last executing test programs: 1.444671445s ago: executing program 2 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)="df", &(0x7f0000000300), 0x4, r1}, 0x38) 1.436586996s ago: executing program 2 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.351064925s ago: executing program 2 (id=141): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2008814, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x5, 0x175, &(0x7f0000000240)="$eJzs27GKE0EYB/BvTS5Gba62WrCxCmplqcgJ4oKipNBOOG08CJhmtQo+ia2P4sMIkiqgMKIbEo0bxMhmc8nv1+SDP0O+mSQzTGC/ppROR+NXo8fT6GdZdO9EHrMsjuNCdKIyCQBgn8xSii8ppXRxEpc+REqp7Y4AgKY5/wHg8Pz1/L/dUmMAQGPc/wHg8Dx99vzh3aI4eZLn/YjPk3JYDqvXKr//oDi5kf90vBw1LcthZ5HfrPL89/woLs/zW7V5L65fq/If2b1HxUp+JU7/6PaoiSUAAACAvTfIF2rv94PBuryqfvl/YOX+3o2r3a1NAwD4B+O3716/ODt7+ea8FL2I2IE2Nig+7UYbDRe9+Rdri2/6LaW0wfD3H6tO216xRorsvz+C2u2iv72dCWja8kffdicAAAAAAAAAAAAAAMA6zT6N1Gl7egAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDrewAAAP//6LlMIA==") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, &(0x7f0000000100)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setpriority(0x0, 0x0, 0x81) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.338452786s ago: executing program 4 (id=144): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0x9, 0x100000000, 0x7fffffffffffffff, 0x3, 0xffffffff}) 1.268396913s ago: executing program 1 (id=147): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff5e, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x70bd26, 0x400000, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@empty}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast2}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) mount$9p_rdma(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x3948041, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x1000}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0xff, 0xdd, 0xf, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x10, 0xfffffffe, 0xfffffffd}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r5, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000001440)="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", 0x5ad, 0x6d91fb6102d8910c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.268169873s ago: executing program 4 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) 1.261497473s ago: executing program 2 (id=149): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) getegid() 1.225679687s ago: executing program 2 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.164579063s ago: executing program 4 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xffef, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) 1.164216993s ago: executing program 1 (id=153): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 1.162029473s ago: executing program 1 (id=154): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='vm_unmapped_area\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) io_setup(0x3, &(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.147140195s ago: executing program 3 (id=155): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x8000000) unshare(0x2c040000) 1.1054435s ago: executing program 4 (id=156): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TIOCMBIS(r1, 0x5416, 0x0) 1.09482522s ago: executing program 3 (id=157): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.032922597s ago: executing program 3 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 1.032612606s ago: executing program 4 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 1.032290667s ago: executing program 3 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.023934387s ago: executing program 1 (id=161): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 998.49246ms ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 936.817646ms ago: executing program 3 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000240)="bf1ea0e3c19ed614ebadb3161741", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 936.474806ms ago: executing program 1 (id=164): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="020a00000200000000000000000000002200c6d6c0c67d574fbafb3b22ed3fc7648f1628c6fae350625f5bfa7e163153cccf461e56cd313513a7e4893bfe2241aa9288f0440eabada4e2e053f88e69a4f99736538eafe4d64ee6321982aa6cc00c03f23d170e6036843b7ffa2b993d24330a3e335054398f99b4b6ef4b4e634fe641e1a2688e"], 0x10}}, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) 826.975387ms ago: executing program 1 (id=165): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xffffffffffffffff, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r2, 0x1b) 542.800576ms ago: executing program 0 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) 448.930405ms ago: executing program 0 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001a00)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4d, 0x0, 0xd1, 0x0, 0x0, 0x6, 0x0, 0x0, {0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000000100)=""/177, 0x39) 160.867244ms ago: executing program 0 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) unshare(0x2a020400) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 141.945355ms ago: executing program 0 (id=171): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 100.29253ms ago: executing program 0 (id=172): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.0701ms ago: executing program 3 (id=173): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4093, 0xffd}], 0x1, 0xf0, 0xd215) 429.33µs ago: executing program 0 (id=174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) pipe2(&(0x7f0000001cc0), 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='vm_unmapped_area\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000440)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffbfffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@mblk_io_submit}, {@lazytime}, {@bh}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x475, &(0x7f0000000480)="$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") 0s ago: executing program 2 (id=175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xffffffff, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "49c2ace48cb54d80", "e0e6d4a271e30000596600", '\x00', "c962b0c0b5d958c9"}, 0x28) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 29.000202][ T4309] cgroup: Unknown subsys name 'net' [ 29.260037][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.558538][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.887114][ T4323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.891828][ T4325] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.893182][ T4325] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.894617][ T4325] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.895367][ T4331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.895844][ T4325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.897254][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.898350][ T4325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.899443][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.900405][ T4325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.901605][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.902333][ T4325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.903367][ T4331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.906247][ T4325] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.907568][ T4325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.908736][ T4325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.910551][ T4325] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.911715][ T4325] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.913421][ T4332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.914781][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.917262][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.917343][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.918858][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.920755][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.920996][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.923959][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.925736][ T4323] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.956372][ T4337] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.958101][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.959437][ T4337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.052412][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 31.061064][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 31.079749][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 31.116049][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.117367][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.119282][ T4327] device bridge_slave_0 entered promiscuous mode [ 31.129838][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.131111][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.132543][ T4327] device bridge_slave_1 entered promiscuous mode [ 31.145779][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.147169][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.148901][ T4320] device bridge_slave_0 entered promiscuous mode [ 31.156209][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.157372][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.160343][ T4320] device bridge_slave_1 entered promiscuous mode [ 31.162748][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.164252][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 31.166736][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.173504][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.174553][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.175914][ T4319] device bridge_slave_0 entered promiscuous mode [ 31.178119][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.179152][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.180737][ T4319] device bridge_slave_1 entered promiscuous mode [ 31.185316][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 31.190539][ T4327] team0: Port device team_slave_0 added [ 31.201176][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.205437][ T4327] team0: Port device team_slave_1 added [ 31.207197][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.223324][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.234878][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.237197][ T4320] team0: Port device team_slave_0 added [ 31.239996][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.241017][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.244792][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.254928][ T4320] team0: Port device team_slave_1 added [ 31.256223][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.257325][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.261422][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.265607][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.266715][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.268299][ T4333] device bridge_slave_0 entered promiscuous mode [ 31.284095][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.285323][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.286782][ T4333] device bridge_slave_1 entered promiscuous mode [ 31.289209][ T4319] team0: Port device team_slave_0 added [ 31.290203][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.291372][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.292873][ T4326] device bridge_slave_0 entered promiscuous mode [ 31.297014][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.300489][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.304413][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.328596][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.377737][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.423961][ T4319] team0: Port device team_slave_1 added [ 31.425000][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.426136][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.427807][ T4326] device bridge_slave_1 entered promiscuous mode [ 31.429476][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.430551][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.434276][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.451692][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.453471][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.454653][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.458820][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.464227][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.467794][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.472306][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.473428][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.477279][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.480991][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.495830][ T4333] team0: Port device team_slave_0 added [ 31.498208][ T4333] team0: Port device team_slave_1 added [ 31.558465][ T4320] device hsr_slave_0 entered promiscuous mode [ 31.617751][ T4320] device hsr_slave_1 entered promiscuous mode [ 31.667717][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.668992][ T4320] Cannot create hsr debugfs directory [ 31.678471][ T4326] team0: Port device team_slave_0 added [ 31.685575][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.686734][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.690900][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.693502][ T4326] team0: Port device team_slave_1 added [ 31.700676][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.701793][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.705681][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.758508][ T4319] device hsr_slave_0 entered promiscuous mode [ 31.817757][ T4319] device hsr_slave_1 entered promiscuous mode [ 31.867580][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.868844][ T4319] Cannot create hsr debugfs directory [ 31.928571][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.997728][ T4333] device hsr_slave_1 entered promiscuous mode [ 32.037555][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.038669][ T4333] Cannot create hsr debugfs directory [ 32.042906][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.044051][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.047857][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.051010][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.052096][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.055893][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.118574][ T4326] device hsr_slave_0 entered promiscuous mode [ 32.167827][ T4326] device hsr_slave_1 entered promiscuous mode [ 32.207572][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.208742][ T4326] Cannot create hsr debugfs directory [ 32.273522][ T4327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.319419][ T4327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.364408][ T4327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.398913][ T4327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.445259][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.481120][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.528298][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.559191][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.624408][ T4333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.650926][ T4319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.709252][ T4333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.752075][ T4319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.790290][ T4319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.840414][ T4333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.881162][ T4333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.918603][ T4319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.958037][ T4325] Bluetooth: hci1: command 0x0409 tx timeout [ 32.958041][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 32.958125][ T4337] Bluetooth: hci0: command 0x0409 tx timeout [ 32.959048][ T4325] Bluetooth: hci3: command 0x0409 tx timeout [ 32.992600][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.021709][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.037799][ T4325] Bluetooth: hci4: command 0x0409 tx timeout [ 33.060660][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.112422][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.165974][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.171924][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.189939][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.193734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.195943][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.200715][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.204838][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.206343][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.210967][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.212544][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.214342][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.215446][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.217109][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.221239][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.223746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.225237][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.229566][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.231376][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.235373][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.238136][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.239876][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.240960][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.250786][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.252614][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.254093][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.256079][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.258881][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.260547][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.261982][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.263118][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.264426][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.266042][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.267440][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.268595][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.271917][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.273436][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.274854][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.276379][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.278583][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.286436][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.287997][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.289337][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.290914][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.292554][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.294100][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.295562][ T200] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.296761][ T200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.304370][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.306477][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.308297][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.309707][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.310798][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.312003][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.313686][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.322572][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.324549][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.326090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.328450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.330179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.331605][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.332747][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.334173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.335891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.337414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.340609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.342244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.347213][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.350304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.352019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.353456][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.354982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.356449][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.357560][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.363369][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.365096][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.366605][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.369140][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.375144][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.376867][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.387010][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.388550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.390089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.391804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.393612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.395059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.396481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.400511][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.404159][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.405960][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.411577][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.413295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.414762][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.417192][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.418766][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.423539][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.425190][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.426962][ T200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.431652][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.436929][ T4333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.448283][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.452943][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.454520][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.456027][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.459703][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.462367][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.464004][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.468316][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.483159][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.484700][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.486166][ T1608] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.487450][ T1608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.489357][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.491493][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.493066][ T1608] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.494182][ T1608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.495519][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.516327][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.518529][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.521504][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.523256][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.524795][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.526492][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.532491][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.534178][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.536069][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.539769][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.541482][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.542901][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.544529][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.545944][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.554643][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.556852][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.558741][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.571836][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.573174][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.576736][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.586624][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.588435][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.598327][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.601299][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.602593][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.620902][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.622483][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.623911][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.625525][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.629404][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.642094][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.643796][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.646409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.648171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.650198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.651617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.659637][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.661183][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.665572][ T4320] device veth0_vlan entered promiscuous mode [ 33.668712][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.670274][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.676237][ T4327] device veth0_vlan entered promiscuous mode [ 33.686649][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.688680][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.690293][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.691821][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.693026][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.694250][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.695672][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.701340][ T4319] device veth0_vlan entered promiscuous mode [ 33.705144][ T4319] device veth1_vlan entered promiscuous mode [ 33.707875][ T4320] device veth1_vlan entered promiscuous mode [ 33.722191][ T4327] device veth1_vlan entered promiscuous mode [ 33.734911][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.736410][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.738895][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.740372][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.741788][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.743430][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.744774][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.746405][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.756054][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.762158][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.773618][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.775241][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.776571][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.778989][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.783811][ T4320] device veth0_macvtap entered promiscuous mode [ 33.786314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.787833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.789281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.792941][ T4327] device veth0_macvtap entered promiscuous mode [ 33.795853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.797241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.799113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.800999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.802344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.805786][ T4326] device veth0_vlan entered promiscuous mode [ 33.807374][ T4327] device veth1_macvtap entered promiscuous mode [ 33.811034][ T4320] device veth1_macvtap entered promiscuous mode [ 33.812891][ T4319] device veth0_macvtap entered promiscuous mode [ 33.816404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.818298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.819795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.821238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.822623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.824586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.826039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.828837][ T4319] device veth1_macvtap entered promiscuous mode [ 33.836490][ T4333] device veth0_vlan entered promiscuous mode [ 33.843940][ T4326] device veth1_vlan entered promiscuous mode [ 33.848395][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.852749][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.854310][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.855707][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.857188][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.862208][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.864181][ T4333] device veth1_vlan entered promiscuous mode [ 33.868117][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.869706][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.871599][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.873231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.874803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.876232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.878750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.880541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.882161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.885893][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.887434][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.889971][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.891600][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.893858][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.897266][ T4327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.899335][ T4327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.900757][ T4327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.902160][ T4327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.904832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.906284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.908461][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.910114][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.912215][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.916076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.917722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.919291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.922207][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.923857][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.925363][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.926882][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.929646][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.934474][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.935786][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.937231][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.939605][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.942229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.943837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.951713][ T4319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.953097][ T4319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.954523][ T4319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.955815][ T4319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.959675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.961359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.972058][ T4326] device veth0_macvtap entered promiscuous mode [ 33.976981][ T4326] device veth1_macvtap entered promiscuous mode [ 33.982983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.984568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.985845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.987353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.000672][ T4333] device veth0_macvtap entered promiscuous mode [ 34.012637][ T4333] device veth1_macvtap entered promiscuous mode [ 34.014894][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.016505][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.018264][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.019938][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.021456][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.022969][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.025082][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.037197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.039489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.041799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.043419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.045605][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.047222][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.049186][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.050778][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.052291][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.053784][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.055882][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.062850][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.064038][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.065091][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.066723][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.068589][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.070172][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.071678][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.073299][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.074813][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.076382][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.079152][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.081723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.083356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.084935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.086267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.088430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.092350][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.093678][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.094994][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.096354][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.110105][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.111884][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.113406][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.114911][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.116266][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.118218][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.119715][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.121305][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.123433][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.129893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.131538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.142512][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.143760][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.145123][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.146488][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.151983][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.153234][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.157103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.175651][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.176850][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.183012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.185647][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.186903][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.194388][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.209662][ T1608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.211031][ T1608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.214361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.216025][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.217325][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.228436][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.229699][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.230083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.232427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.244640][ T1608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.245827][ T1608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.247638][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.248769][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.253684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.255146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.256818][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.260040][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.262011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.303505][ T4436] loop2: detected capacity change from 0 to 2048 [ 34.364321][ T4441] ieee802154 phy0 wpan0: encryption failed: -22 [ 34.370907][ T4440] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 34.381017][ T4436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.394483][ T4436] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 34.416341][ T4436] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 34.427125][ T4436] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.427125][ T4436] [ 34.429656][ T4436] EXT4-fs (loop2): Total free blocks count 0 [ 34.431077][ T4436] EXT4-fs (loop2): Free/Dirty block details [ 34.432148][ T4436] EXT4-fs (loop2): free_blocks=66060288 [ 34.433193][ T4436] EXT4-fs (loop2): dirty_blocks=32 [ 34.434161][ T4436] EXT4-fs (loop2): Block reservation details [ 34.435186][ T4436] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 34.460445][ T4452] device syzkaller0 entered promiscuous mode [ 34.469302][ T4408] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 34.493349][ T4454] 9pnet: Could not find request transport: r [ 34.516319][ T4459] Zero length message leads to an empty skb [ 34.544036][ T27] audit: type=1326 audit(34.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb5b9e8 code=0x7ffc0000 [ 34.558882][ T27] audit: type=1326 audit(34.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffabb5b9e8 code=0x7ffc0000 [ 34.562476][ T27] audit: type=1326 audit(34.550:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb5b9e8 code=0x7ffc0000 [ 34.566283][ T27] audit: type=1326 audit(34.550:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=154 compat=0 ip=0xffffabb5b9e8 code=0x7ffc0000 [ 34.575825][ T27] audit: type=1326 audit(34.550:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4464 comm="syz.4.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb5b9e8 code=0x7ffc0000 [ 34.616434][ T4476] loop0: detected capacity change from 0 to 512 [ 34.626141][ T4476] EXT4-fs: Ignoring removed i_version option [ 34.647165][ T4476] EXT4-fs: Ignoring removed bh option [ 34.694569][ T4476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.725779][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 34.739054][ T4487] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 34.746732][ T4491] netlink: 'syz.4.20': attribute type 39 has an invalid length. [ 34.781176][ T4497] loop1: detected capacity change from 0 to 512 [ 34.788958][ T4497] ======================================================= [ 34.788958][ T4497] WARNING: The mand mount option has been deprecated and [ 34.788958][ T4497] and is ignored by this kernel. Remove the mand [ 34.788958][ T4497] option from the mount to silence this warning. [ 34.788958][ T4497] ======================================================= [ 34.848565][ T4497] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.24: bg 0: block 5: invalid block bitmap [ 34.851678][ T4497] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 34.853527][ T4497] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.24: invalid indirect mapped block 3 (level 2) [ 34.860246][ T4497] EXT4-fs (loop1): 2 truncates cleaned up [ 34.862730][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.024037][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 35.037809][ T4325] Bluetooth: hci3: command 0x041b tx timeout [ 35.048463][ T4325] Bluetooth: hci0: command 0x041b tx timeout [ 35.048483][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 35.049480][ T4325] Bluetooth: hci2: command 0x041b tx timeout [ 35.122279][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 35.715322][ T27] audit: type=1326 audit(35.700:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x7ffc0000 [ 35.719561][ T4536] syz.1.41 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.721203][ T27] audit: type=1326 audit(35.710:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x7ffc0000 [ 35.724179][ T27] audit: type=1326 audit(35.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=103 compat=0 ip=0xffff86f5b9e8 code=0x7ffc0000 [ 35.735223][ T27] audit: type=1326 audit(35.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x7ffc0000 [ 35.745995][ T27] audit: type=1326 audit(35.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.1.41" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x7ffc0000 [ 35.919201][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 36.043835][ T4579] loop0: detected capacity change from 0 to 512 [ 36.084277][ T4587] loop1: detected capacity change from 0 to 1024 [ 36.085635][ T4587] EXT4-fs: Ignoring removed orlov option [ 36.087357][ T4579] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.102421][ T4579] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.57: Failed to acquire dquot type 0 [ 36.137136][ T4587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.172022][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 36.179340][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 36.379735][ T4606] team0: No ports can be present during mode change [ 36.737093][ T4623] loop1: detected capacity change from 0 to 1024 [ 36.745317][ T4623] EXT4-fs: Ignoring removed bh option [ 36.746265][ T4623] EXT4-fs: inline encryption not supported [ 36.756163][ T4623] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 36.764827][ T4623] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.74: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.771965][ T4623] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.74: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.776609][ T4623] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.74: Failed to acquire dquot type 0 [ 36.780957][ T4623] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 36.785226][ T4623] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.74: mark_inode_dirty error [ 36.788860][ T4623] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 36.790416][ T4623] EXT4-fs (loop1): 1 orphan inode deleted [ 36.791304][ T4623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.795131][ T4623] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm syz.1.74: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.802530][ T4408] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.805427][ T4408] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:5: Failed to release dquot type 0 [ 36.855465][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 36.862294][ T4320] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 36.867172][ T4320] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 36.873114][ T4320] EXT4-fs error (device loop1): ext4_quota_off:7115: inode #3: comm syz-executor: mark_inode_dirty error [ 36.950673][ T4630] loop1: detected capacity change from 0 to 512 [ 36.982439][ T4630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.996552][ T4630] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.77: bg 0: bad block bitmap checksum [ 37.004527][ T4630] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Filesystem failed CRC [ 37.103179][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 37.117567][ T4325] Bluetooth: hci1: command 0x040f tx timeout [ 37.118600][ T4325] Bluetooth: hci0: command 0x040f tx timeout [ 37.128016][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 37.129026][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 37.208109][ T4325] Bluetooth: hci4: command 0x040f tx timeout [ 37.234013][ T4644] loop3: detected capacity change from 0 to 1024 [ 37.235728][ T4644] EXT4-fs: Ignoring removed orlov option [ 37.258816][ T4644] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.261724][ T4650] device syzkaller0 entered promiscuous mode [ 37.324974][ T4653] tc_dump_action: action bad kind [ 37.428233][ T4667] loop2: detected capacity change from 0 to 512 [ 37.429649][ T4667] EXT4-fs: Ignoring removed i_version option [ 37.430615][ T4667] EXT4-fs: Ignoring removed bh option [ 37.449801][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 37.451549][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.89'. [ 37.452526][ T4667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.611060][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 37.643722][ T4688] loop2: detected capacity change from 0 to 1024 [ 37.653920][ T4688] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.655706][ T4688] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 37.886428][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 37.888172][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 37.890217][ T4702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 37.891564][ T4702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 37.956738][ T4710] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.111' sets config #0 [ 38.063649][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 38.169354][ T4724] netlink: 'syz.4.112': attribute type 4 has an invalid length. [ 38.170650][ T4724] netlink: 17 bytes leftover after parsing attributes in process `syz.4.112'. [ 38.542480][ T4743] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.544057][ T4743] vhci_hcd: invalid port number 96 [ 38.544834][ T4743] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 38.752466][ T4763] netlink: 64 bytes leftover after parsing attributes in process `syz.2.132'. [ 38.855951][ T4771] netlink: 96 bytes leftover after parsing attributes in process `syz.4.134'. [ 38.955733][ T4785] loop1: detected capacity change from 0 to 256 [ 38.965281][ T4785] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.965317][ T4783] Illegal XDP return value 3457 on prog (id 2) dev syz_tun, expect packet loss! [ 39.056648][ T4794] loop4: detected capacity change from 0 to 128 [ 39.072611][ T4794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.094998][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 39.118570][ T4805] netlink: 'syz.4.148': attribute type 4 has an invalid length. [ 39.198622][ T4337] Bluetooth: hci3: command 0x0419 tx timeout [ 39.199594][ T4337] Bluetooth: hci2: command 0x0419 tx timeout [ 39.200465][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 39.201308][ T4337] Bluetooth: hci1: command 0x0419 tx timeout [ 39.288384][ T4325] Bluetooth: hci4: command 0x0419 tx timeout [ 39.573379][ T27] kauditd_printk_skb: 144 callbacks suppressed [ 39.573391][ T27] audit: type=1326 audit(39.550:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.577464][ T27] audit: type=1326 audit(39.560:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.581736][ T27] audit: type=1326 audit(39.560:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.588078][ T4839] loop3: detected capacity change from 0 to 512 [ 39.590634][ T27] audit: type=1326 audit(39.560:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.593558][ T4839] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.593918][ T27] audit: type=1326 audit(39.560:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.608945][ T27] audit: type=1326 audit(39.560:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.612514][ T27] audit: type=1326 audit(39.560:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.615630][ T27] audit: type=1326 audit(39.560:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.636751][ T27] audit: type=1326 audit(39.560:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.643396][ T27] audit: type=1326 audit(39.560:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f5b9e8 code=0x50000 [ 39.646631][ T4839] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.163: corrupted inode contents [ 39.660167][ T4839] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm syz.3.163: mark_inode_dirty error [ 39.662413][ T4839] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.163: corrupted inode contents [ 39.664401][ T4839] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.163: mark_inode_dirty error [ 39.666263][ T4839] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.163: corrupted inode contents [ 39.668922][ T4839] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 39.670572][ T4839] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.163: corrupted inode contents [ 39.672566][ T4839] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm syz.3.163: mark_inode_dirty error [ 39.674409][ T4839] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 39.677034][ T4839] EXT4-fs (loop3): 1 truncate cleaned up [ 39.677926][ T4839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.688590][ T4409] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:6: Failed to release dquot type 1 [ 40.212199][ T3775] cfg80211: failed to load regulatory.db [ 40.314752][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 40.336872][ T4864] loop0: detected capacity change from 0 to 512 [ 40.347571][ T4864] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.348665][ T4864] EXT4-fs: Ignoring removed bh option [ 40.381897][ T4864] [ 40.382308][ T4864] ====================================================== [ 40.383446][ T4864] WARNING: possible circular locking dependency detected [ 40.384513][ T4864] syzkaller #0 Not tainted [ 40.385167][ T4864] ------------------------------------------------------ [ 40.386140][ T4864] syz.0.174/4864 is trying to acquire lock: [ 40.387100][ T4864] ffff0000ddd80b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 40.388556][ T4864] [ 40.388556][ T4864] but task is already holding lock: [ 40.389636][ T4864] ffff0000e1b6c700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 40.391053][ T4864] [ 40.391053][ T4864] which lock already depends on the new lock. [ 40.391053][ T4864] [ 40.392485][ T4864] [ 40.392485][ T4864] the existing dependency chain (in reverse order) is: [ 40.393788][ T4864] [ 40.393788][ T4864] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 40.394912][ T4864] down_write+0x5c/0x88 [ 40.395595][ T4864] ext4_destroy_inline_data+0x30/0x11c [ 40.396521][ T4864] ext4_writepages+0x3f4/0x284c [ 40.397394][ T4864] do_writepages+0x2c0/0x4fc [ 40.398140][ T4864] filemap_fdatawrite_wbc+0x124/0x174 [ 40.398975][ T4864] filemap_flush+0xbc/0x10c [ 40.399753][ T4864] ext4_alloc_da_blocks+0x138/0x370 [ 40.400645][ T4864] ext4_rename2+0xac0/0x24a0 [ 40.401371][ T4864] vfs_rename+0x954/0xdcc [ 40.402100][ T4864] do_renameat2+0x738/0xa54 [ 40.402868][ T4864] __arm64_sys_renameat2+0xe0/0xfc [ 40.403654][ T4864] invoke_syscall+0x98/0x2bc [ 40.404380][ T4864] el0_svc_common+0x138/0x258 [ 40.405161][ T4864] do_el0_svc+0x58/0x13c [ 40.405837][ T4864] el0_svc+0x58/0x138 [ 40.406489][ T4864] el0t_64_sync_handler+0x84/0xf0 [ 40.407337][ T4864] el0t_64_sync+0x18c/0x190 [ 40.408079][ T4864] [ 40.408079][ T4864] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 40.409273][ T4864] __lock_acquire+0x293c/0x6544 [ 40.410022][ T4864] lock_acquire+0x20c/0x644 [ 40.410737][ T4864] percpu_down_read+0x70/0x2a8 [ 40.411451][ T4864] ext4_writepages+0x188/0x284c [ 40.412247][ T4864] do_writepages+0x2c0/0x4fc [ 40.413028][ T4864] __writeback_single_inode+0x164/0x157c [ 40.414022][ T4864] writeback_single_inode+0x1c0/0x720 [ 40.414980][ T4864] write_inode_now+0x144/0x1b0 [ 40.415790][ T4864] iput+0x5cc/0x7f4 [ 40.416500][ T4864] ext4_xattr_block_set+0x17a4/0x2810 [ 40.417385][ T4864] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 40.418308][ T4864] __ext4_expand_extra_isize+0x298/0x358 [ 40.419214][ T4864] __ext4_mark_inode_dirty+0x3e4/0x790 [ 40.420065][ T4864] ext4_evict_inode+0xb58/0x1270 [ 40.420849][ T4864] evict+0x3c8/0x810 [ 40.421459][ T4864] iput+0x764/0x7f4 [ 40.422098][ T4864] ext4_process_orphan+0x240/0x2b4 [ 40.422879][ T4864] ext4_orphan_cleanup+0x908/0x104c [ 40.423656][ T4864] ext4_fill_super+0x6440/0x68a8 [ 40.424393][ T4864] get_tree_bdev+0x358/0x544 [ 40.425125][ T4864] ext4_get_tree+0x28/0x38 [ 40.425845][ T4864] vfs_get_tree+0x90/0x274 [ 40.426525][ T4864] do_new_mount+0x228/0x810 [ 40.427331][ T4864] path_mount+0x5b4/0xe78 [ 40.428043][ T4864] __arm64_sys_mount+0x49c/0x584 [ 40.428819][ T4864] invoke_syscall+0x98/0x2bc [ 40.429610][ T4864] el0_svc_common+0x138/0x258 [ 40.430356][ T4864] do_el0_svc+0x58/0x13c [ 40.431081][ T4864] el0_svc+0x58/0x138 [ 40.431707][ T4864] el0t_64_sync_handler+0x84/0xf0 [ 40.432580][ T4864] el0t_64_sync+0x18c/0x190 [ 40.433329][ T4864] [ 40.433329][ T4864] other info that might help us debug this: [ 40.433329][ T4864] [ 40.434788][ T4864] Possible unsafe locking scenario: [ 40.434788][ T4864] [ 40.435930][ T4864] CPU0 CPU1 [ 40.436653][ T4864] ---- ---- [ 40.437491][ T4864] lock(&ei->xattr_sem); [ 40.438092][ T4864] lock(&sbi->s_writepages_rwsem); [ 40.439209][ T4864] lock(&ei->xattr_sem); [ 40.440238][ T4864] lock(&sbi->s_writepages_rwsem); [ 40.441007][ T4864] [ 40.441007][ T4864] *** DEADLOCK *** [ 40.441007][ T4864] [ 40.442119][ T4864] 3 locks held by syz.0.174/4864: [ 40.442818][ T4864] #0: ffff0000e00560e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 40.444313][ T4864] #1: ffff0000e0056650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 40.445662][ T4864] #2: ffff0000e1b6c700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 40.447161][ T4864] [ 40.447161][ T4864] stack backtrace: [ 40.448005][ T4864] CPU: 0 PID: 4864 Comm: syz.0.174 Not tainted syzkaller #0 [ 40.449051][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 40.450525][ T4864] Call trace: [ 40.450983][ T4864] dump_backtrace+0x1c8/0x1f4 [ 40.451675][ T4864] show_stack+0x2c/0x3c [ 40.452261][ T4864] __dump_stack+0x30/0x40 [ 40.452903][ T4864] dump_stack_lvl+0xf8/0x160 [ 40.453554][ T4864] dump_stack+0x1c/0x5c [ 40.454144][ T4864] print_circular_bug+0x148/0x1b0 [ 40.454842][ T4864] check_noncircular+0x240/0x2d4 [ 40.455558][ T4864] __lock_acquire+0x293c/0x6544 [ 40.456268][ T4864] lock_acquire+0x20c/0x644 [ 40.456877][ T4864] percpu_down_read+0x70/0x2a8 [ 40.457607][ T4864] ext4_writepages+0x188/0x284c [ 40.458347][ T4864] do_writepages+0x2c0/0x4fc [ 40.459017][ T4864] __writeback_single_inode+0x164/0x157c [ 40.459947][ T4864] writeback_single_inode+0x1c0/0x720 [ 40.460745][ T4864] write_inode_now+0x144/0x1b0 [ 40.461481][ T4864] iput+0x5cc/0x7f4 [ 40.462034][ T4864] ext4_xattr_block_set+0x17a4/0x2810 [ 40.462852][ T4864] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 40.463683][ T4864] __ext4_expand_extra_isize+0x298/0x358 [ 40.464518][ T4864] __ext4_mark_inode_dirty+0x3e4/0x790 [ 40.465341][ T4864] ext4_evict_inode+0xb58/0x1270 [ 40.466109][ T4864] evict+0x3c8/0x810 [ 40.466700][ T4864] iput+0x764/0x7f4 [ 40.467260][ T4864] ext4_process_orphan+0x240/0x2b4 [ 40.468083][ T4864] ext4_orphan_cleanup+0x908/0x104c [ 40.468792][ T4864] ext4_fill_super+0x6440/0x68a8 [ 40.469517][ T4864] get_tree_bdev+0x358/0x544 [ 40.470145][ T4864] ext4_get_tree+0x28/0x38 [ 40.470778][ T4864] vfs_get_tree+0x90/0x274 [ 40.471381][ T4864] do_new_mount+0x228/0x810 [ 40.472035][ T4864] path_mount+0x5b4/0xe78 [ 40.472687][ T4864] __arm64_sys_mount+0x49c/0x584 [ 40.473404][ T4864] invoke_syscall+0x98/0x2bc [ 40.474081][ T4864] el0_svc_common+0x138/0x258 [ 40.474827][ T4864] do_el0_svc+0x58/0x13c [ 40.475439][ T4864] el0_svc+0x58/0x138 [ 40.476040][ T4864] el0t_64_sync_handler+0x84/0xf0 [ 40.476782][ T4864] el0t_64_sync+0x18c/0x190 [ 40.502502][ T4864] ------------[ cut here ]------------ [ 40.503374][ T4864] EA inode 11 i_nlink=2 [ 40.503459][ T4864] WARNING: CPU: 0 PID: 4864 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 40.505544][ T4864] Modules linked in: [ 40.506078][ T4864] CPU: 0 PID: 4864 Comm: syz.0.174 Not tainted syzkaller #0 [ 40.507094][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 40.508563][ T4864] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 40.509784][ T4864] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 40.510710][ T4864] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 40.511632][ T4864] sp : ffff8000212a6e00 [ 40.512223][ T4864] x29: ffff8000212a6ea0 x28: 0000000000000000 x27: dfff800000000000 [ 40.513370][ T4864] x26: 1fffe0001c36dd1f x25: ffff700004254dc4 x24: 0000000000000000 [ 40.514546][ T4864] x23: ffff800017a8a000 x22: ffff0000e1b6e740 x21: 0000000000000002 [ 40.515735][ T4864] x20: 0000000000000001 x19: ffff0000e1b6e700 x18: ffff800011abbcc0 [ 40.516870][ T4864] x17: 0000000000000000 x16: ffff800008042d90 x15: 0000000000000002 [ 40.518088][ T4864] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 40.519336][ T4864] x11: 0000000000076fd9 x10: ffff8000224ba000 x9 : c2932a8cb77c2500 [ 40.520524][ T4864] x8 : c2932a8cb77c2500 x7 : 0000000000000001 x6 : 0000000000000001 [ 40.521774][ T4864] x5 : ffff8000212a6898 x4 : ffff8000151a4920 x3 : ffff80000852e538 [ 40.522938][ T4864] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 40.524119][ T4864] Call trace: [ 40.524610][ T4864] ext4_xattr_inode_update_ref+0x42c/0x470 [ 40.525470][ T4864] ext4_xattr_set_entry+0x918/0x15ac [ 40.526259][ T4864] ext4_xattr_ibody_set+0x204/0x600 [ 40.527055][ T4864] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 40.527858][ T4864] __ext4_expand_extra_isize+0x298/0x358 [ 40.528684][ T4864] __ext4_mark_inode_dirty+0x3e4/0x790 [ 40.529472][ T4864] ext4_evict_inode+0xb58/0x1270 [ 40.530222][ T4864] evict+0x3c8/0x810 [ 40.530793][ T4864] iput+0x764/0x7f4 [ 40.531344][ T4864] ext4_process_orphan+0x240/0x2b4 [ 40.532141][ T4864] ext4_orphan_cleanup+0x908/0x104c [ 40.532896][ T4864] ext4_fill_super+0x6440/0x68a8 [ 40.533687][ T4864] get_tree_bdev+0x358/0x544 [ 40.534416][ T4864] ext4_get_tree+0x28/0x38 [ 40.535045][ T4864] vfs_get_tree+0x90/0x274 [ 40.535664][ T4864] do_new_mount+0x228/0x810 [ 40.536279][ T4864] path_mount+0x5b4/0xe78 [ 40.536984][ T4864] __arm64_sys_mount+0x49c/0x584 [ 40.537707][ T4864] invoke_syscall+0x98/0x2bc [ 40.538347][ T4864] el0_svc_common+0x138/0x258 [ 40.538998][ T4864] do_el0_svc+0x58/0x13c [ 40.539675][ T4864] el0_svc+0x58/0x138 [ 40.540250][ T4864] el0t_64_sync_handler+0x84/0xf0 [ 40.540978][ T4864] el0t_64_sync+0x18c/0x190 [ 40.541644][ T4864] irq event stamp: 4429 [ 40.542211][ T4864] hardirqs last enabled at (4429): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 40.543665][ T4864] hardirqs last disabled at (4428): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 40.545145][ T4864] softirqs last enabled at (3434): [] handle_softirqs+0xaf8/0xc6c [ 40.546572][ T4864] softirqs last disabled at (3423): [] __do_softirq+0x14/0x20 [ 40.547836][ T4864] ---[ end trace 0000000000000000 ]--- [ 40.555230][ T4864] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.174: iget: bad extra_isize 90 (inode size 256) [ 40.559231][ T4864] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.174: error while reading EA inode 18 err=-117 [ 40.561287][ T4864] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.174: iget: bad extra_isize 90 (inode size 256) [ 40.563421][ T4864] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.174: error while reading EA inode 18 err=-117 [ 40.565452][ T4864] EXT4-fs (loop0): 1 orphan inode deleted [ 40.566234][ T4864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.651884][ T4326] EXT4-fs (loop0): unmounting filesystem.