last executing test programs: 18.394946401s ago: executing program 2 (id=51): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x32600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x18, &(0x7f00000002c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @generic={0x48, 0x1, 0x5, 0x3, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x6}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe5}}], &(0x7f0000000240)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @cgroup_skb, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000440)=[r1], &(0x7f0000000480)=[{0x5, 0x3, 0x5, 0x9}, {0x5, 0x1, 0x1, 0x2}, {0x5, 0x2, 0x4, 0x2}, {0x5, 0x5, 0x5, 0xb}, {0x2, 0x2, 0x9, 0xb}], 0x10, 0xd}, 0x94) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.391357504s ago: executing program 2 (id=57): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x5, 0x0}) 14.644756245s ago: executing program 2 (id=59): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 11.259411139s ago: executing program 2 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8.665033109s ago: executing program 4 (id=73): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 5.108498186s ago: executing program 0 (id=82): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x5, 0x0}) 4.519923004s ago: executing program 0 (id=86): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x161842, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, 0x0, 0x40814) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 4.387389745s ago: executing program 4 (id=88): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040051) 4.114637157s ago: executing program 4 (id=92): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r0, 0x0, 0x0) 4.018580364s ago: executing program 4 (id=95): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 3.519430375s ago: executing program 2 (id=99): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 2.735634728s ago: executing program 3 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) 2.692489482s ago: executing program 0 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x100, 0x0, &(0x7f0000000080)={0x80, 0x14, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.510635277s ago: executing program 0 (id=108): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x104) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.506001027s ago: executing program 3 (id=109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0xb, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x44000) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="2d726c696d698f201335e76437424fc200d7b3af70bb2ca640b485b9c6155c2e13d5224d5b37b43fa0b15c55d9b7613b395bb3c1293d7a320d31cf61ec0a5714c37800e1d51091c96da853aae70103ca1ecd004ddb801879eab4c2ce43a56a4c7c7042d072b3ae68"], 0x8) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x5f0, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x5ba, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "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"}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 2.430526723s ago: executing program 1 (id=110): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x5, 0x0}) 2.22665113s ago: executing program 0 (id=111): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) 1.271543127s ago: executing program 1 (id=112): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000640)="10", 0x1, r1) keyctl$setperm(0x5, r0, 0x800) keyctl$chown(0x6, r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r4}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) add_key(&(0x7f0000000040)='cifs.spnego\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) setuid(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 1.263868227s ago: executing program 0 (id=113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.094016611s ago: executing program 3 (id=114): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x2e400}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) 1.032532976s ago: executing program 1 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x4d, 0x0, @opaque="965b0156895dff3de39eeee15aa5a25cc5cc1f5a10142e53948d759fb61af979127fd9b8e95212ade7bdc25c9fb10b6f34034a0d2fb4f9eb3697d3a005e8b03db36e3279e2"}}}}}, 0x0) 878.695349ms ago: executing program 1 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 795.046556ms ago: executing program 1 (id=117): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x20) getdents(r1, &(0x7f0000000380)=""/107, 0x6b) 648.145897ms ago: executing program 3 (id=118): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 502.505899ms ago: executing program 1 (id=119): syz_clone3(&(0x7f0000000280)={0x2004800, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x6}, &(0x7f0000000100)=""/228, 0xe4, &(0x7f0000000200)=""/6, &(0x7f0000000240)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000008680)=[{{&(0x7f0000001b00)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c, 0x0, 0x0, &(0x7f0000003d40)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x28}}], 0x1, 0x24008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x8d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@usrjquota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0x8001, 0x182b, 0x3ff, 0xa43a, 0x4, "849190adb5dc682279313ae22d65da92ba41c0", 0x200, 0xb6e}) 469.540752ms ago: executing program 3 (id=120): socket(0x2, 0x2, 0xfffe) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="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", 0x5c5}], 0x1, &(0x7f00000000c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x20, 0x1, [{0x7, 0xe, "82d14970ac68b978e66df9c5"}, {0x5, 0x6, "29ef9657"}, {0x6, 0x6, "7d60f451"}]}]}}}], 0x30}}], 0x1, 0x44000840) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x20000000000002eb, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xf7fffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}], &(0x7f0000000280)='GPL\x00', 0xa, 0xe3, &(0x7f00000007c0)=""/227, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1005, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xe, 0x4800000, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000380)=[r2, r2, r3], &(0x7f0000000480)=[{0x1, 0x3, 0xe, 0x4}, {0x3, 0x5, 0x1, 0x2}, {0x3, 0x1, 0x10, 0xb}], 0x10, 0xce000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 343.570132ms ago: executing program 4 (id=121): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/wakeup_count', 0xa00, 0xa0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x1c, "fee8a2bb78fcaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a010000000000000000030000000000000000200000001600", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "aebe8b1c000000ba0951f2857be47dc3f900", [0x200000004, 0x3fffffffffffff]}}) 116.60161ms ago: executing program 3 (id=122): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x5, 0x0}) 0s ago: executing program 2 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x2581) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={0x0, 0x0, 0x4a}, 0x28) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 57.156581][ T4167] cgroup: Unknown subsys name 'net' [ 57.287173][ T4167] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.818677][ T4167] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.244901][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.356615][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 60.374991][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 60.425292][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 60.447706][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.455990][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.465118][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.477425][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.484755][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.493047][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.517875][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.584993][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.625431][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.641096][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.648609][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.657719][ T4185] device bridge_slave_0 entered promiscuous mode [ 60.685293][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.692602][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.700456][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.707591][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.714843][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.722530][ T4190] device bridge_slave_0 entered promiscuous mode [ 60.761264][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.768541][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.776960][ T4190] device bridge_slave_1 entered promiscuous mode [ 60.795094][ T4186] team0: Port device team_slave_0 added [ 60.831748][ T4186] team0: Port device team_slave_1 added [ 60.839105][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.848636][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.856769][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.864577][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.872956][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.880284][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.888422][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.897704][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.909510][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.921239][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.938238][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.945909][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.954278][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.961820][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.969318][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.977735][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.043780][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.052083][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.079743][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.094186][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.115456][ T4185] team0: Port device team_slave_0 added [ 61.125560][ T4190] team0: Port device team_slave_0 added [ 61.134535][ T4190] team0: Port device team_slave_1 added [ 61.141821][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.149151][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.176365][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.195198][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.207400][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.226980][ T4185] team0: Port device team_slave_1 added [ 61.256703][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.304667][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.312184][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.339527][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.367656][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.375446][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.401966][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.416298][ T4184] team0: Port device team_slave_0 added [ 61.432893][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.440937][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.469439][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.489636][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.497150][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.505140][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.513247][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.540566][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.554224][ T4184] team0: Port device team_slave_1 added [ 61.566492][ T4183] team0: Port device team_slave_0 added [ 61.595253][ T4190] device hsr_slave_0 entered promiscuous mode [ 61.602558][ T4190] device hsr_slave_1 entered promiscuous mode [ 61.609368][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.618563][ T4190] Cannot create hsr debugfs directory [ 61.633682][ T4183] team0: Port device team_slave_1 added [ 61.672967][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.680752][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.709193][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.752490][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.759514][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.787489][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.809702][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.817367][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.825017][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.832855][ T4185] Cannot create hsr debugfs directory [ 61.842484][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.849752][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.877426][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.901345][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 61.901374][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 61.901909][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 61.907633][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 61.938796][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.946184][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.973348][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.984528][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 62.025410][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.033066][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.041432][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.050649][ T4184] Cannot create hsr debugfs directory [ 62.149386][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.156850][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.164724][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.173123][ T4183] Cannot create hsr debugfs directory [ 62.390400][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.402132][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.412764][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.425640][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.477685][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.491714][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.505206][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.529474][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.588096][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.606510][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.624062][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.638593][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.663562][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.725609][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.736877][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.748584][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.763152][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.778387][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.791054][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.803853][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.814954][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.826215][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.833994][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.846028][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.862593][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.913640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.923478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.933464][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.940713][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.948682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.962424][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.977028][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.994047][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.006554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.028641][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.037304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.047494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.057381][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.091927][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.115113][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.123196][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.136661][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.147352][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.155160][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.164219][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.173727][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.183495][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.192493][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.201558][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.208663][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.216913][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.225274][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.236546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.245926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.292475][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.302588][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.313537][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.322640][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.332320][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.341149][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.349667][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.378071][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.388783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.419158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.444649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.457802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.502178][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.527706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.539418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.549688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.562073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.572104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.582840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.592104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.602447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.612969][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.620860][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.629253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.639383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.648341][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.656842][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.665914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.676961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.687841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.698346][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.717228][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.727663][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.761828][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.778872][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.811969][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.826001][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.844340][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.856027][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.868639][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.885148][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.898295][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.912285][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.921642][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.931182][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.938821][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.953867][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.966253][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.983496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.990408][ T1335] Bluetooth: hci0: command 0x041b tx timeout [ 63.997677][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 63.998739][ T1335] Bluetooth: hci3: command 0x041b tx timeout [ 64.008616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.021605][ T1335] Bluetooth: hci2: command 0x041b tx timeout [ 64.021760][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.035772][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.078627][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.086632][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 64.106670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.117492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.134442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.148525][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.156391][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.170979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.179176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.187631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.197752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.227813][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.242298][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.262105][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.281193][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.297331][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.309112][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.326315][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.336706][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.355559][ T4190] device veth0_vlan entered promiscuous mode [ 64.377335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.388078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.406136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.418898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.435802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.446925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.456337][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.463568][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.485142][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.497013][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.515080][ T4190] device veth1_vlan entered promiscuous mode [ 64.527020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.535856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.546833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.556236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.566476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.576321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.586494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.596981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.605164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.613504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.643849][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.664947][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.675231][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.691353][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.698740][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.707182][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.750451][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.759281][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.771973][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.824352][ T4190] device veth0_macvtap entered promiscuous mode [ 64.840687][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.850072][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.862162][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.871713][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.881656][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.892275][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.901707][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.912272][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.923136][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.932539][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.941308][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.951439][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.960695][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.969277][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.979950][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.988796][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.997285][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.005470][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.024597][ T4186] device veth0_vlan entered promiscuous mode [ 65.035292][ T4190] device veth1_macvtap entered promiscuous mode [ 65.053751][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.073241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.085340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.095553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.111378][ T4186] device veth1_vlan entered promiscuous mode [ 65.136922][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.148239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.157819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.167260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.176404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.187157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.211928][ T4185] device veth0_vlan entered promiscuous mode [ 65.219953][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.236819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.253754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.276250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.285961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.295478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.309229][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.325517][ T4185] device veth1_vlan entered promiscuous mode [ 65.337064][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.346692][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.357711][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.366955][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.388156][ T4186] device veth0_macvtap entered promiscuous mode [ 65.421636][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.431809][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.442775][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.452157][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.461820][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.469662][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.477935][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.491301][ T4186] device veth1_macvtap entered promiscuous mode [ 65.508189][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.517569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.527015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.571312][ T4184] device veth0_vlan entered promiscuous mode [ 65.599456][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.612910][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.627141][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.636409][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.647111][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.657832][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.667374][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.680403][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.688297][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.705525][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.716905][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.729016][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.746621][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.755765][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.764970][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.776291][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.789296][ T4184] device veth1_vlan entered promiscuous mode [ 65.798484][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.807036][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.815819][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.825147][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.834233][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.846674][ T4185] device veth0_macvtap entered promiscuous mode [ 65.863068][ T4185] device veth1_macvtap entered promiscuous mode [ 65.935268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.945622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.956959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.965993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.975493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.996197][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.006860][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.017646][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.030629][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.041464][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.052632][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.060944][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 66.062905][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 66.068519][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 66.076366][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.109733][ T4184] device veth0_macvtap entered promiscuous mode [ 66.124623][ T4259] Bluetooth: hci0: command 0x040f tx timeout [ 66.125320][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.142804][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.146891][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 66.152210][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.169242][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.181134][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.192154][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.204175][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.216723][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.238468][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.242273][ T4184] device veth1_macvtap entered promiscuous mode [ 66.257018][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.274166][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.284146][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.293720][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.304879][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.313366][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.322927][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.333172][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.341693][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.358695][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.370812][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.379681][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.390781][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.402195][ T4183] device veth0_vlan entered promiscuous mode [ 66.436309][ T1408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.446052][ T1408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.474492][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.503348][ T4183] device veth1_vlan entered promiscuous mode [ 66.519595][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.522661][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.535864][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.555572][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.557470][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.567128][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.584636][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.596087][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.607867][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.637113][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.646814][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.656041][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.669178][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.689157][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.691341][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.710538][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.721316][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.732197][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.742489][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.753429][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.765209][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.813316][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.822632][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.834984][ T1408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.863510][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.881428][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.892658][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.901183][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.904496][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.923278][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.927134][ T4292] loop3: detected capacity change from 0 to 2048 [ 66.957311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.017387][ T4183] device veth0_macvtap entered promiscuous mode [ 67.039454][ T4292] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 67.064474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.081828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.100005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.147204][ T4183] device veth1_macvtap entered promiscuous mode [ 67.162015][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.175130][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.246006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.259724][ T4296] EXT4-fs (loop3): shut down requested (0) [ 67.266245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.277106][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.296888][ T4292] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.305198][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.319741][ T4292] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 436 with error 28 [ 67.330806][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.353204][ T4292] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.353204][ T4292] [ 67.365952][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.367600][ T4292] EXT4-fs (loop3): Total free blocks count 0 [ 67.383904][ T4292] EXT4-fs (loop3): Free/Dirty block details [ 67.384837][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.402750][ T4292] EXT4-fs (loop3): free_blocks=2415919104 [ 67.408687][ T4292] EXT4-fs (loop3): dirty_blocks=448 [ 67.414566][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.415615][ T4292] EXT4-fs (loop3): Block reservation details [ 67.432938][ T4292] EXT4-fs (loop3): i_reserved_data_blocks=28 [ 67.437920][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.456922][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.474018][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.487677][ T4290] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 67.511055][ T1408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.533196][ T1408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.578006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.593146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.610499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.625105][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.650624][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.679866][ T26] audit: type=1326 audit(1754994647.014:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 67.689340][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.713770][ T26] audit: type=1326 audit(1754994647.024:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 67.714241][ T26] audit: type=1326 audit(1754994647.024:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 67.760089][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.794850][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.807300][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.817677][ T26] audit: type=1326 audit(1754994647.024:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 67.818116][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.851833][ T26] audit: type=1326 audit(1754994647.024:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 67.855312][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.882329][ T26] audit: type=1326 audit(1754994647.024:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 67.888540][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.908875][ T26] audit: type=1326 audit(1754994647.024:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 67.956282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.966974][ T26] audit: type=1326 audit(1754994647.024:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 67.979318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.998935][ T26] audit: type=1326 audit(1754994647.024:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 68.027113][ T4305] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 68.036974][ T26] audit: type=1326 audit(1754994647.024:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 68.087465][ T4305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 68.105495][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.120142][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.142867][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 68.150904][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 68.154308][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.171369][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 68.177863][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 68.195002][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.234406][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.264545][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.364868][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 68.910994][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.660035][ T4329] device syzkaller1 entered promiscuous mode [ 69.679449][ T4323] tipc: Started in network mode [ 69.693723][ T4323] tipc: Node identity 727986b507bd, cluster identity 4711 [ 69.722624][ T4323] tipc: Enabled bearer , priority 0 [ 69.760476][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.788355][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.807247][ T4333] device syzkaller0 entered promiscuous mode [ 69.899476][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.926027][ T4333] tipc: Resetting bearer [ 69.948247][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 69.967017][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.975569][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.986479][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.995381][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.206774][ T4322] tipc: Resetting bearer [ 70.250047][ T4322] tipc: Disabling bearer [ 70.490138][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.514624][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.812293][ T4346] loop3: detected capacity change from 0 to 512 [ 70.879333][ T4346] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.089655][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.109619][ T4346] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 71.124670][ T4346] EXT4-fs (loop3): orphan cleanup on readonly fs [ 71.168894][ T4346] EXT4-fs (loop3): 1 orphan inode deleted [ 71.199520][ T4346] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.443433][ T1110] cfg80211: failed to load regulatory.db [ 71.899754][ T4355] bridge0: port 3(gretap0) entered blocking state [ 71.906943][ T4355] bridge0: port 3(gretap0) entered disabled state [ 71.922896][ T4355] device gretap0 entered promiscuous mode [ 71.931898][ T4355] bridge0: port 3(gretap0) entered blocking state [ 71.939127][ T4355] bridge0: port 3(gretap0) entered forwarding state [ 72.459092][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.480263][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.719971][ T4364] loop3: detected capacity change from 0 to 128 [ 72.789966][ T4362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.839449][ T4368] loop2: detected capacity change from 0 to 128 [ 72.848801][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 72.848817][ T26] audit: type=1800 audit(1754994652.184:15): pid=4364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="file2" dev="loop3" ino=1048590 res=0 errno=0 [ 72.911456][ T4364] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 72.997291][ T4364] FAT-fs (loop3): Filesystem has been set read-only [ 73.014177][ T4362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.074648][ T4371] Zero length message leads to an empty skb [ 73.075573][ T4364] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 73.134842][ T4374] syz.4.21[4374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.134946][ T4374] syz.4.21[4374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.156793][ T4364] attempt to access beyond end of device [ 73.156793][ T4364] loop3: rw=2049, want=2073, limit=128 [ 73.182888][ T4362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.208113][ T4374] loop4: detected capacity change from 0 to 128 [ 73.281511][ T4377] device vlan0 entered promiscuous mode [ 73.417858][ T4377] syz.2.20 (4377) used greatest stack depth: 20000 bytes left [ 73.576029][ T4362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.649357][ T26] audit: type=1326 audit(1754994652.984:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 73.689799][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.729061][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.755240][ T26] audit: type=1326 audit(1754994652.984:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 73.784573][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.796261][ T4383] device bridge_slave_0 left promiscuous mode [ 73.808353][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.832439][ T26] audit: type=1326 audit(1754994652.984:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 73.864472][ T26] audit: type=1326 audit(1754994652.984:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 73.894511][ T26] audit: type=1326 audit(1754994652.984:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 73.926009][ T4383] device bridge_slave_1 left promiscuous mode [ 73.942856][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.957647][ T26] audit: type=1326 audit(1754994652.994:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 73.987222][ T26] audit: type=1326 audit(1754994652.994:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 74.017379][ T26] audit: type=1326 audit(1754994652.994:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 74.049664][ T26] audit: type=1326 audit(1754994652.994:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4378 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9cff99be9 code=0x7ffc0000 [ 74.081882][ T4383] bond0: (slave bond_slave_0): Releasing backup interface [ 74.123238][ T4383] bond0: (slave bond_slave_1): Releasing backup interface [ 74.216230][ T4383] team0: Port device team_slave_0 removed [ 74.281429][ T4383] team0: Port device team_slave_1 removed [ 74.298631][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.328213][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.354114][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.366971][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.667026][ T4362] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763448][ T4362] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.823435][ T4362] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.871728][ T4362] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.892631][ T4389] netlink: 256 bytes leftover after parsing attributes in process `syz.2.26'. [ 75.372321][ T4401] hub 9-0:1.0: USB hub found [ 75.398048][ T4401] hub 9-0:1.0: 1 port detected [ 75.488605][ T4404] loop0: detected capacity change from 0 to 1764 [ 75.747762][ T4409] loop2: detected capacity change from 0 to 512 [ 75.838757][ T4411] capability: warning: `syz.0.35' uses deprecated v2 capabilities in a way that may be insecure [ 75.894366][ T4409] EXT4-fs (loop2): Ignoring removed nobh option [ 75.933562][ T4409] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 76.040734][ T4409] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.34: invalid indirect mapped block 256 (level 1) [ 76.146668][ T4409] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.34: invalid indirect mapped block 2683928664 (level 1) [ 76.191652][ T4409] EXT4-fs (loop2): 1 truncate cleaned up [ 76.198435][ T4409] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,noquota,usrjquota=.grpquota,barrier=0x0000000000000008,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 76.453320][ T4422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.666949][ T4422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.710338][ T4226] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.744343][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.765002][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.788126][ T4413] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 76.803855][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.843932][ T4429] device bridge_slave_0 left promiscuous mode [ 76.874155][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.874393][ T4330] Set syz1 is full, maxelem 65536 reached [ 76.897536][ T4429] device bridge_slave_1 left promiscuous mode [ 76.912921][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.954278][ T4429] bond0: (slave bond_slave_0): Releasing backup interface [ 76.972381][ T4226] usb 3-1: Using ep0 maxpacket: 8 [ 77.010833][ T4439] syz.1.42[4439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.011047][ T4439] syz.1.42[4439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.024187][ T4429] bond0: (slave bond_slave_1): Releasing backup interface [ 77.072075][ T4439] loop1: detected capacity change from 0 to 128 [ 77.100582][ T4226] usb 3-1: config 94 has too many interfaces: 202, using maximum allowed: 32 [ 77.122901][ T4226] usb 3-1: config 94 has an invalid descriptor of length 0, skipping remainder of the config [ 77.172015][ T4429] team0: Port device team_slave_0 removed [ 77.192074][ T4226] usb 3-1: config 94 has 0 interfaces, different from the descriptor's value: 202 [ 77.219073][ T4429] team0: Port device team_slave_1 removed [ 77.219887][ T4226] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 77.246118][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.255109][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.265403][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.309411][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.331108][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.484093][ T4422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.588284][ T4226] usb 3-1: string descriptor 0 read error: -71 [ 77.636817][ T4226] usb 3-1: USB disconnect, device number 2 [ 77.693153][ T4422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.777540][ T4459] device vlan0 entered promiscuous mode [ 77.984668][ T4422] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.003044][ T4468] loop1: detected capacity change from 0 to 128 [ 78.037706][ T4422] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.069349][ T4422] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.098636][ T4422] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.207984][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 78.208002][ T26] audit: type=1326 audit(1754994657.544:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 78.321547][ T26] audit: type=1326 audit(1754994657.594:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 78.378902][ T4480] loop2: detected capacity change from 0 to 128 [ 78.408445][ T26] audit: type=1326 audit(1754994657.594:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 78.521632][ T4480] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 78.534866][ T26] audit: type=1326 audit(1754994657.594:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 78.579753][ T4480] FAT-fs (loop2): Filesystem has been set read-only [ 78.601758][ T4480] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 78.625725][ T4480] attempt to access beyond end of device [ 78.625725][ T4480] loop2: rw=2049, want=2073, limit=128 [ 78.628392][ T26] audit: type=1326 audit(1754994657.594:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 78.871878][ T26] audit: type=1326 audit(1754994657.594:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 78.896539][ T26] audit: type=1326 audit(1754994657.594:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 80.162129][ T4496] loop4: detected capacity change from 0 to 512 [ 80.893015][ T26] audit: type=1326 audit(1754994657.594:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 80.923176][ T26] audit: type=1326 audit(1754994657.594:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 80.948377][ T26] audit: type=1326 audit(1754994657.594:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 80.981236][ T4494] bridge0: port 1(gretap0) entered blocking state [ 80.987961][ T4494] bridge0: port 1(gretap0) entered disabled state [ 80.995868][ T4494] device gretap0 entered promiscuous mode [ 81.002436][ T4494] bridge0: port 1(gretap0) entered blocking state [ 81.008986][ T4494] bridge0: port 1(gretap0) entered forwarding state [ 81.186322][ T4496] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.196925][ T4496] EXT4-fs (loop4): orphan cleanup on readonly fs [ 81.222012][ T4496] EXT4-fs (loop4): 1 orphan inode deleted [ 81.229003][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.230558][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 81.571256][ T4495] syz.4.54 (4495) used greatest stack depth: 18592 bytes left [ 81.754538][ T4514] device syzkaller1 entered promiscuous mode [ 82.817589][ T4521] tipc: Started in network mode [ 82.840328][ T4521] tipc: Node identity 4a10ee2a2099, cluster identity 4711 [ 82.888552][ T4521] tipc: Enabled bearer , priority 0 [ 82.908987][ T4522] device syzkaller0 entered promiscuous mode [ 82.969180][ T4521] tipc: Resetting bearer [ 82.994371][ T4520] tipc: Resetting bearer [ 83.051355][ T4520] tipc: Disabling bearer [ 83.403044][ T4526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.469060][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 83.469080][ T26] audit: type=1326 audit(1754994662.804:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 83.571188][ T26] audit: type=1326 audit(1754994662.804:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 83.617500][ T4526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.661588][ T26] audit: type=1326 audit(1754994662.804:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 83.754127][ T26] audit: type=1326 audit(1754994662.804:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 83.777592][ T26] audit: type=1326 audit(1754994662.804:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 83.810557][ T26] audit: type=1326 audit(1754994662.804:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 84.816421][ T26] audit: type=1326 audit(1754994662.804:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 84.902683][ T26] audit: type=1326 audit(1754994662.804:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 84.937948][ T4526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.976838][ T26] audit: type=1326 audit(1754994662.804:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 85.018438][ T4537] netlink: 'syz.0.66': attribute type 1 has an invalid length. [ 85.027856][ T26] audit: type=1326 audit(1754994662.804:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f245da16be9 code=0x7ffc0000 [ 85.065090][ T4537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 85.123052][ T4526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.232043][ T4526] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.267207][ T4526] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.295043][ T4526] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.328377][ T4526] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.417680][ T4542] loop0: detected capacity change from 0 to 128 [ 85.517365][ T4540] ODEBUG: Out of memory. ODEBUG disabled [ 85.640692][ T4542] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 85.673350][ T4542] FAT-fs (loop0): Filesystem has been set read-only [ 85.680838][ T4542] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 85.689269][ T4542] attempt to access beyond end of device [ 85.689269][ T4542] loop0: rw=2049, want=2073, limit=128 [ 86.112941][ T4547] bridge0: port 3(gretap0) entered blocking state [ 86.119874][ T4547] bridge0: port 3(gretap0) entered disabled state [ 86.133518][ T4547] device gretap0 entered promiscuous mode [ 86.142516][ T4547] bridge0: port 3(gretap0) entered blocking state [ 86.149110][ T4547] bridge0: port 3(gretap0) entered forwarding state [ 87.220784][ T4559] loop1: detected capacity change from 0 to 512 [ 87.480798][ T4559] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 87.499750][ T4559] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.533296][ T4559] EXT4-fs (loop1): 1 orphan inode deleted [ 87.797599][ T4559] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.287993][ T4572] loop0: detected capacity change from 0 to 512 [ 88.425301][ T4572] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 88.441760][ T4575] tipc: Started in network mode [ 88.446977][ T4575] tipc: Node identity ba6bcbae4a81, cluster identity 4711 [ 88.454682][ T4575] tipc: Enabled bearer , priority 0 [ 88.464522][ T4575] device syzkaller0 entered promiscuous mode [ 88.486633][ T4575] tipc: Resetting bearer [ 88.496379][ T4574] tipc: Resetting bearer [ 88.514423][ T4572] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.528818][ T4574] tipc: Disabling bearer [ 88.633017][ T4572] EXT4-fs (loop0): 1 orphan inode deleted [ 88.655949][ T4572] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.263212][ T4589] loop0: detected capacity change from 0 to 512 [ 90.420476][ T4589] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 90.441272][ T4589] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.485719][ T4589] EXT4-fs (loop0): 1 orphan inode deleted [ 90.562900][ T4589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.654993][ T4596] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 90.724824][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 90.818563][ T4599] loop0: detected capacity change from 0 to 2048 [ 90.900945][ T4599] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 91.073937][ T4603] EXT4-fs (loop0): shut down requested (0) [ 91.078595][ T4599] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.110502][ T4599] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 46 with error 28 [ 91.137646][ T4599] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.137646][ T4599] [ 91.164839][ T4599] EXT4-fs (loop0): Total free blocks count 0 [ 91.186185][ T4599] EXT4-fs (loop0): Free/Dirty block details [ 91.213895][ T4599] EXT4-fs (loop0): free_blocks=2415919104 [ 91.244041][ T4599] EXT4-fs (loop0): dirty_blocks=48 [ 91.270240][ T4599] EXT4-fs (loop0): Block reservation details [ 91.288770][ T4599] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 91.337481][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 91.519361][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 91.519381][ T26] audit: type=1326 audit(1754994670.854:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 91.624078][ T26] audit: type=1326 audit(1754994670.864:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 91.709674][ T4609] bridge0: port 1(gretap0) entered blocking state [ 91.738267][ T4609] bridge0: port 1(gretap0) entered disabled state [ 91.742390][ T26] audit: type=1326 audit(1754994670.864:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 91.805135][ T26] audit: type=1326 audit(1754994670.864:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 91.809449][ T4609] device gretap0 entered promiscuous mode [ 91.862853][ T26] audit: type=1326 audit(1754994670.864:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 91.919375][ T26] audit: type=1326 audit(1754994670.864:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 91.943614][ T4609] bridge0: port 1(gretap0) entered blocking state [ 91.950458][ T4609] bridge0: port 1(gretap0) entered forwarding state [ 92.024979][ T26] audit: type=1326 audit(1754994670.864:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 92.116504][ T26] audit: type=1326 audit(1754994670.864:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 92.223745][ T26] audit: type=1326 audit(1754994670.864:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 92.369302][ T26] audit: type=1326 audit(1754994670.864:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4606 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2781fe1be9 code=0x7ffc0000 [ 92.595172][ T4632] loop3: detected capacity change from 0 to 512 [ 92.639013][ T4636] process 'syz.4.95' launched '/dev/fd/3' with NULL argv: empty string added [ 92.737601][ T4632] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 92.791467][ T4632] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.828505][ T4632] EXT4-fs (loop3): 1 orphan inode deleted [ 92.886784][ T4632] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.974261][ T4540] Set syz1 is full, maxelem 65536 reached [ 94.559838][ T4680] loop3: detected capacity change from 0 to 512 [ 95.251149][ T4680] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 95.260828][ T4680] EXT4-fs (loop3): orphan cleanup on readonly fs [ 95.272707][ T4680] EXT4-fs (loop3): 1 orphan inode deleted [ 95.279515][ T4680] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.672187][ T4693] sd 0:0:1:0: device reset [ 95.751788][ T4699] netlink: 56 bytes leftover after parsing attributes in process `syz.3.114'. [ 96.235991][ T4707] loop3: detected capacity change from 0 to 128 [ 96.300888][ T4708] loop1: detected capacity change from 0 to 512 [ 96.342402][ T4708] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 96.363652][ T4710] loop9: detected capacity change from 0 to 7 [ 96.411341][ T4708] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 96.456862][ T4710] Dev loop9: unable to read RDB block 7 [ 96.471394][ T4708] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.497861][ T4710] loop9: unable to read partition table [ 96.516475][ T4710] loop9: partition table beyond EOD, truncated [ 96.544062][ T4705] bridge0: port 3(gretap0) entered disabled state [ 96.563945][ T4710] loop_reread_partitions: partition scan of loop9 (袻xdGݡ [ 96.563945][ T4710] ) failed (rc=-5) [ 96.693037][ T4708] [ 96.695776][ T4708] ====================================================== [ 96.703209][ T4708] WARNING: possible circular locking dependency detected [ 96.710542][ T4708] 5.15.189-syzkaller #0 Not tainted [ 96.715975][ T4708] ------------------------------------------------------ [ 96.723632][ T4708] syz.1.119/4708 is trying to acquire lock: [ 96.729823][ T4708] ffff88806196a060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x32f/0x1b30 [ 96.739630][ T4708] [ 96.739630][ T4708] but task is already holding lock: [ 96.747720][ T4708] ffff88807d9ba208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 96.757528][ T4708] [ 96.757528][ T4708] which lock already depends on the new lock. [ 96.757528][ T4708] [ 96.768694][ T4708] [ 96.768694][ T4708] the existing dependency chain (in reverse order) is: [ 96.778428][ T4708] [ 96.778428][ T4708] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 96.786560][ T4708] down_read+0x44/0x2e0 [ 96.791455][ T4708] v2_read_dquot+0x4a/0x110 [ 96.796596][ T4708] dquot_acquire+0x152/0x520 [ 96.801817][ T4708] ext4_acquire_dquot+0x2d9/0x4a0 [ 96.807396][ T4708] dqget+0x778/0xeb0 [ 96.812198][ T4708] __dquot_initialize+0x328/0xcb0 [ 96.817883][ T4708] ext4_process_orphan+0x54/0x300 [ 96.823737][ T4708] ext4_orphan_cleanup+0xaa9/0x12e0 [ 96.829878][ T4708] ext4_fill_super+0x9288/0x9a00 [ 96.835815][ T4708] mount_bdev+0x287/0x3c0 [ 96.840764][ T4708] legacy_get_tree+0xe6/0x180 [ 96.846140][ T4708] vfs_get_tree+0x88/0x270 [ 96.851415][ T4708] do_new_mount+0x24a/0xa40 [ 96.856748][ T4708] __se_sys_mount+0x2d6/0x3c0 [ 96.862335][ T4708] do_syscall_64+0x4c/0xa0 [ 96.867617][ T4708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.874245][ T4708] [ 96.874245][ T4708] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 96.882238][ T4708] __mutex_lock_common+0x1eb/0x2390 [ 96.888430][ T4708] mutex_lock_nested+0x17/0x20 [ 96.893928][ T4708] dquot_commit+0x5a/0x410 [ 96.899004][ T4708] ext4_write_dquot+0x1f0/0x360 [ 96.904473][ T4708] mark_all_dquot_dirty+0x1e3/0x400 [ 96.910323][ T4708] __dquot_free_space+0x7ca/0xb90 [ 96.916075][ T4708] ext4_free_blocks+0x1af5/0x2480 [ 96.921752][ T4708] ext4_ext_remove_space+0x1eaa/0x43a0 [ 96.928111][ T4708] ext4_ext_truncate+0x192/0x240 [ 96.934067][ T4708] ext4_truncate+0x9f1/0x10d0 [ 96.939882][ T4708] ext4_evict_inode+0xb43/0x1080 [ 96.945896][ T4708] evict+0x485/0x870 [ 96.950870][ T4708] ext4_orphan_cleanup+0xaa9/0x12e0 [ 96.957298][ T4708] ext4_fill_super+0x9288/0x9a00 [ 96.963241][ T4708] mount_bdev+0x287/0x3c0 [ 96.968184][ T4708] legacy_get_tree+0xe6/0x180 [ 96.973416][ T4708] vfs_get_tree+0x88/0x270 [ 96.978355][ T4708] do_new_mount+0x24a/0xa40 [ 96.983563][ T4708] __se_sys_mount+0x2d6/0x3c0 [ 96.988983][ T4708] do_syscall_64+0x4c/0xa0 [ 96.994239][ T4708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.000807][ T4708] [ 97.000807][ T4708] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 97.008628][ T4708] __lock_acquire+0x2c33/0x7c60 [ 97.014151][ T4708] lock_acquire+0x197/0x3f0 [ 97.019193][ T4708] down_read+0x44/0x2e0 [ 97.023882][ T4708] ext4_map_blocks+0x32f/0x1b30 [ 97.029256][ T4708] ext4_getblk+0x16d/0x630 [ 97.034186][ T4708] ext4_bread+0x26/0x180 [ 97.038942][ T4708] ext4_quota_read+0x1b3/0x3a0 [ 97.044219][ T4708] find_tree_dqentry+0x188/0xb30 [ 97.049672][ T4708] find_tree_dqentry+0x3eb/0xb30 [ 97.055126][ T4708] qtree_read_dquot+0x13c/0x680 [ 97.060573][ T4708] v2_read_dquot+0xc0/0x110 [ 97.065597][ T4708] dquot_acquire+0x152/0x520 [ 97.070698][ T4708] ext4_acquire_dquot+0x2d9/0x4a0 [ 97.076239][ T4708] dqget+0x778/0xeb0 [ 97.080658][ T4708] __dquot_initialize+0x328/0xcb0 [ 97.086197][ T4708] ext4_process_orphan+0x54/0x300 [ 97.091824][ T4708] ext4_orphan_cleanup+0xaa9/0x12e0 [ 97.097711][ T4708] ext4_fill_super+0x9288/0x9a00 [ 97.103252][ T4708] mount_bdev+0x287/0x3c0 [ 97.108107][ T4708] legacy_get_tree+0xe6/0x180 [ 97.113411][ T4708] vfs_get_tree+0x88/0x270 [ 97.118342][ T4708] do_new_mount+0x24a/0xa40 [ 97.123360][ T4708] __se_sys_mount+0x2d6/0x3c0 [ 97.128575][ T4708] do_syscall_64+0x4c/0xa0 [ 97.133516][ T4708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.139941][ T4708] [ 97.139941][ T4708] other info that might help us debug this: [ 97.139941][ T4708] [ 97.150166][ T4708] Chain exists of: [ 97.150166][ T4708] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 97.150166][ T4708] [ 97.163896][ T4708] Possible unsafe locking scenario: [ 97.163896][ T4708] [ 97.171891][ T4708] CPU0 CPU1 [ 97.177330][ T4708] ---- ---- [ 97.182688][ T4708] lock(&s->s_dquot.dqio_sem); [ 97.187637][ T4708] lock(&dquot->dq_lock); [ 97.194663][ T4708] lock(&s->s_dquot.dqio_sem); [ 97.202049][ T4708] lock(&ei->i_data_sem/2); [ 97.207069][ T4708] [ 97.207069][ T4708] *** DEADLOCK *** [ 97.207069][ T4708] [ 97.215317][ T4708] 3 locks held by syz.1.119/4708: [ 97.220383][ T4708] #0: ffff88807d9ba0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 97.230517][ T4708] #1: ffff888061a7a968 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 97.240698][ T4708] #2: ffff88807d9ba208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 97.250828][ T4708] [ 97.250828][ T4708] stack backtrace: [ 97.256992][ T4708] CPU: 1 PID: 4708 Comm: syz.1.119 Not tainted 5.15.189-syzkaller #0 [ 97.266017][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.276538][ T4708] Call Trace: [ 97.280027][ T4708] [ 97.283001][ T4708] dump_stack_lvl+0x168/0x230 [ 97.287693][ T4708] ? load_image+0x3b0/0x3b0 [ 97.292409][ T4708] ? show_regs_print_info+0x20/0x20 [ 97.297616][ T4708] ? print_circular_bug+0x12b/0x1a0 [ 97.303126][ T4708] check_noncircular+0x274/0x310 [ 97.308177][ T4708] ? add_chain_block+0x940/0x940 [ 97.313111][ T4708] ? lockdep_lock+0xdc/0x1e0 [ 97.317707][ T4708] ? mark_lock+0x94/0x320 [ 97.322391][ T4708] ? mark_lock+0x94/0x320 [ 97.326938][ T4708] ? _find_first_zero_bit+0xce/0xf0 [ 97.332166][ T4708] __lock_acquire+0x2c33/0x7c60 [ 97.337648][ T4708] ? verify_lock_unused+0x140/0x140 [ 97.343121][ T4708] ? verify_lock_unused+0x140/0x140 [ 97.348784][ T4708] lock_acquire+0x197/0x3f0 [ 97.353395][ T4708] ? ext4_map_blocks+0x32f/0x1b30 [ 97.358851][ T4708] ? deref_stack_reg+0xd0/0x120 [ 97.364409][ T4708] ? __might_sleep+0xf0/0xf0 [ 97.369322][ T4708] ? read_lock_is_recursive+0x10/0x10 [ 97.374705][ T4708] ? rcu_is_watching+0x11/0xa0 [ 97.379501][ T4708] down_read+0x44/0x2e0 [ 97.383662][ T4708] ? ext4_map_blocks+0x32f/0x1b30 [ 97.388793][ T4708] ext4_map_blocks+0x32f/0x1b30 [ 97.393750][ T4708] ? ext4_issue_zeroout+0x250/0x250 [ 97.399506][ T4708] ? __kasan_kmalloc+0xcc/0xf0 [ 97.404566][ T4708] ? __kasan_kmalloc+0xb5/0xf0 [ 97.411259][ T4708] ? find_tree_dqentry+0x55/0xb30 [ 97.417009][ T4708] ? find_tree_dqentry+0x3eb/0xb30 [ 97.422356][ T4708] ? qtree_read_dquot+0x13c/0x680 [ 97.427735][ T4708] ? v2_read_dquot+0xc0/0x110 [ 97.433071][ T4708] ? dquot_acquire+0x152/0x520 [ 97.437977][ T4708] ? dqget+0x778/0xeb0 [ 97.442254][ T4708] ? __dquot_initialize+0x328/0xcb0 [ 97.447661][ T4708] ? ext4_process_orphan+0x54/0x300 [ 97.453069][ T4708] ext4_getblk+0x16d/0x630 [ 97.457952][ T4708] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.464289][ T4708] ? ext4_get_block_unwritten+0x30/0x30 [ 97.470212][ T4708] ext4_bread+0x26/0x180 [ 97.474852][ T4708] ext4_quota_read+0x1b3/0x3a0 [ 97.479719][ T4708] ? ext4_show_options+0x50/0x50 [ 97.484848][ T4708] find_tree_dqentry+0x188/0xb30 [ 97.489917][ T4708] find_tree_dqentry+0x3eb/0xb30 [ 97.494890][ T4708] qtree_read_dquot+0x13c/0x680 [ 97.499942][ T4708] ? preempt_count_add+0x8d/0x190 [ 97.505145][ T4708] ? down_read+0x1aa/0x2e0 [ 97.509894][ T4708] v2_read_dquot+0xc0/0x110 [ 97.514807][ T4708] dquot_acquire+0x152/0x520 [ 97.519525][ T4708] ext4_acquire_dquot+0x2d9/0x4a0 [ 97.525104][ T4708] dqget+0x778/0xeb0 [ 97.529324][ T4708] __dquot_initialize+0x328/0xcb0 [ 97.534561][ T4708] ? dquot_initialize+0x20/0x20 [ 97.539525][ T4708] ? ext4_get_projid+0x140/0x140 [ 97.544983][ T4708] ext4_process_orphan+0x54/0x300 [ 97.550058][ T4708] ext4_orphan_cleanup+0xaa9/0x12e0 [ 97.555735][ T4708] ? ext4_orphan_del+0xb90/0xb90 [ 97.561021][ T4708] ? errseq_check_and_advance+0x62/0x120 [ 97.566664][ T4708] ext4_fill_super+0x9288/0x9a00 [ 97.571630][ T4708] ? ext4_mount+0x40/0x40 [ 97.576203][ T4708] ? set_blocksize+0x1f1/0x370 [ 97.580977][ T4708] ? sb_set_blocksize+0xa5/0xe0 [ 97.586448][ T4708] mount_bdev+0x287/0x3c0 [ 97.590997][ T4708] ? ext4_mount+0x40/0x40 [ 97.595592][ T4708] legacy_get_tree+0xe6/0x180 [ 97.600463][ T4708] ? ext4_errno_to_code+0x160/0x160 [ 97.606591][ T4708] vfs_get_tree+0x88/0x270 [ 97.611556][ T4708] do_new_mount+0x24a/0xa40 [ 97.616694][ T4708] __se_sys_mount+0x2d6/0x3c0 [ 97.622636][ T4708] ? __x64_sys_mount+0xc0/0xc0 [ 97.628525][ T4708] ? lockdep_hardirqs_on+0x94/0x140 [ 97.634055][ T4708] ? __x64_sys_mount+0x1c/0xc0 [ 97.639097][ T4708] do_syscall_64+0x4c/0xa0 [ 97.644165][ T4708] ? clear_bhb_loop+0x30/0x80 [ 97.649347][ T4708] ? clear_bhb_loop+0x30/0x80 [ 97.654519][ T4708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.660753][ T4708] RIP: 0033:0x7feea3c2238a [ 97.665204][ T4708] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.685255][ T4708] RSP: 002b:00007feea1e66e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.693893][ T4708] RAX: ffffffffffffffda RBX: 00007feea1e66ef0 RCX: 00007feea3c2238a [ 97.701965][ T4708] RDX: 0000200000000040 RSI: 0000200000000500 RDI: 00007feea1e66eb0 [ 97.710120][ T4708] RBP: 0000200000000040 R08: 00007feea1e66ef0 R09: 000000000021c91c [ 97.718351][ T4708] R10: 000000000021c91c R11: 0000000000000246 R12: 0000200000000500 [ 97.726760][ T4708] R13: 00007feea1e66eb0 R14: 00000000000004e0 R15: 000000000000002c [ 97.734831][ T4708] [ 97.855100][ T4708] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.119: Allocating blocks 41-42 which overlap fs metadata [ 98.185062][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.193214][ T4708] __quota_error: 86 callbacks suppressed [ 98.193235][ T4708] Quota error (device loop1): write_blk: dquota write failed [ 98.230337][ T4708] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 98.250433][ T4708] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.119: Allocating blocks 41-42 which overlap fs metadata [ 98.280242][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.287043][ T4708] Quota error (device loop1): write_blk: dquota write failed [ 98.320342][ T4708] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 98.339622][ T4708] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.119: Failed to acquire dquot type 1 [ 98.375535][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.390384][ T4708] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 98.417314][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.424730][ T4708] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #12: comm syz.1.119: corrupted inode contents [ 98.453176][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.468066][ T4708] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #12: comm syz.1.119: mark_inode_dirty error [ 98.484475][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.503966][ T4708] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #12: comm syz.1.119: corrupted inode contents [ 98.521628][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.528456][ T4708] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.119: mark_inode_dirty error [ 98.528558][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.540111][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.547154][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.553881][ T4708] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #12: comm syz.1.119: corrupted inode contents [ 98.589309][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.606261][ T4708] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 98.626598][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.636717][ T4708] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #12: comm syz.1.119: corrupted inode contents [ 98.659257][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.669389][ T4708] EXT4-fs error (device loop1): ext4_truncate:4273: inode #12: comm syz.1.119: mark_inode_dirty error [ 98.690232][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.696930][ T4708] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 98.717601][ T4708] EXT4-fs (loop1): Remounting filesystem read-only [ 98.738890][ T4708] EXT4-fs (loop1): 1 truncate cleaned up [ 98.750251][ T4708] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,jqfmt=vfsold,nodelalloc,errors=remount-ro,nomblk_io_submit,usrjquota=,mb_optimize_scan=0x0000000000000001,resgid=0x00000000000000002. Quota mode: writeback. [ 99.142591][ T4705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.196112][ T4705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.318672][ T4686] Set syz1 is full, maxelem 65536 reached [ 99.513231][ T4705] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.522035][ T4705] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.531098][ T4705] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.539542][ T4705] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0