last executing test programs: 11.809252408s ago: executing program 2 (id=564): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 11.716172268s ago: executing program 2 (id=567): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(0x0, 0x32000, 0x150) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r3, 0x30b, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x24004804) 11.637431146s ago: executing program 2 (id=571): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e24, 0x9e, @rand_addr=' \x01\x00', 0x2}, {0xa, 0x4e24, 0xd560000, @mcast1}, 0xffffffffffffffff, {[0x2, 0x3, 0xb014, 0x6, 0x24c, 0x2, 0x7fffffff, 0x7]}}, 0x5c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 11.445794975s ago: executing program 1 (id=578): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000840)={0x3, "cd52b992af6488647171ce7426488620eb5df8b043c7e69bef96cb04790d24439c661967dfcaf79e569c8cad0f789de34cc6dd11da3d138eeee08aa2c81252825c90e810e89c3c36deb003f5e05a4988e887ca3e3d3aabb4256efc5c879a168fce6eef8e3a89865b2c15db9eff7a088ff01160f433648eb2d9de9280eb4de87673663108b94073691ce5615d875bad5abc2dc5949760f32a40d95e1b74caf7bbb85e9541b5d496010ddcdfa39d146cea225b50d234294709230f831eac95d13578c6b36b206ba34f460cd17b0f9f7067eb28af311a017e10ab4afbb096b29da41020e0e948f6b4f9be075bcb4d048bdb9ffc16834f80f982527d007e7069c7f277a14e8160a86b6136c8fef6c27f22eae75b4ad5a36110923b4a35dc4d66410b1776205cd8d2dffaca997ddb6ba8d229148baffc4561d2fde6be93bd8cca68f1d240661f9161f0cbfb7061b1cfcbc35922ae2179d51b96a34c8860cfce9c00b54f4de740c6205cdefbfa0adbd0b5b54e54da307ddb3d5592f7e190f8705822ba38ef663649e4bf9edfcd2988cd57b31df725faa34cfc84027a23aa77263f53e7d28495c096a5ed568c0bbc3c32dcf69010c4e0b232d2ac58efab9cdcb0cbd299398950709973829b32f44d3b49906dffcdd1ae5ca077e17f84e11474311f3cbb97c27f5e309624c73be79f6da9f9256aa743e19ed3d2d8ddd5d9c39c2103d87e"}) 11.445640855s ago: executing program 1 (id=579): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x9) r2 = dup(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x8000fffffffc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) 11.423403548s ago: executing program 1 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) ioprio_set$pid(0x3, 0x0, 0x0) 11.357803244s ago: executing program 1 (id=583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000064000000070000000c0000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 10.447922027s ago: executing program 4 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.31750145s ago: executing program 4 (id=602): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) 10.301124262s ago: executing program 3 (id=603): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61f, &(0x7f0000001680)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5) 10.209968261s ago: executing program 3 (id=604): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") socket(0x15, 0x80005, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 10.193244123s ago: executing program 3 (id=605): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x91, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r1) 10.167513635s ago: executing program 3 (id=606): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}}, 0x44090) 9.425988001s ago: executing program 4 (id=607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) 9.417241732s ago: executing program 4 (id=608): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x4, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f0000000600)={0x0, 0x7a120, 0x60, {0x3, 0x103}, 0x0, 0x9}) r8 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) fsetxattr$security_evm(r8, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[], 0xb, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) 495.91078ms ago: executing program 0 (id=609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x800) 438.076025ms ago: executing program 0 (id=610): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) 437.855185ms ago: executing program 0 (id=611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:*\t\n', @ANYRESDEC], 0xa) 263.947343ms ago: executing program 1 (id=612): unshare(0x2040400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000dd"]) 227.292197ms ago: executing program 2 (id=613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 158.082874ms ago: executing program 4 (id=614): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x9}}, {@session={'session', 0x3d, 0x4e}}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000000540)="$eJzs3M9uG8cZAPBZmbJVFXUDBI0dxYeN04MLNAxJ1zKEAAHY1VLahOISu6vAPhVBLQVCpbRIUqDxzRe3BfoSaW99gp76RkGPPaZYLuk4tkjLfxIaze8HSDPkfjvzzYrYD6QwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAiJLtTqcbhWE22r8Vz5dsF/neguOz8f71rWbBvCFE9U9YWwuXm6cuv/rN4Z/Vv66GS82jS2GtbtbC3R+/9sq7r7ZWZucvSOh7sDpN9vjg08WBUfg6+r6S+m7snnapW/FOOsrKPNvr76RxVubx1uZm553dQRkPsmFa3i6rdC9OWqFf5UV8LflF3N3auh6n7dv5/mhnuz9MZ0/efLvX6WzG77fHab8o89E777fLZDcbDrPRziSmPlzH3KxfiB9kVXzhwbW//qTcD4+OD7pnCeo9KajX6fW63V6vu3lj68bNTqf12BOdR4THIpb9omXZXtCdG57frP4DAAAA/7+iyWfs9fv/1cnn8FEYRF83lp0aAAAA8IJM/vN/6R9R/f4/hHA5RINsmHaWnRYAAADwAv3liXvsyvGF6N//CUWxGt0b3/p5dNKv4/on55rzzj06YjVoRReng0yazdb0UZJeiV5vgl6fRX81bQ6flEf0FAlszEkg/C1sNDEbd5r2zuxIM8v6IBum7SQfvtsN/f7FlSq9Vf3xk6M/hcny/zrauxiFw6Pjg/Zvf398Z5LLvXqUeyfTDRSP7aNYkMvnD/Y9PrLiL5uhVutcoum86828nYfXv9KcvvIUc94PbzQxb6w37fq3179Wz9ltz1v9evSTyWa651z5/XClibly7a26eevaKVn0Tsvi/HTwyW69h7N4pmtxhiyuL7gW4fDoQgjhTFn8aF4WAMtyOK8KPaj/j9bd1jPca7+p7u99h9X9fniziXlzY3JjbW2cckfvtKOw4I4+q7H3zj9rdftnuNrEXJ0Fn1pj3/vpZN7wymzepqpOiv+Xc+cth72o/kOd+/zkD+G1z764+/bRyUcfH3x88Emvd32z86tO50YvrE6WMW0WZArAD1dafBWtV3+OiiIb/6a7tdXtV7tpXOTJB3GRbe+kcTaq0iLZ7Y920nhc5FWe5MO682G2nZZxuT8e50UVD/IiHudldmvyzS/x9KtfyjT8clRlSTkepv0yjZN8VPWTKt7OyiQe7/96mJW7aTE5uRynSTbIkn6V5aO4le//PUnbcVym6UOB2XY6qrJBVndH8bjI9vrF7fjDfLi/l8bbaZkU2bjKmwFnc2WjQV7s9avsXGgv+2IDwEvisy/u/u6j4+ODT8/Y+e90c+DTnPX4rOeXsVQAYGpRlQYAAAAAAAAAAAAAAF4OT7v/7wV2VqcpLGd2nbN1wtpLkcZyOivPPU7rJVjF3M7sJnBqzPLuSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwz/8CAAD//3bhnLY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r0, &(0x7f0000000040)=""/225, 0xe1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) 157.956974ms ago: executing program 3 (id=615): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000600004014"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) 157.828344ms ago: executing program 0 (id=616): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, 0x0, 0x0) 111.079489ms ago: executing program 3 (id=617): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000800000000000003000000000000000000000000000000fd"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/281], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000041c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x240040c0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001f40)={0x0, 0x7}, 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 95.804821ms ago: executing program 1 (id=618): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 91.438671ms ago: executing program 0 (id=619): r0 = socket(0xa, 0x3, 0xff) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 90.433911ms ago: executing program 2 (id=620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x800) 820.18µs ago: executing program 0 (id=621): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffbff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 656.99µs ago: executing program 4 (id=622): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 2 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 29.704034][ T4307] cgroup: Unknown subsys name 'net' [ 29.938712][ T4307] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.185952][ T4307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.626370][ T4322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.631211][ T4324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.635474][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.638188][ T4331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.639591][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.641160][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.642458][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.643994][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.645395][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.646815][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.648039][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.649816][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.651009][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.654311][ T4331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.655745][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.658713][ T4324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.659913][ T4324] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.661042][ T4324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.662650][ T4324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.663795][ T4324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.665001][ T4324] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.666237][ T4324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.667397][ T4324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.668556][ T4324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.670387][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.672166][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.675044][ T4322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.677500][ T4320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.682612][ T4320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.684596][ T4322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.774874][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 31.795245][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 31.862678][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.863810][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.865341][ T4325] device bridge_slave_0 entered promiscuous mode [ 31.867607][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 31.870286][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.871416][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.872866][ T4326] device bridge_slave_0 entered promiscuous mode [ 31.875732][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 31.878232][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.879475][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.881094][ T4325] device bridge_slave_1 entered promiscuous mode [ 31.891748][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.892875][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.894264][ T4326] device bridge_slave_1 entered promiscuous mode [ 31.910783][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.912284][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 31.914660][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.919985][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.926894][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.943712][ T4326] team0: Port device team_slave_0 added [ 31.955180][ T4326] team0: Port device team_slave_1 added [ 31.960388][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.961498][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.962971][ T4318] device bridge_slave_0 entered promiscuous mode [ 31.971164][ T4325] team0: Port device team_slave_0 added [ 31.977806][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.978946][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.980308][ T4318] device bridge_slave_1 entered promiscuous mode [ 31.981790][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.982919][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.984340][ T4330] device bridge_slave_0 entered promiscuous mode [ 31.988263][ T4325] team0: Port device team_slave_1 added [ 31.989614][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.990796][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.994631][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.005143][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.007118][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.008210][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.011884][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.016966][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.018070][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.019664][ T4319] device bridge_slave_0 entered promiscuous mode [ 32.021436][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.022482][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.023932][ T4319] device bridge_slave_1 entered promiscuous mode [ 32.025333][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.027897][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.029324][ T4330] device bridge_slave_1 entered promiscuous mode [ 32.031409][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.041640][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.042681][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.047887][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.054841][ T4318] team0: Port device team_slave_0 added [ 32.057140][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.058210][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.061935][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.064161][ T4318] team0: Port device team_slave_1 added [ 32.079806][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.082133][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.126812][ T4326] device hsr_slave_0 entered promiscuous mode [ 32.166075][ T4326] device hsr_slave_1 entered promiscuous mode [ 32.206818][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.207943][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.211784][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.216111][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.218230][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.220057][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.221066][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.224903][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.248729][ T4319] team0: Port device team_slave_0 added [ 32.277060][ T4325] device hsr_slave_0 entered promiscuous mode [ 32.316071][ T4325] device hsr_slave_1 entered promiscuous mode [ 32.355950][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.357127][ T4325] Cannot create hsr debugfs directory [ 32.358991][ T4330] team0: Port device team_slave_0 added [ 32.360694][ T4330] team0: Port device team_slave_1 added [ 32.364497][ T4319] team0: Port device team_slave_1 added [ 32.416845][ T4318] device hsr_slave_0 entered promiscuous mode [ 32.456040][ T4318] device hsr_slave_1 entered promiscuous mode [ 32.495868][ T4318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.497133][ T4318] Cannot create hsr debugfs directory [ 32.504192][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.505344][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.509344][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.511550][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.512524][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.516794][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.518941][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.520063][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.524021][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.529957][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.531143][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.535131][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.616849][ T4319] device hsr_slave_0 entered promiscuous mode [ 32.655997][ T4319] device hsr_slave_1 entered promiscuous mode [ 32.705848][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.707136][ T4319] Cannot create hsr debugfs directory [ 32.746835][ T4330] device hsr_slave_0 entered promiscuous mode [ 32.785985][ T4330] device hsr_slave_1 entered promiscuous mode [ 32.835836][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.837075][ T4330] Cannot create hsr debugfs directory [ 32.904229][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.957031][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.004172][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.050855][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.121308][ T4325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.186868][ T4325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.227429][ T4325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.277826][ T4325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.328138][ T4318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.387132][ T4318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.437644][ T4318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.481486][ T4318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.550362][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.585034][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.637312][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.676023][ T4320] Bluetooth: hci3: command 0x0409 tx timeout [ 33.677086][ T4320] Bluetooth: hci2: command 0x0409 tx timeout [ 33.684759][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.732542][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.742500][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.747478][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.749748][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.751428][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.753030][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.754846][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.756135][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.757962][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 33.758993][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 33.759987][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 33.761505][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.770108][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.771750][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.772947][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.773887][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.775163][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.783241][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.822256][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.869238][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.872553][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.909722][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.911850][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.959698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.961750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.975445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.977420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.978929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.984721][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.991994][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.994399][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.997125][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.998835][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.000337][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.001563][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.003175][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.004683][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.006996][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.008139][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.009622][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.012722][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.014264][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.025905][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.027523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.029570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.031271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.032852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.040361][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.041932][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.045678][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.062114][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.065152][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.067387][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.081675][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.083165][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.085670][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.087970][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.091492][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.095256][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.102244][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.103796][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.107255][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.116373][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.117662][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.120389][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.123108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.124825][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.127844][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.129001][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.130796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.139057][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.141076][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.142708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.144065][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.145097][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.152874][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.157388][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.162012][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.163491][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.168795][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.170653][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.172210][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.173717][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.175177][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.176526][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.186594][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.193096][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.195718][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.197441][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.200051][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.205514][ T4318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.207753][ T4318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.212497][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.214044][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.215677][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.217765][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.219135][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.220641][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.222130][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.223225][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.224718][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.228800][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.230395][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.231774][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.233162][ T4402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.235379][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.237195][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.238712][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.240118][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.241314][ T4402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.249550][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.254584][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.255886][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.257134][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.262248][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.263509][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.267192][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.273939][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.275635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.277828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.280178][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.283439][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.290907][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.292567][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.300148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.301906][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.303600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.305140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.307331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.308855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.310607][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.312218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.313825][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.315288][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.319434][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.321035][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.322564][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.330630][ T4325] device veth0_vlan entered promiscuous mode [ 34.338132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.339794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.341153][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.342734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.344404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.349688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.353576][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.355488][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.361669][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.363074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.364556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.366521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.379560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.380859][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.387143][ T4325] device veth1_vlan entered promiscuous mode [ 34.397258][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.405136][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.407260][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.408809][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.415376][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.416891][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.420150][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.433163][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.434749][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.438088][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.440252][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.441747][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.444147][ T4326] device veth0_vlan entered promiscuous mode [ 34.448177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.449769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.455646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.457881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.462496][ T4325] device veth0_macvtap entered promiscuous mode [ 34.467172][ T4326] device veth1_vlan entered promiscuous mode [ 34.478119][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.481813][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.483494][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.484921][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.486807][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.488061][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.489988][ T4325] device veth1_macvtap entered promiscuous mode [ 34.502300][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.503838][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.505398][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.508428][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.509775][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.515736][ T4318] device veth0_vlan entered promiscuous mode [ 34.521705][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.523216][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.530383][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.537064][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.538654][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.540283][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.541942][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.545554][ T4326] device veth0_macvtap entered promiscuous mode [ 34.548614][ T4318] device veth1_vlan entered promiscuous mode [ 34.551182][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.554428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.556503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.557976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.559529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.561033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.562537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.564538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.569095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.570947][ T4326] device veth1_macvtap entered promiscuous mode [ 34.574668][ T4325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.577375][ T4325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.578686][ T4325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.580149][ T4325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.583969][ T4319] device veth0_vlan entered promiscuous mode [ 34.589140][ T4319] device veth1_vlan entered promiscuous mode [ 34.602158][ T4318] device veth0_macvtap entered promiscuous mode [ 34.604332][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.606079][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.607524][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.609531][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.610934][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.612474][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.613983][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.619078][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.620632][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.622593][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.628233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.629909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.631439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.633002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.635081][ T4318] device veth1_macvtap entered promiscuous mode [ 34.643812][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.645456][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.647956][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.650876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.652442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.653980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.657135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.658706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.660330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.661681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.687963][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.689427][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.690803][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.692090][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.699882][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.701436][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.703459][ T4330] device veth0_vlan entered promiscuous mode [ 34.708850][ T4319] device veth0_macvtap entered promiscuous mode [ 34.712046][ T4330] device veth1_vlan entered promiscuous mode [ 34.714822][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.716891][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.718159][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.721347][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.722905][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.724506][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.727527][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.734022][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.735584][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.740399][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.741988][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.743343][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.744991][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.750074][ T4319] device veth1_macvtap entered promiscuous mode [ 34.763367][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.764926][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.767100][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.770429][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.771989][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.773468][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.774962][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.780278][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.784693][ T4330] device veth0_macvtap entered promiscuous mode [ 34.788390][ T4330] device veth1_macvtap entered promiscuous mode [ 34.792740][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.794365][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.795605][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.800853][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.808179][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.808408][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.809416][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.810869][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.813355][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.814915][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.817197][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.818673][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.820616][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.823100][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.824564][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.826727][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.828393][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.829940][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.831419][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.833517][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.835140][ T4318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.837363][ T4318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.838708][ T4318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.839971][ T4318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.842734][ T328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.844042][ T328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.846917][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.848491][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.849900][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.851325][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.852781][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.854245][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.855688][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.860274][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.862414][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.863559][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.865162][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.866992][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.868497][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.869917][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.871436][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.872902][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.874478][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.889545][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.891035][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.892336][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.893663][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.897116][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.898426][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.900141][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.902683][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.904319][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.906599][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.908712][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.910280][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.911979][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.913435][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.914922][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.919661][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.926346][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.927945][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.953737][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.955225][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.964597][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.968516][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.011257][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.015199][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.018060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.019576][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.023348][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.025600][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.041015][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.042262][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.043118][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.043689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.044537][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.048280][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.067345][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.068525][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.070775][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.084778][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.086188][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.087775][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.109988][ T4437] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 35.109988][ T4437] The task syz.0.1 (4437) triggered the difference, watch for misbehavior. [ 35.155402][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 35.208713][ T4437] mmap: syz.0.1 (4437) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.216196][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 35.217595][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 35.248314][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 35.262177][ T4437] Zero length message leads to an empty skb [ 35.621903][ T27] audit: type=1326 audit(35.610:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.626336][ T27] audit: type=1326 audit(35.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.630998][ T27] audit: type=1326 audit(35.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.634368][ T27] audit: type=1326 audit(35.620:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.638406][ T27] audit: type=1326 audit(35.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.642444][ T27] audit: type=1326 audit(35.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.655127][ T27] audit: type=1326 audit(35.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.658794][ T27] audit: type=1326 audit(35.620:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.662253][ T27] audit: type=1326 audit(35.620:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.665709][ T27] audit: type=1326 audit(35.620:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4455 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 35.701489][ T4460] loop3: detected capacity change from 0 to 2048 [ 35.732951][ T4460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.741909][ T4460] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.746568][ T4460] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 35.748852][ T4460] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.748852][ T4460] [ 35.750477][ T4460] EXT4-fs (loop3): Total free blocks count 0 [ 35.751617][ T4460] EXT4-fs (loop3): Free/Dirty block details [ 35.752441][ T4460] EXT4-fs (loop3): free_blocks=2415919104 [ 35.753448][ T4460] EXT4-fs (loop3): dirty_blocks=32 [ 35.754252][ T4460] EXT4-fs (loop3): Block reservation details [ 35.755512][ T4460] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 35.757879][ T4320] Bluetooth: hci2: command 0x041b tx timeout [ 35.758826][ T4320] Bluetooth: hci3: command 0x041b tx timeout [ 35.776103][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 35.837761][ T4328] Bluetooth: hci1: command 0x041b tx timeout [ 35.838799][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 35.839751][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 35.880983][ T4471] netlink: '^]'': attribute type 2 has an invalid length. [ 35.882421][ T4471] netlink: 199792 bytes leftover after parsing attributes in process `^]''. [ 35.963021][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 36.232349][ T4489] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 36.280128][ T4493] netlink: 'syz.4.24': attribute type 11 has an invalid length. [ 36.281397][ T4493] netlink: 224 bytes leftover after parsing attributes in process `syz.4.24'. [ 36.454508][ T4509] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 36.455659][ T4509] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 36.462364][ T4509] vhci_hcd vhci_hcd.0: Device attached [ 36.464686][ T4510] vhci_hcd: connection closed [ 36.465544][ T9] vhci_hcd: stop threads [ 36.467484][ T9] vhci_hcd: release socket [ 36.468198][ T9] vhci_hcd: disconnect device [ 36.497091][ T4517] process 'syz.2.34' launched '/dev/fd/4' with NULL argv: empty string added [ 36.552182][ T4523] loop4: detected capacity change from 0 to 512 [ 36.554955][ T4523] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.574634][ T4525] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 36.585688][ T4525] loop2: detected capacity change from 0 to 1764 [ 36.595210][ T4523] EXT4-fs (loop4): 1 orphan inode deleted [ 36.597960][ T4523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.610135][ T328] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 1 [ 36.635665][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 36.714382][ T4525] device macvlan2 entered promiscuous mode [ 36.737154][ T4538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 36.946740][ T4549] loop3: detected capacity change from 0 to 512 [ 36.994710][ T4549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.040396][ T4555] 9pnet_fd: Insufficient options for proto=fd [ 37.049958][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 37.201945][ T4500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 37.203012][ T4500] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 37.207121][ T4500] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 37.208458][ T4500] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 37.209404][ T4500] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 37.211996][ T4500] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 37.213178][ T4500] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 37.214084][ T4500] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 37.227379][ T4500] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 37.228654][ T4500] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 37.229591][ T4500] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 37.231724][ T4500] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 37.232895][ T4500] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 37.233836][ T4500] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 37.240578][ T4500] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 37.421462][ T4591] loop4: detected capacity change from 0 to 512 [ 37.461853][ T4591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.514576][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 37.821376][ T4645] Illegal XDP return value 3450261632 on prog (id 2) dev N/A, expect packet loss! [ 38.485877][ T4320] Bluetooth: hci0: command 0x0419 tx timeout [ 38.700666][ T4733] loop1: detected capacity change from 0 to 128 [ 38.721123][ T4733] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.744295][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 38.922723][ T4757] loop2: detected capacity change from 0 to 2048 [ 38.991336][ T4757] Alternate GPT is invalid, using primary GPT. [ 38.992459][ T4757] loop2: p1 p2 p3 [ 38.993023][ T4757] loop2: partition table partially beyond EOD, truncated [ 39.041472][ T4778] loop4: detected capacity change from 0 to 1024 [ 39.042833][ T4778] ======================================================= [ 39.042833][ T4778] WARNING: The mand mount option has been deprecated and [ 39.042833][ T4778] and is ignored by this kernel. Remove the mand [ 39.042833][ T4778] option from the mount to silence this warning. [ 39.042833][ T4778] ======================================================= [ 39.074388][ T4778] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 39.076556][ T4778] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.098957][ T4778] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.144: Failed to acquire dquot type 0 [ 39.101383][ T4778] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.144: Failed to acquire dquot type 0 [ 39.105346][ T4312] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.114608][ T4778] EXT4-fs error (device loop4): ext4_free_blocks:6221: comm syz.4.144: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.146424][ T4778] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.144: Failed to acquire dquot type 0 [ 39.168884][ T4778] EXT4-fs (loop4): 1 orphan inode deleted [ 39.172141][ T4778] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.213731][ T4798] loop3: detected capacity change from 0 to 128 [ 39.229684][ T4795] loop2: detected capacity change from 0 to 4096 [ 39.234155][ T4795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.275212][ T4798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.276957][ T4320] Bluetooth: hci4: command 0x0419 tx timeout [ 39.277907][ T4320] Bluetooth: hci3: command 0x0419 tx timeout [ 39.278896][ T4320] Bluetooth: hci2: command 0x0419 tx timeout [ 39.279829][ T4320] Bluetooth: hci1: command 0x0419 tx timeout [ 39.279963][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 39.285689][ T4807] udevd[4807]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 39.299348][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 39.306083][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 39.327785][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 39.334405][ T4529] udevd[4529]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 39.503201][ T4831] can0: slcan on ttyS3. [ 39.577326][ T4831] can0 (unregistered): slcan off ttyS3. [ 39.688732][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 39.800908][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.802589][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.074382][ T4913] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.082792][ T4913] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.208: error while reading EA inode 32 err=-116 [ 40.085557][ T4913] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2823: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.091514][ T4913] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.208: error while reading EA inode 32 err=-116 [ 40.094476][ T4913] EXT4-fs (loop3): 1 orphan inode deleted [ 40.095467][ T4913] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.241303][ T4935] netlink: 'syz.2.218': attribute type 11 has an invalid length. [ 40.246352][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 40.256931][ T4936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.216'. [ 40.348665][ T4948] netlink: 'ÿ': attribute type 10 has an invalid length. [ 40.370293][ T4948] team0: Port device dummy0 added [ 40.377834][ T4948] netlink: 'ÿ': attribute type 10 has an invalid length. [ 40.416760][ T4948] team0: Port device dummy0 removed [ 40.419299][ T4948] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 40.569441][ T4328] Bluetooth: hci0: command 0x0c1a tx timeout [ 40.994129][ T4994] set_capacity_and_notify: 2 callbacks suppressed [ 40.994138][ T4994] loop0: detected capacity change from 0 to 128 [ 41.238983][ T5022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 41.263835][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 41.356121][ T4320] Bluetooth: hci1: command 0x0c1a tx timeout [ 41.357320][ T4320] Bluetooth: hci2: command 0x0c1a tx timeout [ 41.358397][ T4320] Bluetooth: hci3: command 0x0c1a tx timeout [ 41.359394][ T4320] Bluetooth: hci4: command 0x0c1a tx timeout [ 41.483278][ T5044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 41.562128][ T5049] loop3: detected capacity change from 0 to 512 [ 41.610852][ T5049] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.627196][ T5060] bridge0: port 3(batadv1) entered blocking state [ 41.630882][ T5060] bridge0: port 3(batadv1) entered disabled state [ 41.634537][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 41.636635][ T5060] device batadv1 entered promiscuous mode [ 41.761414][ T5074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.282'. [ 41.808900][ T5081] loop4: detected capacity change from 0 to 128 [ 41.988364][ T5107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.296'. [ 42.152414][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 42.154023][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 42.273307][ T5092] syz.4.285: attempt to access beyond end of device [ 42.273307][ T5092] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.283076][ T5092] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 42.296742][ T5092] syz.4.285: attempt to access beyond end of device [ 42.296742][ T5092] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.312775][ T5092] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 42.362612][ T5134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.308'. [ 42.486978][ T27] kauditd_printk_skb: 592 callbacks suppressed [ 42.486987][ T27] audit: type=1326 audit(42.480:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.493234][ T27] audit: type=1326 audit(42.480:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.499496][ T27] audit: type=1326 audit(42.490:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.509549][ T27] audit: type=1326 audit(42.490:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.515985][ T27] audit: type=1326 audit(42.490:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.526164][ T27] audit: type=1326 audit(42.490:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.540077][ T27] audit: type=1326 audit(42.500:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.543383][ T27] audit: type=1326 audit(42.500:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.572326][ T27] audit: type=1326 audit(42.500:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.589749][ T27] audit: type=1326 audit(42.500:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5148 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb135b9e8 code=0x7ffc0000 [ 42.606410][ T5159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.321'. [ 42.635912][ T4328] Bluetooth: hci0: command 0x0406 tx timeout [ 42.838117][ T5176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.847357][ T5189] IPVS: stopping master sync thread 5192 ... [ 42.896087][ T5191] loop4: detected capacity change from 0 to 8192 [ 42.917337][ T5176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.921499][ T5199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.338'. [ 43.048544][ T5176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.137449][ T5176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.164648][ T5221] loop2: detected capacity change from 0 to 1024 [ 43.170893][ T5221] EXT4-fs: inline encryption not supported [ 43.171957][ T5221] EXT4-fs: Ignoring removed oldalloc option [ 43.173079][ T5221] EXT4-fs: inline encryption not supported [ 43.174533][ T5221] EXT4-fs: Ignoring removed orlov option [ 43.191597][ T5221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.197621][ T5221] IPVS: set_ctl: invalid protocol: 12078 108.101.49.0:0 [ 43.210756][ T4325] EXT4-fs (loop2): unmounting filesystem. [ 43.240798][ T5227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.352'. [ 43.280255][ T5176] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.302128][ T5176] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.316118][ T5176] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.324241][ T5176] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.375469][ T5243] device veth2 entered promiscuous mode [ 43.409980][ T5245] loop3: detected capacity change from 0 to 1024 [ 43.411376][ T5245] EXT4-fs: Ignoring removed nobh option [ 43.412296][ T5245] EXT4-fs: Ignoring removed bh option [ 43.413383][ T5245] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.435913][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 43.436790][ T4328] Bluetooth: hci3: command 0x0406 tx timeout [ 43.437589][ T4328] Bluetooth: hci2: command 0x0406 tx timeout [ 43.438436][ T4328] Bluetooth: hci1: command 0x0406 tx timeout [ 43.446860][ T5245] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.467661][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 43.749901][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.751412][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.872565][ T5304] device syzkaller0 entered promiscuous mode [ 44.405448][ T5337] delete_channel: no stack [ 44.462948][ T5343] loop0: detected capacity change from 0 to 2048 [ 44.489285][ T5343] Alternate GPT is invalid, using primary GPT. [ 44.490235][ T5343] loop0: p1 p2 p3 [ 44.490844][ T5343] loop0: partition table partially beyond EOD, truncated [ 44.522349][ T5352] ptrace attach of "./syz-executor exec"[5353] was attempted by "./syz-executor exec"[5352] [ 44.573273][ T4312] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.612680][ T5365] netlink: 'syz.3.404': attribute type 4 has an invalid length. [ 44.687384][ T4807] udevd[4807]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 44.689656][ T4528] udevd[4528]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.716497][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.773799][ T5385] loop0: detected capacity change from 0 to 1024 [ 44.786552][ T5385] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.788250][ T5385] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.790672][ T5385] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.412: Failed to acquire dquot type 0 [ 44.816103][ T5385] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.412: Failed to acquire dquot type 0 [ 44.818045][ T5385] EXT4-fs error (device loop0): ext4_free_blocks:6221: comm syz.0.412: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.829551][ T5385] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.412: Failed to acquire dquot type 0 [ 44.832130][ T5392] loop2: detected capacity change from 0 to 128 [ 44.863345][ T5385] EXT4-fs (loop0): 1 orphan inode deleted [ 44.875212][ T5385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.951853][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 45.043448][ T5404] loop1: detected capacity change from 0 to 8192 [ 45.220042][ T5425] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 45.283370][ T5429] __nla_validate_parse: 7 callbacks suppressed [ 45.283382][ T5429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.433'. [ 45.321433][ T5435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.322985][ T5435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.999352][ T5437] syz.3.435 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 46.003009][ T5437] CPU: 0 PID: 5437 Comm: syz.3.435 Not tainted syzkaller #0 [ 46.004119][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 46.005687][ T5437] Call trace: [ 46.006181][ T5437] dump_backtrace+0x1c8/0x1f4 [ 46.006908][ T5437] show_stack+0x2c/0x3c [ 46.007548][ T5437] __dump_stack+0x30/0x40 [ 46.008238][ T5437] dump_stack_lvl+0xf8/0x160 [ 46.008891][ T5437] dump_stack+0x1c/0x5c [ 46.009518][ T5437] dump_header+0xc0/0x724 [ 46.010183][ T5437] oom_kill_process+0x360/0x674 [ 46.010932][ T5437] out_of_memory+0xc5c/0xf68 [ 46.011650][ T5437] mem_cgroup_out_of_memory+0x210/0x2bc [ 46.012484][ T5437] try_charge_memcg+0xac4/0x1448 [ 46.013170][ T5437] __memcg_kmem_charge_page+0x304/0x54c [ 46.014038][ T5437] __alloc_pages+0x1fc/0x53c [ 46.014705][ T5437] alloc_pages+0x434/0x6f8 [ 46.015366][ T5437] __vmalloc_node_range+0x734/0xe48 [ 46.016152][ T5437] kvmalloc_node+0x168/0x1dc [ 46.016816][ T5437] ip_set_alloc+0x2c/0x3c [ 46.017446][ T5437] hash_netiface_create+0x2c4/0xcb8 [ 46.018219][ T5437] ip_set_create+0x48c/0x1024 [ 46.018892][ T5437] nfnetlink_rcv_msg+0x9d4/0xed8 [ 46.019608][ T5437] netlink_rcv_skb+0x208/0x3c4 [ 46.020381][ T5437] nfnetlink_rcv+0x1f8/0x1afc [ 46.021045][ T5437] netlink_unicast+0x60c/0x824 [ 46.021714][ T5437] netlink_sendmsg+0x6e8/0x9b0 [ 46.022370][ T5437] ____sys_sendmsg+0x5b8/0x918 [ 46.023090][ T5437] __sys_sendmsg+0x25c/0x320 [ 46.023759][ T5437] __arm64_sys_sendmsg+0x80/0x94 [ 46.024413][ T5437] invoke_syscall+0x98/0x2bc [ 46.025138][ T5437] el0_svc_common+0x138/0x258 [ 46.025818][ T5437] do_el0_svc+0x58/0x13c [ 46.026429][ T5437] el0_svc+0x58/0x138 [ 46.027028][ T5437] el0t_64_sync_handler+0x84/0xf0 [ 46.027730][ T5437] el0t_64_sync+0x18c/0x190 [ 46.264980][ T5473] set_capacity_and_notify: 1 callbacks suppressed [ 46.265000][ T5473] loop1: detected capacity change from 0 to 4096 [ 46.357611][ T5469] loop4: p1 p2 p3 [ 46.359609][ T5437] memory: usage 307180kB, limit 307200kB, failcnt 279 [ 46.360738][ T5437] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 46.368147][ T5437] kmem: usage 307112kB, limit 9007199254740988kB, failcnt 0 [ 46.372111][ T5437] Memory cgroup stats for /syz3: [ 46.372278][ T5437] anon 0 [ 46.372278][ T5437] file 61440 [ 46.372278][ T5437] kernel 314482688 [ 46.372278][ T5437] kernel_stack 131072 [ 46.372278][ T5437] pagetables 200704 [ 46.372278][ T5437] sec_pagetables 0 [ 46.372278][ T5437] percpu 144 [ 46.372278][ T5437] sock 0 [ 46.372278][ T5437] vmalloc 4096 [ 46.372278][ T5437] shmem 0 [ 46.372278][ T5437] zswap 0 [ 46.372278][ T5437] zswapped 0 [ 46.372278][ T5437] file_mapped 61440 [ 46.372278][ T5437] file_dirty 61440 [ 46.372278][ T5437] file_writeback 0 [ 46.372278][ T5437] swapcached 589824 [ 46.372278][ T5437] anon_thp 0 [ 46.372278][ T5437] file_thp 0 [ 46.372278][ T5437] shmem_thp 0 [ 46.372278][ T5437] inactive_anon 0 [ 46.372278][ T5437] active_anon 0 [ 46.372278][ T5437] inactive_file 0 [ 46.372278][ T5437] active_file 65536 [ 46.372278][ T5437] unevictable 0 [ 46.372278][ T5437] slab_reclaimable 39312 [ 46.372278][ T5437] slab_unreclaimable 351056 [ 46.372278][ T5437] slab 390368 [ 46.412388][ T3934] loop4: p1 p2 p3 [ 46.422983][ T5437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.435,pid=5432,uid=0 [ 46.426082][ T5437] Memory cgroup out of memory: Killed process 5432 (syz.3.435) total-vm:102044kB, anon-rss:1152kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 46.471187][ T4528] udevd[4528]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 46.474659][ T4310] udevd[4310]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 46.477416][ T4807] udevd[4807]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.502444][ T4807] udevd[4807]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 46.508542][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.511140][ T4807] udevd[4807]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 46.685684][ T5488] loop4: detected capacity change from 0 to 128 [ 46.689727][ T5488] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.694537][ T5488] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.778255][ T5492] device batadv0 entered promiscuous mode [ 46.779861][ T5492] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 46.781892][ T5492] device batadv0 left promiscuous mode [ 47.133220][ T5508] team0: Device gtp0 is of different type [ 47.358807][ T5514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.469'. [ 47.722550][ T5525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 47.990025][ T5542] netlink: 176 bytes leftover after parsing attributes in process `syz.1.480'. [ 48.058141][ T27] kauditd_printk_skb: 94 callbacks suppressed [ 48.058149][ T27] audit: type=1326 audit(48.050:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.066118][ T27] audit: type=1326 audit(48.060:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.070047][ T27] audit: type=1326 audit(48.060:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.074795][ T27] audit: type=1326 audit(48.060:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.090928][ T27] audit: type=1326 audit(48.060:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.111680][ T27] audit: type=1326 audit(48.060:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.117842][ T27] audit: type=1326 audit(48.060:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.121675][ T27] audit: type=1326 audit(48.060:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.125615][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 48.174739][ T27] audit: type=1326 audit(48.060:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.181109][ T27] audit: type=1326 audit(48.060:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5552 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8055b9e8 code=0x7ffc0000 [ 48.214325][ T5566] IPv6: Can't replace route, no match found [ 48.295720][ T5573] netlink: 68 bytes leftover after parsing attributes in process `syz.2.494'. [ 48.408387][ T5587] loop4: detected capacity change from 0 to 512 [ 48.412432][ T5582] loop1: detected capacity change from 0 to 1024 [ 48.413824][ T5587] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.435230][ T5587] EXT4-fs (loop4): 1 truncate cleaned up [ 48.436498][ T5587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.442325][ T5587] netlink: 'syz.4.500': attribute type 13 has an invalid length. [ 48.450119][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 48.454652][ T5582] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.499484][ T5596] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2200: inode #15: comm syz.4.500: corrupted in-inode xattr [ 48.509739][ T5596] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1737: inode #15: comm syz.4.500: unable to update i_inline_off [ 48.511921][ T5596] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2200: inode #15: comm syz.4.500: corrupted in-inode xattr [ 48.547401][ T5599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 48.548848][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.550083][ T5599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.551880][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.553076][ T5599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.569871][ T5602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 48.583516][ T5587] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2200: inode #15: comm syz.4.500: corrupted in-inode xattr [ 48.584454][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 48.615026][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 48.818860][ T5629] loop2: detected capacity change from 0 to 164 [ 48.845764][ T5631] netlink: 'syz.1.516': attribute type 12 has an invalid length. [ 49.034764][ T5658] syz.1.529 uses obsolete (PF_INET,SOCK_PACKET) [ 49.112411][ T5649] loop2: detected capacity change from 0 to 8192 [ 49.312166][ T5690] loop1: detected capacity change from 0 to 512 [ 49.323529][ T5690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.329600][ T5690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.429216][ T4393] kernel write not supported for file /245/net/xfrm_stat (pid: 4393 comm: kworker/0:7) [ 49.448772][ T5707] loop4: detected capacity change from 0 to 8192 [ 49.460797][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 49.497219][ T5707] loop4: p1[EZD] p2 p3 p4 [ 49.499112][ T5707] loop4: p3 start 117772289 is beyond EOD, truncated [ 49.499127][ T5707] loop4: p4 size 262144 extends beyond EOD, truncated [ 49.595107][ T5724] tipc: Started in network mode [ 49.598408][ T5724] tipc: Node identity a26242d19efa, cluster identity 4711 [ 49.599670][ T5724] tipc: Enabled bearer , priority 0 [ 49.601182][ T5724] device syzkaller0 entered promiscuous mode [ 49.610715][ T5724] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 49.657858][ T5724] tipc: Resetting bearer [ 49.663260][ T5722] tipc: Resetting bearer [ 49.737722][ T5722] tipc: Disabling bearer [ 49.742496][ T5732] device bridge0 entered promiscuous mode [ 49.743549][ T5732] device macsec1 entered promiscuous mode [ 49.805033][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 49.809645][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 49.827688][ T5746] tipc: Started in network mode [ 49.827709][ T5746] tipc: Node identity 3e30b8ab9306, cluster identity 4711 [ 49.827755][ T5746] tipc: Enabled bearer , priority 0 [ 49.856490][ T5746] device syzkaller0 entered promiscuous mode [ 49.860205][ T5746] tipc: Resetting bearer [ 49.899103][ T5744] tipc: Resetting bearer [ 50.094177][ T5771] loop3: detected capacity change from 0 to 512 [ 50.096659][ T5771] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.101190][ T5771] EXT4-fs (loop3): 1 truncate cleaned up [ 50.102060][ T5771] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.118694][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 50.139187][ T5775] loop3: detected capacity change from 0 to 1024 [ 50.159698][ T5775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.179520][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 50.884246][ T5803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.888768][ T5803] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 50.900370][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 51.191947][ T5819] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 51.193806][ T5819] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.195617][ T5819] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.603: Failed to acquire dquot type 0 [ 51.198185][ T5819] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.603: Failed to acquire dquot type 0 [ 51.200227][ T5819] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.603: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.202513][ T5819] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.603: Failed to acquire dquot type 0 [ 51.204599][ T5819] EXT4-fs (loop3): 1 orphan inode deleted [ 51.206849][ T5819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.222340][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 51.246968][ T5823] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.248025][ T5823] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 51.250249][ T5823] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 51.253993][ T5823] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.604: attempt to clear invalid blocks 2 len 1 [ 51.259116][ T5823] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.604: invalid indirect mapped block 1819239214 (level 0) [ 51.261509][ T5823] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.604: invalid indirect mapped block 1819239214 (level 1) [ 51.264502][ T5823] EXT4-fs (loop3): 1 truncate cleaned up [ 51.265497][ T5823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.280325][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 60.928207][ T5744] tipc: Disabling bearer [ 60.930105][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 61.206594][ T22] tipc: Node number set to 2906044587 [ 61.223641][ T5844] set_capacity_and_notify: 3 callbacks suppressed [ 61.223650][ T5844] loop1: detected capacity change from 0 to 512 [ 61.301964][ T5849] loop4: detected capacity change from 0 to 736 [ 61.322686][ T5844] EXT4-fs (loop1): 1 orphan inode deleted [ 61.323890][ T5844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 61.399872][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 61.444038][ T5860] loop3: detected capacity change from 0 to 512 [ 61.475038][ T5866] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 61.494787][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 61.510849][ T5860] [ 61.511316][ T5860] ====================================================== [ 61.512456][ T5860] WARNING: possible circular locking dependency detected [ 61.513486][ T5860] syzkaller #0 Not tainted [ 61.514171][ T5860] ------------------------------------------------------ [ 61.515225][ T5860] syz.3.617/5860 is trying to acquire lock: [ 61.516119][ T5860] ffff0000f5958c90 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x278/0x1770 [ 61.517524][ T5860] [ 61.517524][ T5860] but task is already holding lock: [ 61.518499][ T5860] ffff0000de84e208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4c/0x118 [ 61.520092][ T5860] [ 61.520092][ T5860] which lock already depends on the new lock. [ 61.520092][ T5860] [ 61.521550][ T5860] [ 61.521550][ T5860] the existing dependency chain (in reverse order) is: [ 61.522816][ T5860] [ 61.522816][ T5860] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 61.523942][ T5860] down_read+0x64/0x304 [ 61.524669][ T5860] v2_read_dquot+0x4c/0x118 [ 61.525419][ T5860] dquot_acquire+0x120/0x4e0 [ 61.526183][ T5860] ext4_acquire_dquot+0x270/0x428 [ 61.526989][ T5860] dqget+0x654/0xccc [ 61.527630][ T5860] __dquot_initialize+0x264/0xa80 [ 61.528436][ T5860] dquot_initialize+0x24/0x34 [ 61.529225][ T5860] ext4_process_orphan+0x5c/0x2b4 [ 61.530035][ T5860] ext4_orphan_cleanup+0x908/0x104c [ 61.530923][ T5860] ext4_fill_super+0x610c/0x6598 [ 61.531708][ T5860] get_tree_bdev+0x358/0x544 [ 61.532443][ T5860] ext4_get_tree+0x28/0x38 [ 61.533130][ T5860] vfs_get_tree+0x90/0x274 [ 61.533883][ T5860] do_new_mount+0x228/0x810 [ 61.534645][ T5860] path_mount+0x5b4/0xe78 [ 61.535333][ T5860] __arm64_sys_mount+0x49c/0x584 [ 61.536105][ T5860] invoke_syscall+0x98/0x2bc [ 61.536863][ T5860] el0_svc_common+0x138/0x258 [ 61.537592][ T5860] do_el0_svc+0x58/0x13c [ 61.538321][ T5860] el0_svc+0x58/0x138 [ 61.539043][ T5860] el0t_64_sync_handler+0x84/0xf0 [ 61.539864][ T5860] el0t_64_sync+0x18c/0x190 [ 61.540625][ T5860] [ 61.540625][ T5860] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 61.541820][ T5860] __mutex_lock_common+0x190/0x1f38 [ 61.542510][ T5860] mutex_lock_nested+0x38/0x44 [ 61.543235][ T5860] dquot_commit+0x50/0x1c4 [ 61.543904][ T5860] ext4_write_dquot+0x1b4/0x31c [ 61.544709][ T5860] ext4_mark_dquot_dirty+0xe8/0x140 [ 61.545487][ T5860] mark_all_dquot_dirty+0x1f8/0x424 [ 61.546279][ T5860] __dquot_free_space+0x744/0xa80 [ 61.547048][ T5860] ext4_free_blocks+0x18c8/0x23cc [ 61.547888][ T5860] ext4_ext_remove_space+0x1698/0x39c4 [ 61.548695][ T5860] ext4_ext_truncate+0x164/0x20c [ 61.549433][ T5860] ext4_truncate+0x9dc/0x1078 [ 61.550135][ T5860] ext4_evict_inode+0xc04/0x1270 [ 61.550826][ T5860] evict+0x3c8/0x810 [ 61.551366][ T5860] iput+0x764/0x7f4 [ 61.552031][ T5860] ext4_process_orphan+0x240/0x2b4 [ 61.552908][ T5860] ext4_orphan_cleanup+0x908/0x104c [ 61.553713][ T5860] ext4_fill_super+0x610c/0x6598 [ 61.554674][ T5860] get_tree_bdev+0x358/0x544 [ 61.555560][ T5860] ext4_get_tree+0x28/0x38 [ 61.556263][ T5860] vfs_get_tree+0x90/0x274 [ 61.556993][ T5860] do_new_mount+0x228/0x810 [ 61.557777][ T5860] path_mount+0x5b4/0xe78 [ 61.558494][ T5860] __arm64_sys_mount+0x49c/0x584 [ 61.559249][ T5860] invoke_syscall+0x98/0x2bc [ 61.560140][ T5860] el0_svc_common+0x138/0x258 [ 61.560855][ T5860] do_el0_svc+0x58/0x13c [ 61.561592][ T5860] el0_svc+0x58/0x138 [ 61.562191][ T5860] el0t_64_sync_handler+0x84/0xf0 [ 61.563014][ T5860] el0t_64_sync+0x18c/0x190 [ 61.563763][ T5860] [ 61.563763][ T5860] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 61.564861][ T5860] __lock_acquire+0x293c/0x6544 [ 61.565614][ T5860] lock_acquire+0x20c/0x644 [ 61.566315][ T5860] down_read+0x64/0x304 [ 61.566990][ T5860] ext4_map_blocks+0x278/0x1770 [ 61.567803][ T5860] ext4_getblk+0x170/0x654 [ 61.568504][ T5860] ext4_bread+0x3c/0x1b0 [ 61.569212][ T5860] ext4_quota_read+0x160/0x350 [ 61.569959][ T5860] find_tree_dqentry+0x174/0xc04 [ 61.570644][ T5860] find_tree_dqentry+0x4f8/0xc04 [ 61.571436][ T5860] find_tree_dqentry+0x4f8/0xc04 [ 61.572232][ T5860] find_tree_dqentry+0x4f8/0xc04 [ 61.573038][ T5860] qtree_read_dquot+0x454/0x724 [ 61.573783][ T5860] v2_read_dquot+0xbc/0x118 [ 61.574435][ T5860] dquot_acquire+0x120/0x4e0 [ 61.575169][ T5860] ext4_acquire_dquot+0x270/0x428 [ 61.576011][ T5860] dqget+0x654/0xccc [ 61.576676][ T5860] __dquot_initialize+0x264/0xa80 [ 61.577496][ T5860] dquot_initialize+0x24/0x34 [ 61.578210][ T5860] ext4_process_orphan+0x5c/0x2b4 [ 61.578983][ T5860] ext4_orphan_cleanup+0x908/0x104c [ 61.579813][ T5860] ext4_fill_super+0x610c/0x6598 [ 61.580619][ T5860] get_tree_bdev+0x358/0x544 [ 61.581352][ T5860] ext4_get_tree+0x28/0x38 [ 61.582200][ T5860] vfs_get_tree+0x90/0x274 [ 61.583029][ T5860] do_new_mount+0x228/0x810 [ 61.583778][ T5860] path_mount+0x5b4/0xe78 [ 61.584536][ T5860] __arm64_sys_mount+0x49c/0x584 [ 61.585411][ T5860] invoke_syscall+0x98/0x2bc [ 61.586161][ T5860] el0_svc_common+0x138/0x258 [ 61.586931][ T5860] do_el0_svc+0x58/0x13c [ 61.587566][ T5860] el0_svc+0x58/0x138 [ 61.588241][ T5860] el0t_64_sync_handler+0x84/0xf0 [ 61.589070][ T5860] el0t_64_sync+0x18c/0x190 [ 61.589812][ T5860] [ 61.589812][ T5860] other info that might help us debug this: [ 61.589812][ T5860] [ 61.591214][ T5860] Chain exists of: [ 61.591214][ T5860] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 61.591214][ T5860] [ 61.593243][ T5860] Possible unsafe locking scenario: [ 61.593243][ T5860] [ 61.594314][ T5860] CPU0 CPU1 [ 61.595060][ T5860] ---- ---- [ 61.595906][ T5860] lock(&s->s_dquot.dqio_sem); [ 61.596655][ T5860] lock(&dquot->dq_lock); [ 61.597638][ T5860] lock(&s->s_dquot.dqio_sem); [ 61.598730][ T5860] lock(&ei->i_data_sem/2); [ 61.599409][ T5860] [ 61.599409][ T5860] *** DEADLOCK *** [ 61.599409][ T5860] [ 61.600534][ T5860] 3 locks held by syz.3.617/5860: [ 61.601330][ T5860] #0: ffff0000de84e0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 61.602846][ T5860] #1: ffff0000e33cc428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x60/0x4e0 [ 61.604252][ T5860] #2: ffff0000de84e208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4c/0x118 [ 61.605778][ T5860] [ 61.605778][ T5860] stack backtrace: [ 61.606610][ T5860] CPU: 0 PID: 5860 Comm: syz.3.617 Not tainted syzkaller #0 [ 61.607689][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 61.609199][ T5860] Call trace: [ 61.609698][ T5860] dump_backtrace+0x1c8/0x1f4 [ 61.610380][ T5860] show_stack+0x2c/0x3c [ 61.610944][ T5860] __dump_stack+0x30/0x40 [ 61.611552][ T5860] dump_stack_lvl+0xf8/0x160 [ 61.612173][ T5860] dump_stack+0x1c/0x5c [ 61.612767][ T5860] print_circular_bug+0x148/0x1b0 [ 61.613514][ T5860] check_noncircular+0x240/0x2d4 [ 61.614211][ T5860] __lock_acquire+0x293c/0x6544 [ 61.614938][ T5860] lock_acquire+0x20c/0x644 [ 61.615618][ T5860] down_read+0x64/0x304 [ 61.616280][ T5860] ext4_map_blocks+0x278/0x1770 [ 61.616936][ T5860] ext4_getblk+0x170/0x654 [ 61.617573][ T5860] ext4_bread+0x3c/0x1b0 [ 61.618191][ T5860] ext4_quota_read+0x160/0x350 [ 61.618902][ T5860] find_tree_dqentry+0x174/0xc04 [ 61.619591][ T5860] find_tree_dqentry+0x4f8/0xc04 [ 61.620300][ T5860] find_tree_dqentry+0x4f8/0xc04 [ 61.620965][ T5860] find_tree_dqentry+0x4f8/0xc04 [ 61.621626][ T5860] qtree_read_dquot+0x454/0x724 [ 61.622304][ T5860] v2_read_dquot+0xbc/0x118 [ 61.622986][ T5860] dquot_acquire+0x120/0x4e0 [ 61.623634][ T5860] ext4_acquire_dquot+0x270/0x428 [ 61.624328][ T5860] dqget+0x654/0xccc [ 61.624858][ T5860] __dquot_initialize+0x264/0xa80 [ 61.625559][ T5860] dquot_initialize+0x24/0x34 [ 61.626229][ T5860] ext4_process_orphan+0x5c/0x2b4 [ 61.626961][ T5860] ext4_orphan_cleanup+0x908/0x104c [ 61.627678][ T5860] ext4_fill_super+0x610c/0x6598 [ 61.628378][ T5860] get_tree_bdev+0x358/0x544 [ 61.629063][ T5860] ext4_get_tree+0x28/0x38 [ 61.629637][ T5860] vfs_get_tree+0x90/0x274 [ 61.630269][ T5860] do_new_mount+0x228/0x810 [ 61.630996][ T5860] path_mount+0x5b4/0xe78 [ 61.631655][ T5860] __arm64_sys_mount+0x49c/0x584 [ 61.632582][ T5860] invoke_syscall+0x98/0x2bc [ 61.633292][ T5860] el0_svc_common+0x138/0x258 [ 61.634015][ T5860] do_el0_svc+0x58/0x13c [ 61.634659][ T5860] el0_svc+0x58/0x138 [ 61.635219][ T5860] el0t_64_sync_handler+0x84/0xf0 [ 61.635957][ T5860] el0t_64_sync+0x18c/0x190 [ 61.643332][ T5860] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.617: bg 0: block 248: padding at end of block bitmap is not set [ 61.645550][ T5860] __quota_error: 132 callbacks suppressed [ 61.645555][ T5860] Quota error (device loop3): write_blk: dquota write failed [ 61.647807][ T5860] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 61.649432][ T5860] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.617: Failed to acquire dquot type 1 [ 61.652118][ T5860] EXT4-fs (loop3): 1 truncate cleaned up [ 61.653137][ T5860] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.671112][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 64.476416][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.477413][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.596868][ T14] cfg80211: failed to load regulatory.db