3530] EXT4-fs (loop2): Total free blocks count 0 [ 114.259642][ T3530] EXT4-fs (loop2): Free/Dirty block details [ 114.268728][ T3530] EXT4-fs (loop2): free_blocks=2415919504 [ 114.287492][ T6162] EXT4-fs (loop1): Test dummy encryption mode enabled [ 114.311619][ T6162] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.324902][ T3530] EXT4-fs (loop2): dirty_blocks=7136 [ 114.331153][ T3530] EXT4-fs (loop2): Block reservation details [ 114.342729][ T6162] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.81: inode has both inline data and extents flags [ 114.357257][ T3530] EXT4-fs (loop2): i_reserved_data_blocks=446 [ 114.386243][ T6162] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.81: couldn't read orphan inode 15 (err -117) [ 114.406340][ T6162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.433370][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 114.585348][ T3530] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 115.059166][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.200551][ T6203] loop0: detected capacity change from 0 to 2048 [ 117.405419][ T6203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.433046][ T6206] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 118.974508][ T6218] loop1: detected capacity change from 0 to 512 [ 119.045625][ T1139] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 119.059613][ T1139] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.059613][ T1139] [ 119.070215][ T1139] EXT4-fs (loop0): Total free blocks count 0 [ 119.078343][ T1139] EXT4-fs (loop0): Free/Dirty block details [ 119.084426][ T1139] EXT4-fs (loop0): free_blocks=2415919504 [ 119.090304][ T1139] EXT4-fs (loop0): dirty_blocks=2624 [ 119.096009][ T1139] EXT4-fs (loop0): Block reservation details [ 119.121485][ T1139] EXT4-fs (loop0): i_reserved_data_blocks=164 [ 119.406812][ T42] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 566 with error 28 [ 119.709824][ T9] IPVS: starting estimator thread 0... [ 119.821837][ T6232] IPVS: using max 19 ests per chain, 45600 per kthread [ 120.442305][ T6240] loop3: detected capacity change from 0 to 1024 [ 120.455264][ T6240] EXT4-fs: Ignoring removed orlov option [ 120.495371][ T6240] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 120.511090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 120.529018][ T6240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.541539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.555132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 122.285429][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.673500][ T5812] IPVS: starting estimator thread 0... [ 122.697993][ T6261] loop3: detected capacity change from 0 to 2048 [ 122.774174][ T6267] IPVS: using max 18 ests per chain, 43200 per kthread [ 122.847040][ T6261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.536917][ T3454] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 123.553570][ T3454] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 123.566282][ T3454] EXT4-fs (loop3): This should not happen!! Data will be lost [ 123.566282][ T3454] [ 123.579172][ T3454] EXT4-fs (loop3): Total free blocks count 0 [ 123.585680][ T3454] EXT4-fs (loop3): Free/Dirty block details [ 123.599488][ T3454] EXT4-fs (loop3): free_blocks=2415919504 [ 123.611958][ T3454] EXT4-fs (loop3): dirty_blocks=3648 [ 123.617703][ T3454] EXT4-fs (loop3): Block reservation details [ 123.641492][ T3454] EXT4-fs (loop3): i_reserved_data_blocks=228 [ 123.782245][ T3465] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1598 with error 28 [ 123.852009][ T6288] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 125.229003][ T6302] netlink: 164 bytes leftover after parsing attributes in process `syz.2.118'. [ 125.416630][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 125.768069][ T6312] loop1: detected capacity change from 0 to 2048 [ 125.818426][ T6312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.189288][ T6349] syzkaller0: entered promiscuous mode [ 127.195221][ T6349] syzkaller0: entered allmulticast mode [ 127.580233][ T42] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 127.608476][ T28] IPVS: starting estimator thread 0... [ 127.677682][ T42] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1722 with error 28 [ 127.714469][ T6355] IPVS: using max 16 ests per chain, 38400 per kthread [ 127.733700][ T42] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.733700][ T42] [ 127.754599][ T42] EXT4-fs (loop1): Total free blocks count 0 [ 127.760679][ T42] EXT4-fs (loop1): Free/Dirty block details [ 127.766787][ T42] EXT4-fs (loop1): free_blocks=2415919504 [ 127.774391][ T42] EXT4-fs (loop1): dirty_blocks=1728 [ 127.780312][ T42] EXT4-fs (loop1): Block reservation details [ 127.790950][ T42] EXT4-fs (loop1): i_reserved_data_blocks=108 [ 127.977172][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.042431][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 128.129135][ T3530] Bluetooth: hci5: Frame reassembly failed (-84) [ 128.309771][ T6376] loop1: detected capacity change from 0 to 128 [ 128.528422][ T6376] syz.1.132: attempt to access beyond end of device [ 128.528422][ T6376] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 128.710249][ T6378] syz.1.132: attempt to access beyond end of device [ 128.710249][ T6378] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 129.028579][ T6389] loop1: detected capacity change from 0 to 2048 [ 129.069924][ T6389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.527089][ C0] hrtimer: interrupt took 58479 ns [ 130.046575][ T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 130.063400][ T5088] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 130.103267][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 130.117146][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.117146][ T11] [ 130.128304][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 130.149382][ T6401] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 130.158407][ T5088] Bluetooth: hci5: command 0x1003 tx timeout [ 130.167862][ T11] EXT4-fs (loop1): Free/Dirty block details [ 130.176982][ T11] EXT4-fs (loop1): free_blocks=2415919504 [ 130.184869][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.329252][ T6403] loop3: detected capacity change from 0 to 512 [ 130.347790][ T6403] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.366221][ T11] EXT4-fs (loop1): dirty_blocks=7472 [ 130.398846][ T6403] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 130.409391][ T6403] EXT4-fs (loop3): external journal has bad superblock [ 130.455803][ T11] EXT4-fs (loop1): Block reservation details [ 130.583321][ T11] EXT4-fs (loop1): i_reserved_data_blocks=467 [ 131.069198][ T5773] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.185537][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 131.367629][ T6412] loop3: detected capacity change from 0 to 512 [ 131.408482][ T6412] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.438547][ T6412] EXT4-fs (loop3): 1 truncate cleaned up [ 131.445896][ T6412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.627308][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.817548][ T6417] loop3: detected capacity change from 0 to 512 [ 131.838142][ T6417] EXT4-fs: Ignoring removed bh option [ 131.913026][ T6417] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.941587][ T6417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.015803][ T6417] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.151: inode has both inline data and extents flags [ 132.082069][ T6417] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.151: couldn't read orphan inode 15 (err -117) [ 132.136217][ T6417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.183977][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 132.209076][ T6415] mmap: syz.0.150 (6415) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.275051][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.452170][ T6426] loop2: detected capacity change from 0 to 2048 [ 132.536558][ T6426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.362318][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.369347][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.695559][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.900826][ T6457] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.015584][ T6458] loop3: detected capacity change from 0 to 512 [ 134.029033][ T6458] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.073583][ T6458] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 134.083942][ T6458] EXT4-fs (loop3): external journal has bad superblock [ 134.939854][ T6463] loop1: detected capacity change from 0 to 512 [ 134.988213][ T6463] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 135.027066][ T6463] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6840e018, mo2=0003] [ 135.046812][ T6463] System zones: 0-1, 15-15, 18-18, 34-34 [ 135.067758][ T6463] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.087877][ T6463] __quota_error: 4 callbacks suppressed [ 135.087930][ T6463] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 135.151082][ T6463] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 135.209519][ T6463] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 135.278376][ T6463] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #16: comm syz.1.161: iget: bad extended attribute block 1 [ 135.322003][ T6463] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.161: couldn't read orphan inode 16 (err -117) [ 135.364762][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.713251][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.008943][ T6492] loop1: detected capacity change from 0 to 2048 [ 136.075786][ T6492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.799682][ T6503] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 137.939681][ T6504] loop0: detected capacity change from 0 to 512 [ 137.947221][ T6504] EXT4-fs: Ignoring removed mblk_io_submit option [ 138.022043][ T6495] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 138.182398][ T6504] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 138.194013][ T6504] EXT4-fs (loop0): external journal has bad superblock [ 138.366912][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.751402][ C0] sched: RT throttling activated [ 139.011678][ T6506] loop0: detected capacity change from 0 to 512 [ 139.020338][ T6506] EXT4-fs: Ignoring removed bh option [ 139.085845][ T6506] EXT4-fs (loop0): Test dummy encryption mode enabled [ 139.121522][ T6506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.160261][ T6506] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.171: inode has both inline data and extents flags [ 139.249433][ T6506] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.171: couldn't read orphan inode 15 (err -117) [ 139.298608][ T6506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.735756][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.749716][ T6523] syzkaller0: entered promiscuous mode [ 139.756941][ T6523] syzkaller0: entered allmulticast mode [ 139.877611][ T6525] syzkaller0: entered promiscuous mode [ 139.883410][ T6525] syzkaller0: entered allmulticast mode [ 140.360573][ T6542] loop0: detected capacity change from 0 to 512 [ 140.369073][ T6542] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.405080][ T6542] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 140.414432][ T6542] EXT4-fs (loop0): external journal has bad superblock [ 142.830624][ T6545] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 143.361044][ T6565] loop1: detected capacity change from 0 to 1024 [ 143.369038][ T6565] EXT4-fs: Ignoring removed orlov option [ 143.423370][ T6565] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 143.510033][ T6565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.278161][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.341813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.532966][ T6578] loop1: detected capacity change from 0 to 1024 [ 144.557299][ T6578] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.615789][ T6578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.819508][ T6578] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 144.872080][ T6578] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 144.906329][ T6578] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.906329][ T6578] [ 144.931599][ T6578] EXT4-fs (loop1): Total free blocks count 0 [ 144.948480][ T6578] EXT4-fs (loop1): Free/Dirty block details [ 144.981605][ T6578] EXT4-fs (loop1): free_blocks=20480 [ 144.987017][ T6578] EXT4-fs (loop1): dirty_blocks=80 [ 145.016357][ T6578] EXT4-fs (loop1): Block reservation details [ 145.031060][ T6578] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 145.057165][ T6591] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 146.112033][ T6601] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 146.118829][ T6601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.139928][ T6601] vhci_hcd vhci_hcd.0: Device attached [ 146.261544][ T6602] usbip_core: unknown command [ 146.266331][ T6602] vhci_hcd: unknown pdu 0 [ 146.270808][ T6602] usbip_core: unknown command [ 146.307587][ T42] vhci_hcd: stop threads [ 146.343735][ T42] vhci_hcd: release socket [ 146.362967][ T42] vhci_hcd: disconnect device [ 146.650778][ T6616] loop2: detected capacity change from 0 to 1024 [ 146.675320][ T6618] loop1: detected capacity change from 0 to 2048 [ 146.683647][ T6616] EXT4-fs: Ignoring removed orlov option [ 146.714956][ T6616] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 146.747875][ T6618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.805036][ T6616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.057754][ T6627] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 147.979435][ T6568] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 148.316413][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.399210][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.748379][ T6639] loop0: detected capacity change from 0 to 1024 [ 148.978125][ T6639] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.556449][ T6639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.778776][ T6639] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 149.842828][ T6639] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 149.890189][ T6639] EXT4-fs (loop0): This should not happen!! Data will be lost [ 149.890189][ T6639] [ 149.975899][ T6639] EXT4-fs (loop0): Total free blocks count 0 [ 149.983146][ T6639] EXT4-fs (loop0): Free/Dirty block details [ 149.989111][ T6639] EXT4-fs (loop0): free_blocks=20480 [ 150.002320][ T6639] EXT4-fs (loop0): dirty_blocks=80 [ 150.017418][ T6639] EXT4-fs (loop0): Block reservation details [ 150.062617][ T6639] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 150.073289][ T6658] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 150.103233][ T6661] lo: entered allmulticast mode [ 150.341920][ T6661] loop2: detected capacity change from 0 to 8192 [ 150.464105][ T6661] loop2: p1 p2 p4[DM] [ 150.468808][ T6661] loop2: p1 size 67898881 extends beyond EOD, truncated [ 150.552507][ T6661] loop2: p4 start 393224 is beyond EOD, truncated [ 150.982462][ T6674] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 151.066746][ T5866] udevd[5866]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 151.079145][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 151.119100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 152.876930][ T6697] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 152.883551][ T6697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.954985][ T6697] vhci_hcd vhci_hcd.0: Device attached [ 153.036201][ T6700] vhci_hcd: connection closed [ 153.042392][ T59] vhci_hcd: stop threads [ 153.111599][ T59] vhci_hcd: release socket [ 153.141879][ T59] vhci_hcd: disconnect device [ 153.193091][ T5812] vhci_hcd: vhci_device speed not set [ 153.232571][ T5088] Bluetooth: hci3: command tx timeout [ 153.666514][ T6712] loop2: detected capacity change from 0 to 1024 [ 153.745625][ T6712] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.004842][ T6712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.163012][ T6712] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 154.189228][ T6719] syzkaller0: entered promiscuous mode [ 154.211582][ T6719] syzkaller0: entered allmulticast mode [ 154.231644][ T6712] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 154.293813][ T6712] EXT4-fs (loop2): This should not happen!! Data will be lost [ 154.293813][ T6712] [ 154.311997][ T6712] EXT4-fs (loop2): Total free blocks count 0 [ 154.318105][ T6712] EXT4-fs (loop2): Free/Dirty block details [ 154.336681][ T6712] EXT4-fs (loop2): free_blocks=20480 [ 154.342425][ T6712] EXT4-fs (loop2): dirty_blocks=80 [ 154.352144][ T6712] EXT4-fs (loop2): Block reservation details [ 154.358227][ T6712] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 154.391446][ T6720] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 154.864050][ T6729] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 156.039679][ T6750] loop1: detected capacity change from 0 to 164 [ 156.119976][ T6750] Zero length message leads to an empty skb [ 156.152523][ T6750] syzkaller0: entered promiscuous mode [ 156.158139][ T6750] syzkaller0: entered allmulticast mode [ 156.484210][ T6756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 156.490833][ T6756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.506325][ T6756] vhci_hcd vhci_hcd.0: Device attached [ 156.572972][ T6757] vhci_hcd: connection closed [ 156.581575][ T11] vhci_hcd: stop threads [ 156.603545][ T11] vhci_hcd: release socket [ 156.608065][ T11] vhci_hcd: disconnect device [ 156.656840][ T6762] loop3: detected capacity change from 0 to 512 [ 156.692727][ T6762] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 156.710970][ T6762] EXT4-fs (loop3): orphan cleanup on readonly fs [ 156.718737][ T6762] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 156.728244][ T6762] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 156.738795][ T6762] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.229: Failed to acquire dquot type 1 [ 156.859715][ T6762] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.229: bg 0: block 40: padding at end of block bitmap is not set [ 156.938922][ T5088] Bluetooth: hci3: command tx timeout [ 156.975262][ T6762] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 156.988107][ T6762] EXT4-fs (loop3): 1 truncate cleaned up [ 157.002988][ T6762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.605984][ T6762] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.229: bad symlink. [ 157.846957][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.911036][ T6767] syzkaller0: entered promiscuous mode [ 157.984760][ T6767] syzkaller0: entered allmulticast mode [ 158.949739][ T27] audit: type=1326 audit(1773307033.734:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x7ffc0000 [ 159.054634][ T27] audit: type=1326 audit(1773307033.734:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f414fb9c799 code=0x7ffc0000 [ 159.130269][ T27] audit: type=1326 audit(1773307033.844:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x7ffc0000 [ 159.162446][ T27] audit: type=1326 audit(1773307033.844:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x7ffc0000 [ 159.187302][ T27] audit: type=1326 audit(1773307033.844:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6784 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f414fb5cfce code=0x7ffc0000 [ 159.235738][ T27] audit: type=1326 audit(1773307033.904:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f414fb9c799 code=0x7ffc0000 [ 159.284425][ T27] audit: type=1326 audit(1773307033.904:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 159.307550][ T27] audit: type=1326 audit(1773307033.904:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 161.721710][ T27] kauditd_printk_skb: 2032 callbacks suppressed [ 161.721727][ T27] audit: type=1326 audit(1773307036.494:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 161.754767][ T27] audit: type=1326 audit(1773307036.514:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 161.801492][ T27] audit: type=1326 audit(1773307036.514:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 161.849654][ T27] audit: type=1326 audit(1773307036.514:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 161.895836][ T27] audit: type=1326 audit(1773307036.514:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 161.919189][ T27] audit: type=1326 audit(1773307036.514:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 161.941540][ T27] audit: type=1326 audit(1773307036.514:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 161.967950][ T27] audit: type=1326 audit(1773307036.514:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 161.993540][ T27] audit: type=1326 audit(1773307036.514:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 162.016358][ T27] audit: type=1326 audit(1773307036.514:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414fb9c799 code=0x50000 [ 162.415610][ T6808] loop3: detected capacity change from 0 to 512 [ 162.423101][ T6808] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.455645][ T6808] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 162.465084][ T6808] EXT4-fs (loop3): external journal has bad superblock [ 162.659605][ T6774] tipc: Started in network mode [ 162.665210][ T6774] tipc: Node identity a27025cbf467, cluster identity 4711 [ 162.674050][ T6774] tipc: Enabled bearer , priority 0 [ 162.683599][ T6776] syzkaller0: entered promiscuous mode [ 162.690914][ T6776] syzkaller0: entered allmulticast mode [ 162.709783][ T6779] netlink: 44 bytes leftover after parsing attributes in process `syz.1.231'. [ 162.731011][ T6780] tipc: Resetting bearer [ 162.739688][ T6773] tipc: Resetting bearer [ 162.772970][ T6773] tipc: Disabling bearer [ 162.823480][ T6807] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 162.981689][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 164.036280][ T6822] loop0: detected capacity change from 0 to 1024 [ 164.056321][ T6822] EXT4-fs: Ignoring removed orlov option [ 164.094326][ T6822] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 164.147109][ T6822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.087501][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.234139][ T6832] tmpfs: Bad value for 'mpol' [ 166.466725][ T6836] syzkaller0: entered promiscuous mode [ 166.499888][ T6836] syzkaller0: entered allmulticast mode [ 166.845712][ T6848] loop2: detected capacity change from 0 to 1024 [ 166.907082][ T6848] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.000019][ T6848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.112538][ T6848] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 167.160040][ T6848] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 167.189185][ T6848] EXT4-fs (loop2): This should not happen!! Data will be lost [ 167.189185][ T6848] [ 167.212099][ T6848] EXT4-fs (loop2): Total free blocks count 0 [ 167.219583][ T6848] EXT4-fs (loop2): Free/Dirty block details [ 167.225983][ T6848] EXT4-fs (loop2): free_blocks=20480 [ 167.238880][ T6848] EXT4-fs (loop2): dirty_blocks=80 [ 167.247228][ T6848] EXT4-fs (loop2): Block reservation details [ 167.259915][ T6848] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 167.270492][ T6858] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 167.275274][ T6860] loop3: detected capacity change from 0 to 1024 [ 167.287873][ T6860] EXT4-fs: Ignoring removed orlov option [ 167.314635][ T6860] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 167.364854][ T6860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.820518][ T6867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.254'. [ 168.679502][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.906425][ T6874] syzkaller0: entered promiscuous mode [ 168.909529][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 168.940867][ T6874] syzkaller0: entered allmulticast mode [ 168.947237][ T6877] netlink: 136 bytes leftover after parsing attributes in process `syz.3.257'. [ 169.084116][ T6881] loop3: detected capacity change from 0 to 128 [ 169.114936][ T6881] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.143035][ T6881] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.297455][ T5783] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.429483][ T6887] loop3: detected capacity change from 0 to 1024 [ 169.443732][ T6885] tipc: Started in network mode [ 169.457563][ T6887] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.470274][ T6885] tipc: Node identity 62c45ffcebab, cluster identity 4711 [ 169.501048][ T6885] tipc: Enabled bearer , priority 0 [ 169.523211][ T6887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.523493][ T6888] syzkaller0: entered promiscuous mode [ 169.556521][ T6888] syzkaller0: entered allmulticast mode [ 169.569947][ T6887] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 169.595060][ T6887] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.609068][ T6887] EXT4-fs (loop3): This should not happen!! Data will be lost [ 169.609068][ T6887] [ 169.618895][ T6887] EXT4-fs (loop3): Total free blocks count 0 [ 169.626423][ T6887] EXT4-fs (loop3): Free/Dirty block details [ 169.633876][ T6887] EXT4-fs (loop3): free_blocks=20480 [ 169.640740][ T6887] EXT4-fs (loop3): dirty_blocks=80 [ 169.646132][ T6887] EXT4-fs (loop3): Block reservation details [ 169.654157][ T6887] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 169.677147][ T6891] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 169.719825][ T6885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.262'. [ 169.744673][ T6885] tipc: Resetting bearer [ 169.854359][ T6884] tipc: Resetting bearer [ 170.693493][ T6884] tipc: Disabling bearer [ 170.717002][ T5812] tipc: Node number set to 2305777660 [ 171.079183][ T6908] loop3: detected capacity change from 0 to 1024 [ 171.118066][ T6908] EXT4-fs: Ignoring removed bh option [ 171.139365][ T6908] EXT4-fs: Ignoring removed oldalloc option [ 171.161881][ T6908] EXT4-fs: Ignoring removed nobh option [ 171.169457][ T6910] loop1: detected capacity change from 0 to 512 [ 171.178222][ T6908] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.233194][ T6908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.250355][ T6910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.275362][ T6910] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.310868][ T6910] capability: warning: `syz.1.269' uses deprecated v2 capabilities in a way that may be insecure [ 171.357598][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.396477][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.580147][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 171.592813][ T6917] syzkaller0: entered promiscuous mode [ 171.604978][ T6917] syzkaller0: entered allmulticast mode [ 171.608135][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 172.904440][ T6928] tipc: Started in network mode [ 172.930593][ T6928] tipc: Node identity 5af5d8336dd, cluster identity 4711 [ 172.958846][ T6928] tipc: Enabled bearer , priority 0 [ 172.991996][ T6928] syzkaller0: entered promiscuous mode [ 173.021544][ T6928] syzkaller0: entered allmulticast mode [ 173.108135][ T6928] netlink: 44 bytes leftover after parsing attributes in process `syz.3.275'. [ 173.152264][ T6928] tipc: Resetting bearer [ 173.204335][ T6927] tipc: Resetting bearer [ 173.312696][ T6927] tipc: Disabling bearer [ 173.701856][ T6939] netlink: 277 bytes leftover after parsing attributes in process `syz.3.279'. [ 174.688074][ T6945] syzkaller0: entered promiscuous mode [ 174.701638][ T6945] syzkaller0: entered allmulticast mode [ 181.038593][ T6999] syzkaller0: entered promiscuous mode [ 181.045091][ T6999] syzkaller0: entered allmulticast mode [ 181.141788][ T5803] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 181.387143][ T5803] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 181.421954][ T5803] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.456381][ T5803] usb 3-1: config 1 interface 0 has no altsetting 0 [ 181.480824][ T5803] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.496153][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.514690][ T5803] usb 3-1: Product: п [ 181.518885][ T5803] usb 3-1: Manufacturer: ■ᜳ䏺卞ؾ꟨䎱搊ꪎ᦯⦅魡귪ㆽ햊镃뷊〨拥䏞←ﮞ鹑ﶅ蒉礍୅챱핟匞亏⌾漬煥菨ϝ話급 [ 181.561769][ T5803] usb 3-1: SerialNumber:   [ 181.607139][ T6996] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.918631][ T6996] loop2: detected capacity change from 0 to 1024 [ 181.954208][ T6996] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 181.992655][ T6996] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 182.013180][ T6996] EXT4-fs (loop2): invalid journal inode [ 182.019270][ T6996] EXT4-fs (loop2): can't get journal size [ 182.042097][ T6996] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #2: comm syz.2.300: blocks 3-3 from inode overlap system zone [ 182.075277][ T6996] EXT4-fs (loop2): failed to initialize system zone (-117) [ 182.103529][ T6996] EXT4-fs (loop2): mount failed [ 182.174888][ T5866] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.154193][ T7018] loop0: detected capacity change from 0 to 512 [ 183.167762][ T7018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.253090][ T7018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.296138][ T7018] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.362400][ T7018] __quota_error: 61 callbacks suppressed [ 183.362419][ T7018] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 183.388645][ T7018] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 183.398473][ T7018] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.303: Failed to acquire dquot type 1 [ 183.486293][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.788540][ T7025] loop0: detected capacity change from 0 to 164 [ 185.102307][ T5803] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 185.219206][ T5803] usb 3-1: USB disconnect, device number 2 [ 186.487462][ T7053] loop3: detected capacity change from 0 to 164 [ 186.569578][ T7053] syzkaller0: entered promiscuous mode [ 186.588492][ T7053] syzkaller0: entered allmulticast mode [ 186.755706][ T7041] syz.1.307: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 186.805979][ T7041] CPU: 0 PID: 7041 Comm: syz.1.307 Not tainted syzkaller #0 [ 186.813369][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.823495][ T7041] Call Trace: [ 186.826845][ T7041] [ 186.829838][ T7041] dump_stack_lvl+0x18c/0x250 [ 186.834603][ T7041] ? show_regs_print_info+0x20/0x20 [ 186.839876][ T7041] ? load_image+0x400/0x400 [ 186.844447][ T7041] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 186.850927][ T7041] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 186.857502][ T7041] warn_alloc+0x246/0x340 [ 186.862099][ T7041] ? zone_watermark_ok_safe+0x230/0x230 [ 186.867791][ T7041] ? _raw_spin_unlock+0x28/0x40 [ 186.872712][ T7041] ? netlink_rcv_skb+0x241/0x4d0 [ 186.877731][ T7041] __vmalloc_node_range+0x662/0x1330 [ 186.883088][ T7041] ? __asan_memset+0x22/0x40 [ 186.887850][ T7041] ? free_vm_area+0x50/0x50 [ 186.892420][ T7041] ? kvmalloc_node+0x70/0x180 [ 186.897160][ T7041] ? rcu_is_watching+0x15/0xb0 [ 186.902070][ T7041] ? kvmalloc_node+0x70/0x180 [ 186.907058][ T7041] ? trace_kmalloc+0x1f/0x90 [ 186.907626][ T7055] syzkaller0: entered promiscuous mode [ 186.911697][ T7041] kvmalloc_node+0x13f/0x180 [ 186.911769][ T7041] ? hash_netport4_resize+0x232/0x1b40 [ 186.911799][ T7041] hash_netport4_resize+0x232/0x1b40 [ 186.911823][ T7041] ? hash_netport4_uadt+0xc99/0xf30 [ 186.911854][ T7041] ? hash_netport4_uadt+0xf30/0xf30 [ 186.911880][ T7041] ? hash_netport4_kadt+0x590/0x590 [ 186.911915][ T7041] ? _local_bh_enable+0xa0/0xa0 [ 186.911949][ T7041] call_ad+0x454/0xb40 [ 186.911980][ T7041] ? ip_set_ad+0x9c0/0x9c0 [ 186.928300][ T7055] syzkaller0: entered allmulticast mode [ 186.932929][ T7041] ? __nla_parse+0x40/0x50 [ 186.932963][ T7041] ip_set_ad+0x81a/0x9c0 [ 186.932998][ T7041] ? ip_set_dump_done+0x1e0/0x1e0 [ 186.981522][ T7041] ? rcu_is_watching+0x15/0xb0 [ 186.986387][ T7041] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 186.991465][ T7041] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.997754][ T7041] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 187.003021][ T7041] ? nfnetlink_unbind+0x160/0x160 [ 187.008116][ T7041] ? __dev_queue_xmit+0x19a3/0x3660 [ 187.013348][ T7041] ? __netlink_deliver_tap+0x5ab/0x830 [ 187.018849][ T7041] ? netlink_deliver_tap+0x19c/0x1b0 [ 187.024175][ T7041] ? netlink_unicast+0x72c/0x8d0 [ 187.029159][ T7041] ? netlink_sendmsg+0x8d0/0xbf0 [ 187.034140][ T7041] ? ____sys_sendmsg+0x5ba/0x960 [ 187.039113][ T7041] ? ___sys_sendmsg+0x2a6/0x360 [ 187.043996][ T7041] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 187.049052][ T7041] ? do_syscall_64+0x55/0xa0 [ 187.053701][ T7041] netlink_rcv_skb+0x241/0x4d0 [ 187.058517][ T7041] ? nfnetlink_unbind+0x160/0x160 [ 187.063586][ T7041] ? netlink_ack+0x1180/0x1180 [ 187.068489][ T7041] ? apparmor_capable+0x137/0x1a0 [ 187.073557][ T7041] ? bpf_lsm_capable+0x9/0x10 [ 187.078278][ T7041] ? security_capable+0x89/0xb0 [ 187.083173][ T7041] nfnetlink_rcv+0x2c9/0x24a0 [ 187.087894][ T7041] ? __local_bh_enable_ip+0x13a/0x1c0 [ 187.093298][ T7041] ? lockdep_hardirqs_on+0x98/0x150 [ 187.098533][ T7041] ? __local_bh_enable_ip+0x13a/0x1c0 [ 187.103933][ T7041] ? _local_bh_enable+0xa0/0xa0 [ 187.108814][ T7041] ? __dev_queue_xmit+0x265/0x3660 [ 187.113963][ T7041] ? __dev_queue_xmit+0x265/0x3660 [ 187.119209][ T7041] ? __dev_queue_xmit+0x1b2c/0x3660 [ 187.124440][ T7041] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 187.130032][ T7041] ? __dev_queue_xmit+0x265/0x3660 [ 187.135198][ T7041] ? ref_tracker_free+0x690/0x840 [ 187.140347][ T7041] ? refcount_inc+0x70/0x70 [ 187.144895][ T7041] ? __asan_memcpy+0x40/0x70 [ 187.149526][ T7041] ? __skb_clone+0x63/0x790 [ 187.154074][ T7041] ? __skb_clone+0x480/0x790 [ 187.158707][ T7041] ? __netlink_deliver_tap+0x7e8/0x830 [ 187.164211][ T7041] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.169547][ T7041] ? __lock_acquire+0x7d40/0x7d40 [ 187.174658][ T7041] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.179903][ T7041] netlink_unicast+0x751/0x8d0 [ 187.184722][ T7041] netlink_sendmsg+0x8d0/0xbf0 [ 187.189537][ T7041] ? netlink_getsockopt+0x590/0x590 [ 187.194780][ T7041] ? aa_sock_msg_perm+0x94/0x150 [ 187.199757][ T7041] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 187.205081][ T7041] ? security_socket_sendmsg+0x80/0xa0 [ 187.210613][ T7041] ? netlink_getsockopt+0x590/0x590 [ 187.215901][ T7041] ____sys_sendmsg+0x5ba/0x960 [ 187.220751][ T7041] ? __asan_memset+0x22/0x40 [ 187.225480][ T7041] ? __sys_sendmsg_sock+0x30/0x30 [ 187.230568][ T7041] ? __import_iovec+0x5f2/0x850 [ 187.235757][ T7041] ? import_iovec+0x73/0xa0 [ 187.240297][ T7041] ___sys_sendmsg+0x2a6/0x360 [ 187.245023][ T7041] ? __sys_sendmsg+0x2a0/0x2a0 [ 187.249863][ T7041] __se_sys_sendmsg+0x1c2/0x2b0 [ 187.254755][ T7041] ? __x64_sys_sendmsg+0x80/0x80 [ 187.259756][ T7041] ? lockdep_hardirqs_on+0x98/0x150 [ 187.265176][ T7041] do_syscall_64+0x55/0xa0 [ 187.269652][ T7041] ? clear_bhb_loop+0x40/0x90 [ 187.274367][ T7041] ? clear_bhb_loop+0x40/0x90 [ 187.279185][ T7041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.285128][ T7041] RIP: 0033:0x7f6300b9c799 [ 187.289713][ T7041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.309709][ T7041] RSP: 002b:00007f6301b01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.318167][ T7041] RAX: ffffffffffffffda RBX: 00007f6300e15fa0 RCX: 00007f6300b9c799 [ 187.326262][ T7041] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000006 [ 187.334315][ T7041] RBP: 00007f6300c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 187.342406][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.350410][ T7041] R13: 00007f6300e16038 R14: 00007f6300e15fa0 R15: 00007ffed581ea48 [ 187.358426][ T7041] [ 187.381828][ T7041] Mem-Info: [ 187.385039][ T7041] active_anon:8665 inactive_anon:0 isolated_anon:0 [ 187.385039][ T7041] active_file:1177 inactive_file:40000 isolated_file:0 [ 187.385039][ T7041] unevictable:768 dirty:67 writeback:0 [ 187.385039][ T7041] slab_reclaimable:9986 slab_unreclaimable:94198 [ 187.385039][ T7041] mapped:27374 shmem:4252 pagetables:585 [ 187.385039][ T7041] sec_pagetables:0 bounce:0 [ 187.385039][ T7041] kernel_misc_reclaimable:0 [ 187.385039][ T7041] free:1360005 free_pcp:10689 free_cma:0 [ 187.432415][ T7041] Node 0 active_anon:34612kB inactive_anon:0kB active_file:4708kB inactive_file:159796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109440kB dirty:268kB writeback:0kB shmem:15472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10576kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no [ 187.466187][ T7041] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 187.600237][ T7041] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 187.650576][ T7041] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 187.660710][ T7041] Node 0 DMA32 free:1531176kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34576kB inactive_anon:0kB active_file:4708kB inactive_file:158972kB unevictable:1536kB writepending:268kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:21688kB local_pcp:10424kB free_cma:0kB [ 187.714001][ T7041] lowmem_reserve[]: 0 0 0 0 0 [ 187.728317][ T7041] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 187.776234][ T7041] lowmem_reserve[]: 0 0 0 0 0 [ 187.789169][ T7041] Node 1 Normal free:3893484kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21536kB local_pcp:15584kB free_cma:0kB [ 187.838315][ T7041] lowmem_reserve[]: 0 0 0 0 0 [ 187.843840][ T7041] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 187.857708][ T7041] Node 0 DMA32: 599*4kB (UE) 910*8kB (UE) 196*16kB (UME) 225*32kB (UME) 102*64kB (UME) 89*128kB (UME) 38*256kB (UME) 19*512kB (UME) 7*1024kB (M) 4*2048kB (UM) 356*4096kB (M) = 1530924kB [ 187.900873][ T7041] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 187.922734][ T7041] Node 1 Normal: 249*4kB (UME) 53*8kB (UME) 40*16kB (UME) 67*32kB (UME) 20*64kB (UE) 5*128kB (UM) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3893484kB [ 187.941707][ T7041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 187.970538][ T7041] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 187.996606][ T7041] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.007618][ T7041] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.022905][ T7041] 42553 total pagecache pages [ 188.027719][ T7041] 0 pages in swap cache [ 188.032092][ T7041] Free swap = 124996kB [ 188.036343][ T7041] Total swap = 124996kB [ 188.040543][ T7041] 2097051 pages RAM [ 188.044578][ T7041] 0 pages HighMem/MovableOnly [ 188.049723][ T7041] 416924 pages reserved [ 188.054071][ T7041] 0 pages cma reserved [ 188.126989][ T7061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.450310][ T7068] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 190.081198][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 190.090310][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.230700][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.413780][ T7084] loop0: detected capacity change from 0 to 1024 [ 190.441290][ T7084] EXT4-fs: Ignoring removed orlov option [ 190.489025][ T7084] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 190.499713][ T5810] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 190.655990][ T7084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.706148][ T5810] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 191.005895][ T5810] usb 4-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.411473][ T5810] usb 4-1: config 1 interface 0 has no altsetting 0 [ 191.431104][ T5810] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.466572][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.478829][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.506842][ T5810] usb 4-1: Product: п [ 191.511018][ T5810] usb 4-1: Manufacturer: ■ᜳ䏺卞ؾ꟨䎱搊ꪎ᦯⦅魡귪ㆽ햊镃뷊〨拥䏞←ﮞ鹑ﶅ蒉礍୅챱핟匞亏⌾漬煥菨ϝ話급 [ 191.547163][ T5810] usb 4-1: SerialNumber:   [ 191.789383][ T7080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.856365][ T7103] netlink: 52 bytes leftover after parsing attributes in process `syz.0.326'. [ 191.869483][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.877381][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.969734][ T7105] tipc: Enabled bearer , priority 0 [ 191.998821][ T7105] syzkaller0: entered promiscuous mode [ 192.016095][ T7105] syzkaller0: entered allmulticast mode [ 192.084933][ T7080] loop3: detected capacity change from 0 to 1024 [ 192.113972][ T7080] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 192.142878][ T7080] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 192.153439][ T7107] tipc: Resetting bearer [ 192.189602][ T7104] tipc: Resetting bearer [ 192.199763][ T7080] EXT4-fs (loop3): invalid journal inode [ 192.241532][ T7080] EXT4-fs (loop3): can't get journal size [ 192.276823][ T7080] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #2: comm syz.3.317: blocks 3-3 from inode overlap system zone [ 192.291643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 192.300469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 192.310020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.357849][ T7104] tipc: Disabling bearer [ 192.392150][ T7080] EXT4-fs (loop3): failed to initialize system zone (-117) [ 192.406404][ T7080] EXT4-fs (loop3): mount failed [ 192.915552][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 192.931845][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.105304][ T7118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.307523][ T5810] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 193.338050][ T5810] usb 4-1: USB disconnect, device number 2 [ 193.634803][ T7124] loop0: detected capacity change from 0 to 1024 [ 193.678449][ T7124] EXT4-fs: Ignoring removed orlov option [ 193.712109][ T7124] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 193.833276][ T7124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.528530][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.782499][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.789074][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.180619][ T7142] tipc: Started in network mode [ 195.191542][ T7142] tipc: Node identity ded1dac36c2b, cluster identity 4711 [ 195.222119][ T7142] tipc: Enabled bearer , priority 0 [ 195.230397][ T7142] syzkaller0: entered promiscuous mode [ 195.271505][ T7142] syzkaller0: entered allmulticast mode [ 195.310795][ T7142] netlink: 44 bytes leftover after parsing attributes in process `syz.0.338'. [ 195.373316][ T7142] tipc: Resetting bearer [ 195.378104][ T7147] loop3: detected capacity change from 0 to 764 [ 195.391973][ T7141] tipc: Resetting bearer [ 195.451822][ T7141] tipc: Disabling bearer [ 195.723159][ T7150] loop1: detected capacity change from 0 to 1024 [ 195.923363][ T7150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.041530][ T7150] ================================================================== [ 196.049866][ T7150] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 196.057661][ T7150] Read of size 18446744073709551588 at addr ffff88805cd9c040 by task syz.1.340/7150 [ 196.067070][ T7150] [ 196.069498][ T7150] CPU: 0 PID: 7150 Comm: syz.1.340 Not tainted syzkaller #0 [ 196.076922][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.087028][ T7150] Call Trace: [ 196.090368][ T7150] [ 196.093346][ T7150] dump_stack_lvl+0x18c/0x250 [ 196.098120][ T7150] ? read_lock_is_recursive+0x20/0x20 [ 196.103569][ T7150] ? show_regs_print_info+0x20/0x20 [ 196.108826][ T7150] ? load_image+0x400/0x400 [ 196.113423][ T7150] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 196.118956][ T7150] ? __virt_addr_valid+0x18c/0x540 [ 196.124136][ T7150] ? __virt_addr_valid+0x469/0x540 [ 196.129306][ T7150] print_report+0xa8/0x210 [ 196.133791][ T7150] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 196.139575][ T7150] kasan_report+0x117/0x150 [ 196.144223][ T7150] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 196.149827][ T7150] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 196.155447][ T7150] kasan_check_range+0x241/0x290 [ 196.160535][ T7150] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 196.166116][ T7150] __asan_memmove+0x29/0x70 [ 196.170677][ T7150] ext4_xattr_set_entry+0x94b/0x1e90 [ 196.176038][ T7150] ext4_xattr_block_set+0xae8/0x32b0 [ 196.181382][ T7150] ? ext4_destroy_inode+0x200/0x200 [ 196.186672][ T7150] ? proc_nr_inodes+0x230/0x230 [ 196.191630][ T7150] ? do_raw_spin_unlock+0x121/0x230 [ 196.196894][ T7150] ? _raw_spin_unlock+0x28/0x40 [ 196.201807][ T7150] ? ext4_xattr_block_find+0x350/0x350 [ 196.207331][ T7150] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 196.212760][ T7150] ext4_xattr_set_handle+0xe2e/0x14c0 [ 196.218213][ T7150] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 196.224269][ T7150] ? __ext4_journal_start_sb+0x259/0x560 [ 196.229964][ T7150] ext4_xattr_set+0x252/0x340 [ 196.234709][ T7150] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 196.240307][ T7150] ? evm_protected_xattr_common+0x170/0x190 [ 196.246363][ T7150] ? ext4_xattr_security_get+0x40/0x40 [ 196.251880][ T7150] __vfs_setxattr+0x431/0x470 [ 196.256627][ T7150] __vfs_setxattr_noperm+0x12d/0x5e0 [ 196.261966][ T7150] vfs_setxattr+0x16b/0x2f0 [ 196.266612][ T7150] ? xattr_permission+0x470/0x470 [ 196.271685][ T7150] ? __mnt_want_write+0x223/0x2a0 [ 196.276762][ T7150] ? path_setxattr+0x3a1/0x5d0 [ 196.281584][ T7150] path_setxattr+0x3f3/0x5d0 [ 196.286234][ T7150] ? simple_xattrs_free+0x150/0x150 [ 196.291543][ T7150] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 196.297588][ T7150] ? lock_chain_count+0x20/0x20 [ 196.302490][ T7150] __x64_sys_setxattr+0xbb/0xd0 [ 196.307403][ T7150] do_syscall_64+0x55/0xa0 [ 196.311874][ T7150] ? clear_bhb_loop+0x40/0x90 [ 196.316609][ T7150] ? clear_bhb_loop+0x40/0x90 [ 196.321356][ T7150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.327291][ T7150] RIP: 0033:0x7f6300b9c799 [ 196.331755][ T7150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.351405][ T7150] RSP: 002b:00007f6301b01028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 196.359874][ T7150] RAX: ffffffffffffffda RBX: 00007f6300e15fa0 RCX: 00007f6300b9c799 [ 196.367907][ T7150] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 196.375929][ T7150] RBP: 00007f6300c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 196.383956][ T7150] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 196.392015][ T7150] R13: 00007f6300e16038 R14: 00007f6300e15fa0 R15: 00007ffed581ea48 [ 196.400044][ T7150] [ 196.403101][ T7150] [ 196.405458][ T7150] Allocated by task 7150: [ 196.409812][ T7150] kasan_set_track+0x4e/0x70 [ 196.414448][ T7150] __kasan_kmalloc+0x8f/0xa0 [ 196.419082][ T7150] __kmalloc_node_track_caller+0xb2/0x230 [ 196.424857][ T7150] kmemdup+0x2b/0x70 [ 196.428829][ T7150] ext4_xattr_block_set+0x9ea/0x32b0 [ 196.434163][ T7150] ext4_xattr_set_handle+0xe2e/0x14c0 [ 196.439595][ T7150] ext4_xattr_set+0x252/0x340 [ 196.444338][ T7150] __vfs_setxattr+0x431/0x470 [ 196.449073][ T7150] __vfs_setxattr_noperm+0x12d/0x5e0 [ 196.454672][ T7150] vfs_setxattr+0x16b/0x2f0 [ 196.459220][ T7150] path_setxattr+0x3f3/0x5d0 [ 196.463866][ T7150] __x64_sys_setxattr+0xbb/0xd0 [ 196.468766][ T7150] do_syscall_64+0x55/0xa0 [ 196.473252][ T7150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.479202][ T7150] [ 196.481564][ T7150] Last potentially related work creation: [ 196.487319][ T7150] kasan_save_stack+0x3e/0x60 [ 196.492049][ T7150] __kasan_record_aux_stack+0xaf/0xc0 [ 196.497469][ T7150] kvfree_call_rcu+0xee/0x790 [ 196.502197][ T7150] neigh_remove_one+0x5f1/0x700 [ 196.507267][ T7150] ___neigh_create+0x467/0x2440 [ 196.512166][ T7150] ip6_finish_output2+0x1581/0x1630 [ 196.517403][ T7150] ndisc_send_skb+0xc26/0x14f0 [ 196.522207][ T7150] addrconf_rs_timer+0x2d5/0x630 [ 196.527208][ T7150] call_timer_fn+0x189/0x540 [ 196.531932][ T7150] __run_timers+0x542/0x800 [ 196.536479][ T7150] run_timer_softirq+0x67/0xf0 [ 196.541287][ T7150] handle_softirqs+0x280/0x820 [ 196.546092][ T7150] __irq_exit_rcu+0xd3/0x190 [ 196.550725][ T7150] irq_exit_rcu+0x9/0x20 [ 196.555013][ T7150] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 196.560698][ T7150] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.566733][ T7150] [ 196.569091][ T7150] The buggy address belongs to the object at ffff88805cd9c000 [ 196.569091][ T7150] which belongs to the cache kmalloc-1k of size 1024 [ 196.583188][ T7150] The buggy address is located 64 bytes inside of [ 196.583188][ T7150] 1024-byte region [ffff88805cd9c000, ffff88805cd9c400) [ 196.596692][ T7150] [ 196.599058][ T7150] The buggy address belongs to the physical page: [ 196.605525][ T7150] page:ffffea0001736600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cd98 [ 196.615821][ T7150] head:ffffea0001736600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 196.624803][ T7150] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 196.632828][ T7150] page_type: 0xffffffff() [ 196.637195][ T7150] raw: 00fff00000000840 ffff888017c41dc0 dead000000000100 dead000000000122 [ 196.645833][ T7150] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 196.654468][ T7150] page dumped because: kasan: bad access detected [ 196.660927][ T7150] page_owner tracks the page as allocated [ 196.666678][ T7150] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3465, tgid 3465 (kworker/u4:11), ts 90646615734, free_ts 30757745941 [ 196.686276][ T7150] post_alloc_hook+0x1c1/0x200 [ 196.691107][ T7150] get_page_from_freelist+0x1951/0x19e0 [ 196.696715][ T7150] __alloc_pages+0x1f0/0x460 [ 196.701357][ T7150] alloc_slab_page+0x5d/0x160 [ 196.706094][ T7150] new_slab+0x87/0x2d0 [ 196.710238][ T7150] ___slab_alloc+0xc5d/0x12f0 [ 196.714987][ T7150] __kmem_cache_alloc_node+0x19e/0x250 [ 196.720519][ T7150] __kmalloc+0xa4/0x230 [ 196.724741][ T7150] ___neigh_create+0x6d2/0x2440 [ 196.729654][ T7150] ip6_finish_output2+0x1581/0x1630 [ 196.735051][ T7150] ndisc_send_skb+0xc26/0x14f0 [ 196.739867][ T7150] ndisc_send_ns+0xd8/0x160 [ 196.744413][ T7150] addrconf_dad_work+0xa51/0x1530 [ 196.749492][ T7150] process_scheduled_works+0xa5d/0x15d0 [ 196.755085][ T7150] worker_thread+0xa55/0xfc0 [ 196.759824][ T7150] kthread+0x2fa/0x390 [ 196.763936][ T7150] page last free stack trace: [ 196.768640][ T7150] free_unref_page_prepare+0x7b2/0x8c0 [ 196.774161][ T7150] free_unref_page+0x32/0x2e0 [ 196.778880][ T7150] free_contig_range+0xa1/0x150 [ 196.783785][ T7150] destroy_args+0x80/0x850 [ 196.788249][ T7150] debug_vm_pgtable+0x411/0x440 [ 196.793188][ T7150] do_one_initcall+0x242/0x790 [ 196.798010][ T7150] do_initcall_level+0x137/0x1f0 [ 196.803006][ T7150] do_initcalls+0x69/0xd0 [ 196.807384][ T7150] kernel_init_freeable+0x3ed/0x580 [ 196.812627][ T7150] kernel_init+0x1d/0x1c0 [ 196.817270][ T7150] ret_from_fork+0x48/0x80 [ 196.821753][ T7150] ret_from_fork_asm+0x11/0x20 [ 196.826580][ T7150] [ 196.828951][ T7150] Memory state around the buggy address: [ 196.834617][ T7150] ffff88805cd9bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 196.842714][ T7150] ffff88805cd9bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 196.850820][ T7150] >ffff88805cd9c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 196.858936][ T7150] ^ [ 196.865130][ T7150] ffff88805cd9c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 196.873493][ T7150] ffff88805cd9c100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 196.881883][ T7150] ================================================================== [ 196.938003][ T7150] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 196.945351][ T7150] CPU: 0 PID: 7150 Comm: syz.1.340 Not tainted syzkaller #0 [ 196.952675][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.962764][ T7150] Call Trace: [ 196.966076][ T7150] [ 196.969035][ T7150] dump_stack_lvl+0x18c/0x250 [ 196.973927][ T7150] ? show_regs_print_info+0x20/0x20 [ 196.979183][ T7150] ? load_image+0x400/0x400 [ 196.983740][ T7150] panic+0x2dc/0x730 [ 196.987699][ T7150] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.993906][ T7150] ? bpf_jit_dump+0xd0/0xd0 [ 196.998456][ T7150] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 197.004486][ T7150] ? _raw_spin_unlock+0x40/0x40 [ 197.009386][ T7150] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 197.014900][ T7150] check_panic_on_warn+0x84/0xa0 [ 197.019877][ T7150] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 197.025376][ T7150] end_report+0x6f/0x130 [ 197.029653][ T7150] kasan_report+0x128/0x150 [ 197.034189][ T7150] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 197.039672][ T7150] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 197.045157][ T7150] kasan_check_range+0x241/0x290 [ 197.050133][ T7150] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 197.055619][ T7150] __asan_memmove+0x29/0x70 [ 197.060152][ T7150] ext4_xattr_set_entry+0x94b/0x1e90 [ 197.065486][ T7150] ext4_xattr_block_set+0xae8/0x32b0 [ 197.070800][ T7150] ? ext4_destroy_inode+0x200/0x200 [ 197.076035][ T7150] ? proc_nr_inodes+0x230/0x230 [ 197.080916][ T7150] ? do_raw_spin_unlock+0x121/0x230 [ 197.086143][ T7150] ? _raw_spin_unlock+0x28/0x40 [ 197.091044][ T7150] ? ext4_xattr_block_find+0x350/0x350 [ 197.096636][ T7150] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 197.102067][ T7150] ext4_xattr_set_handle+0xe2e/0x14c0 [ 197.107486][ T7150] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 197.113503][ T7150] ? __ext4_journal_start_sb+0x259/0x560 [ 197.119169][ T7150] ext4_xattr_set+0x252/0x340 [ 197.123892][ T7150] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 197.129497][ T7150] ? evm_protected_xattr_common+0x170/0x190 [ 197.135435][ T7150] ? ext4_xattr_security_get+0x40/0x40 [ 197.140921][ T7150] __vfs_setxattr+0x431/0x470 [ 197.145652][ T7150] __vfs_setxattr_noperm+0x12d/0x5e0 [ 197.150978][ T7150] vfs_setxattr+0x16b/0x2f0 [ 197.155524][ T7150] ? xattr_permission+0x470/0x470 [ 197.160577][ T7150] ? __mnt_want_write+0x223/0x2a0 [ 197.165670][ T7150] ? path_setxattr+0x3a1/0x5d0 [ 197.170470][ T7150] path_setxattr+0x3f3/0x5d0 [ 197.175098][ T7150] ? simple_xattrs_free+0x150/0x150 [ 197.180341][ T7150] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 197.186348][ T7150] ? lock_chain_count+0x20/0x20 [ 197.191224][ T7150] __x64_sys_setxattr+0xbb/0xd0 [ 197.196228][ T7150] do_syscall_64+0x55/0xa0 [ 197.200679][ T7150] ? clear_bhb_loop+0x40/0x90 [ 197.205390][ T7150] ? clear_bhb_loop+0x40/0x90 [ 197.210267][ T7150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.216630][ T7150] RIP: 0033:0x7f6300b9c799 [ 197.221085][ T7150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.240827][ T7150] RSP: 002b:00007f6301b01028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 197.249289][ T7150] RAX: ffffffffffffffda RBX: 00007f6300e15fa0 RCX: 00007f6300b9c799 [ 197.257300][ T7150] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 197.265337][ T7150] RBP: 00007f6300c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 197.273329][ T7150] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 197.281318][ T7150] R13: 00007f6300e16038 R14: 00007f6300e15fa0 R15: 00007ffed581ea48 [ 197.289323][ T7150] [ 197.292940][ T7150] Kernel Offset: disabled [ 197.297272][ T7150] Rebooting in 86400 seconds..