last executing test programs: 3.17910865s ago: executing program 1 (id=189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x48441, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) dup3(r0, r2, 0x0) dup3(r1, r0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 3.030894832s ago: executing program 1 (id=193): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x6441, 0x12d) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 2.867658874s ago: executing program 1 (id=197): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6(0xa, 0x5, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = socket(0x2a, 0x2, 0x5) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) read$qrtrtun(r1, 0x0, 0x0) 2.672049266s ago: executing program 2 (id=200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x2000000000}, 0xf) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 2.584211297s ago: executing program 2 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x10}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x6}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x30, 0x0]}}, 0x0, 0x48, 0x0, 0x1, 0x100, 0x10000, @value=r6}, 0x28) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x2801, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000001000000d7d200004a000000000000001a4ba24f443795b3d674222f480ee5d3f3b2d4394328c275d26b99f286e1d75a5523d578a800a826f7e6587c48bfebc1f1e427416ff4", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000300"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x13, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x10, 0x7, 0xc, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x33, &(0x7f0000000240)=""/51, 0x20780, 0x11, '\x00', r3, @fallback, r6, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x1, &(0x7f0000000580)=[r0, r0, r7, r8, r0, r0], &(0x7f00000005c0)=[{0x1, 0x2, 0xb, 0xd5fff42d2d651880}], 0x10, 0x4, @void, @value}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000b04fcff", 0x58}], 0x1) 2.495578578s ago: executing program 4 (id=205): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)={0x1a8, r2, 0x302, 0x70bd26, 0x25dfd9fc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2000}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x800}, @NL80211_ATTR_IE={0x110, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x8c, 0x2f}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x41}}, @random_vendor={0xdd, 0xfb, "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"}]}, @NL80211_ATTR_IE={0x6c, 0x2a, [@cf={0x4, 0x6, {0x7, 0x0, 0x7, 0x8}}, @prep={0x83, 0x1f, {{}, 0x3, 0x95, @device_b, 0x7, @void, 0x0, 0x1ff, @broadcast, 0x200}}, @supported_rates={0x1, 0x2, [{0x18}, {0x9}]}, @ibss={0x6, 0x2, 0xfffe}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0x2, @broadcast, 0xffff, @value, 0x4, 0x7, @device_a, 0xfffff001}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040005) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 2.445075449s ago: executing program 0 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 2.307766061s ago: executing program 2 (id=207): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x2c020400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) times(0x0) syz_emit_ethernet(0x126, &(0x7f0000000040)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 2.307408411s ago: executing program 0 (id=208): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@errors_remount}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 2.174938122s ago: executing program 4 (id=210): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10021, &(0x7f00000005c0)={0x0, 0x989680}) 2.105433903s ago: executing program 3 (id=211): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) 1.983929645s ago: executing program 4 (id=212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) 1.983654585s ago: executing program 3 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1.909868196s ago: executing program 4 (id=214): openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000900000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 1.882902936s ago: executing program 3 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioperm(0x0, 0x4, 0x1) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ftruncate(r0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 1.679536709s ago: executing program 4 (id=216): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0xffffffff, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x7, 0x0, 0x0, 0xfffff7ff}, {0x0, 0x0, 0x0, 0xff, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x2}, {0x200}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x4}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x56}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0xfffffffe, 0x7fffffff}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0xffffffff}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x714f, 0x0) 1.673349049s ago: executing program 0 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}}, 0x0) 1.658284899s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) statfs(&(0x7f00000000c0)='./file0\x00', 0x0) 1.57580825s ago: executing program 3 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x68040200) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x3050100, 0x0, 0x1, 0x0, &(0x7f0000000000)) 1.541362s ago: executing program 1 (id=220): r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.424070492s ago: executing program 0 (id=221): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)={0x1a8, r2, 0x302, 0x70bd26, 0x25dfd9fc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2000}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x800}, @NL80211_ATTR_IE={0x110, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x8c, 0x2f}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x41}}, @random_vendor={0xdd, 0xfb, "d45d700be6ccc781dc6862a494393830465423ff16460510f1cd184fa33c7e1a3fab2816cce76755201b1d51e2c6353c746f13a67306b0b1543ad2074af9b771a94e6d15e2bb793c106d3fe885d40eb48178473bd6f7412e6ca920832e2e1fc53f5bdb2ea02643179e09107cc6b7febfc0e07b28258b8511351413100a4b1551d04e4bada1f2bb8a929e6e3ef699813c3d9f123787959f413885b807539297bbe49d277cc223931cc1bd9bead7d5198b9eff9f5c271128134d0ab0b22aa06cbee6e76e8ff5f90b7a540f9e4d53b49bb94c0d839b1969bd0a0b8472b91e0737aee62d36e904f88bfff05c6b7ef48f5d305c2c6211565a35aaa090e7"}]}, @NL80211_ATTR_IE={0x6c, 0x2a, [@cf={0x4, 0x6, {0x7, 0x0, 0x7, 0x8}}, @prep={0x83, 0x1f, {{}, 0x3, 0x95, @device_b, 0x7, @void, 0x0, 0x1ff, @broadcast, 0x200}}, @supported_rates={0x1, 0x2, [{0x18}, {0x9}]}, @ibss={0x6, 0x2, 0xfffe}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0x2, @broadcast, 0xffff, @value, 0x4, 0x7, @device_a, 0xfffff001}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040005) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.291950894s ago: executing program 2 (id=222): unshare(0x26000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 576.460763ms ago: executing program 2 (id=223): getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000a00)={0x0, 0x80}, &(0x7f0000000ac0)=0x8) listen(0xffffffffffffffff, 0x7e) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r0 = open(0x0, 0x1050c1, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x0, 0xffffffff, 0x28140, 0xffffffffffffffff, 0x3b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @value=r0, @void, @void, @value}, 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x40000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 576.115732ms ago: executing program 3 (id=224): getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(&(0x7f0000000040)=""/39, 0x27) 465.306204ms ago: executing program 4 (id=225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 412.677645ms ago: executing program 3 (id=226): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000000), 0x1, 0x530, &(0x7f00000003c0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x14d, 0x5}, {0x10000, 0x1}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 411.860065ms ago: executing program 1 (id=227): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x4, &(0x7f00000007c0)=ANY=[], 0xff, 0x1c8, &(0x7f0000000200)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) mount$nfs(0x0, 0x0, 0x0, 0x4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 316.983336ms ago: executing program 0 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8b) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 179.079767ms ago: executing program 0 (id=229): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 0s ago: executing program 2 (id=230): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0xf8, 0x6009, 0x9, 0x8, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e24, @multicast2}}}, 0xa0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 66.387456][ T4159] cgroup: Unknown subsys name 'net' [ 66.523852][ T4159] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.044619][ T4159] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.852248][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 69.904746][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 69.984765][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 70.054848][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 70.085880][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.094019][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.102470][ T4171] device bridge_slave_0 entered promiscuous mode [ 70.115545][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.122876][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.131640][ T4171] device bridge_slave_1 entered promiscuous mode [ 70.186365][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.193713][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.201965][ T4178] device bridge_slave_0 entered promiscuous mode [ 70.232064][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.239715][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.248466][ T4178] device bridge_slave_1 entered promiscuous mode [ 70.258567][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.304497][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.313856][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 70.323764][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.331244][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.339569][ T4172] device bridge_slave_0 entered promiscuous mode [ 70.380759][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.388266][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.396114][ T4172] device bridge_slave_1 entered promiscuous mode [ 70.404203][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.411938][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.420000][ T4170] device bridge_slave_0 entered promiscuous mode [ 70.430934][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.446165][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.458268][ T4171] team0: Port device team_slave_0 added [ 70.471245][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.478872][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.486879][ T4170] device bridge_slave_1 entered promiscuous mode [ 70.511207][ T4171] team0: Port device team_slave_1 added [ 70.550077][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.562074][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.582333][ T4178] team0: Port device team_slave_0 added [ 70.608833][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.619482][ T4178] team0: Port device team_slave_1 added [ 70.626932][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.637413][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.644395][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.670762][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.709198][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.716363][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.743746][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.766852][ T4172] team0: Port device team_slave_0 added [ 70.803056][ T4172] team0: Port device team_slave_1 added [ 70.809900][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.816902][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.845616][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.861966][ T4170] team0: Port device team_slave_0 added [ 70.871283][ T4170] team0: Port device team_slave_1 added [ 70.877665][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.884852][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.893228][ T4169] device bridge_slave_0 entered promiscuous mode [ 70.920197][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.928297][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.957721][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.982542][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.991065][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.000807][ T4169] device bridge_slave_1 entered promiscuous mode [ 71.048188][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.055355][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.082028][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.112242][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.119418][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.147281][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.167589][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.174569][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.200898][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.223925][ T4171] device hsr_slave_0 entered promiscuous mode [ 71.231705][ T4171] device hsr_slave_1 entered promiscuous mode [ 71.240493][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.248039][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.275574][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.288989][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.306256][ T4178] device hsr_slave_0 entered promiscuous mode [ 71.313874][ T4178] device hsr_slave_1 entered promiscuous mode [ 71.321995][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.331976][ T4178] Cannot create hsr debugfs directory [ 71.345289][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.356440][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365055][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.441372][ T4169] team0: Port device team_slave_0 added [ 71.477908][ T4169] team0: Port device team_slave_1 added [ 71.491577][ T4172] device hsr_slave_0 entered promiscuous mode [ 71.499937][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 71.509420][ T4172] device hsr_slave_1 entered promiscuous mode [ 71.509636][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 71.523336][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.534329][ T4172] Cannot create hsr debugfs directory [ 71.550336][ T4170] device hsr_slave_0 entered promiscuous mode [ 71.560208][ T4170] device hsr_slave_1 entered promiscuous mode [ 71.570960][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.579776][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 71.586689][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 71.586901][ T4170] Cannot create hsr debugfs directory [ 71.599506][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 71.647640][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.655628][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.685247][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.729424][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.737107][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.765342][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.877376][ T4169] device hsr_slave_0 entered promiscuous mode [ 71.887549][ T4169] device hsr_slave_1 entered promiscuous mode [ 71.897481][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.907867][ T4169] Cannot create hsr debugfs directory [ 72.103034][ T4178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.120092][ T4178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.130441][ T4178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.142667][ T4178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.189439][ T4171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.209865][ T4171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.225186][ T4171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.242557][ T4171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.328949][ T4170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.357540][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.366495][ T4170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.378894][ T4170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.396715][ T4170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.434528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.444449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.455133][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.496325][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.506681][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.522601][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.530034][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.540589][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.555834][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.565400][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.574403][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.581840][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.590671][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.609042][ T4172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.627866][ T4172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.643905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.673635][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.686307][ T4172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.704862][ T4169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.721522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.731977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.745948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.757893][ T4172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.772096][ T4169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.793608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.804979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.814883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.825537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.836437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.845840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.868740][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.876739][ T4169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.889914][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.901571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.912000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.931874][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.948449][ T4169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.968068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.976447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.989339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.000520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.010518][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.019118][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.027118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.036076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.045229][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.053290][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.063102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.080851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.126575][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.158636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.168397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.178889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.188273][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.195458][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.204616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.235286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.249429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.265417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.277114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.306267][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.321536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.331188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.342486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.353951][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.362107][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.373354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.383230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.391991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.401626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.430426][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.443660][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.466453][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.475423][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.484588][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.500643][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.514331][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.522444][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.531125][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.541131][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.552303][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.562377][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.576517][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.578303][ T4214] Bluetooth: hci0: command 0x041b tx timeout [ 73.592824][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.602878][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 73.604740][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.623860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.633628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.657842][ T1107] Bluetooth: hci4: command 0x041b tx timeout [ 73.669641][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 73.679915][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.684538][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 73.704137][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.718724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.734324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.743853][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.752239][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.768614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.783417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.792932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.819928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.830342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.845608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.856781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.870027][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.877155][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.890572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.909612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.917754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.934700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.947883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.958657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.969920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.979316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.014196][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.033377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.042394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.052674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.066372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.077538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.091010][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.113767][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.124818][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.147215][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.158618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.169612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.178896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.188587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.199401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.208610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.220170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.232644][ T4178] device veth0_vlan entered promiscuous mode [ 74.263723][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.274006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.284537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.296838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.306152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.328011][ T4178] device veth1_vlan entered promiscuous mode [ 74.385850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.396705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.414850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.426112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.441098][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.448665][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.458783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.468019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.477178][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.484351][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.494019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.503125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.512344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.523910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.533100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.542460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.563322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.575302][ T4171] device veth0_vlan entered promiscuous mode [ 74.603115][ T4170] device veth0_vlan entered promiscuous mode [ 74.616219][ T4171] device veth1_vlan entered promiscuous mode [ 74.654416][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.664909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.675644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.685135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.694361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.704591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.713763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.724022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.734097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.744118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.754439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.763958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.774168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.782115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.794789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.804344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.813641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.826189][ T4178] device veth0_macvtap entered promiscuous mode [ 74.841738][ T4170] device veth1_vlan entered promiscuous mode [ 74.860742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.869562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.880629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.890645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.900184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.910609][ T4178] device veth1_macvtap entered promiscuous mode [ 74.939151][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.985759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.001585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.012210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.023783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.040843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.051235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.071432][ T4170] device veth0_macvtap entered promiscuous mode [ 75.089274][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.102837][ T4171] device veth0_macvtap entered promiscuous mode [ 75.113016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.122439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.132955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.142498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.155088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.165455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.192193][ T4170] device veth1_macvtap entered promiscuous mode [ 75.216303][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.235792][ T4171] device veth1_macvtap entered promiscuous mode [ 75.254429][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.264111][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.286310][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.298702][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.311722][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.329842][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.342229][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.352888][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.361184][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.369628][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.378529][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.387747][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.395944][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.406688][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.420406][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.435504][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.446328][ T4172] device veth0_vlan entered promiscuous mode [ 75.472936][ T4178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.482538][ T4178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.493204][ T4178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.503552][ T4178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.516751][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.526370][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.539929][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.552642][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.562896][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.574850][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.588167][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.601274][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.612224][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.624216][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.636888][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.649685][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.666017][ T4172] device veth1_vlan entered promiscuous mode [ 75.667561][ T4175] Bluetooth: hci1: command 0x040f tx timeout [ 75.679201][ T4175] Bluetooth: hci0: command 0x040f tx timeout [ 75.700725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.714611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.735397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.752274][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 75.759002][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 75.765272][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 75.789470][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.804393][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.816431][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.829689][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.842005][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.890002][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.918261][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.931189][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.950412][ T4171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.960264][ T4171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.971732][ T4171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.981664][ T4171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.062770][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.074809][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.089854][ T4172] device veth0_macvtap entered promiscuous mode [ 76.109838][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.137622][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.139903][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.146799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.163274][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.186706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.195383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.233951][ T4172] device veth1_macvtap entered promiscuous mode [ 76.250644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.264351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.292985][ T4169] device veth0_vlan entered promiscuous mode [ 76.311908][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.324363][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.334687][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.343178][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.364872][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.376398][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.388982][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.401118][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.411654][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.423464][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.435417][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.446460][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.460514][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.470932][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.482441][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.492641][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.503720][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.514978][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.532772][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.543693][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.553599][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.563484][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.584992][ T4169] device veth1_vlan entered promiscuous mode [ 76.596555][ T4172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.606791][ T4172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.616283][ T4172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.627760][ T4172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.650044][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.684239][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.718767][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.729313][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.738189][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.744616][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.746734][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.764756][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.776099][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.786551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.799014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.811645][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.822439][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.841151][ T4169] device veth0_macvtap entered promiscuous mode [ 76.861160][ T4169] device veth1_macvtap entered promiscuous mode [ 76.943807][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.954825][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.966572][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.977794][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.979726][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.997626][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.008163][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.021645][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.031837][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.043129][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.057316][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.077982][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.087683][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.096723][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.106507][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.118422][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.129828][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.143952][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.157985][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.192769][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.205244][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.216765][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.229282][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.247697][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.271294][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.324982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.335327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.397853][ T2003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.406560][ T2003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.438711][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.547272][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.562703][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.572775][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.582987][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.636458][ T4260] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.736646][ T4266] loop1: detected capacity change from 0 to 164 [ 77.784991][ T4259] Bluetooth: hci0: command 0x0419 tx timeout [ 77.884550][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 77.953664][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 78.006664][ T4259] Bluetooth: hci2: command 0x0419 tx timeout [ 78.046739][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 78.350586][ T4266] ISOFS: unable to read i-node block [ 78.357596][ T4266] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 78.475889][ T4260] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.614468][ T4260] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.901827][ T4260] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.924475][ T4274] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.934634][ T4274] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.944386][ T4274] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.954436][ T4274] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.970631][ T4274] team0: Port device vxlan0 added [ 79.043155][ T4274] syz.1.7 (4274) used greatest stack depth: 20576 bytes left [ 79.084119][ T4260] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.112943][ T4260] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.134359][ T4260] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.174900][ T4260] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.234105][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.314613][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.324944][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.449797][ T4279] process 'syz.1.8' launched '/dev/fd/3' with NULL argv: empty string added [ 80.073960][ T2003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.118265][ T2003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.345232][ T162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.405360][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.424092][ T4287] syz.1.12 (4287): /proc/4286/oom_adj is deprecated, please use /proc/4286/oom_score_adj instead. [ 81.326874][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.412619][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.752227][ T4310] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.795177][ T4310] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.816140][ T4317] loop0: detected capacity change from 0 to 512 [ 81.841631][ T4310] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.881992][ T4310] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.930546][ T4310] device geneve2 entered promiscuous mode [ 81.955375][ T4317] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.978623][ T4317] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 82.021450][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 82.043356][ T4317] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 82.061979][ T4317] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 82.076718][ T4317] System zones: 0-2, 18-18, 34-34 [ 82.135576][ T4317] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.139260][ T4268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.163408][ T4317] EXT4-fs (loop0): 1 truncate cleaned up [ 82.176859][ T4317] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000a04d,errors=continue,,errors=continue. Quota mode: none. [ 82.239520][ T26] audit: type=1800 audit(1748124411.408:2): pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 82.432550][ T4332] loop3: detected capacity change from 0 to 512 [ 82.539495][ T4332] ======================================================= [ 82.539495][ T4332] WARNING: The mand mount option has been deprecated and [ 82.539495][ T4332] and is ignored by this kernel. Remove the mand [ 82.539495][ T4332] option from the mount to silence this warning. [ 82.539495][ T4332] ======================================================= [ 82.858288][ T4332] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.880855][ T4332] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 82.891284][ T4332] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 82.901045][ T4332] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.23: Failed to acquire dquot type 1 [ 82.930575][ T4332] EXT4-fs (loop3): 1 truncate cleaned up [ 82.999804][ T4332] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 83.366980][ C1] sched: RT throttling activated [ 83.382082][ T1346] cfg80211: failed to load regulatory.db [ 83.793074][ T4342] IPv6: Can't replace route, no match found [ 84.319436][ T4354] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.29'. [ 84.533012][ T4352] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.29'. [ 84.573826][ T26] audit: type=1326 audit(1748124413.738:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 84.597232][ T26] audit: type=1326 audit(1748124413.738:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 84.620163][ T26] audit: type=1326 audit(1748124413.738:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 84.644665][ T26] audit: type=1326 audit(1748124413.788:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 84.723212][ T26] audit: type=1326 audit(1748124413.788:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 84.768785][ T26] audit: type=1326 audit(1748124413.848:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 84.824215][ T26] audit: type=1326 audit(1748124413.978:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm="syz.0.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 85.076435][ T4382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.097827][ T4380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.42'. [ 85.280877][ T4387] netlink: 'syz.4.44': attribute type 4 has an invalid length. [ 85.437262][ T4392] netlink: 'syz.4.44': attribute type 4 has an invalid length. [ 85.658441][ T4408] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.48'. [ 85.674563][ T4406] loop4: detected capacity change from 0 to 512 [ 85.683767][ T4404] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.48'. [ 85.874292][ T4406] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 85.987312][ T4406] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.000220][ T4420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 86.472827][ T4445] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.63'. [ 86.524455][ T4446] loop4: detected capacity change from 0 to 128 [ 86.526759][ T4442] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.63'. [ 86.567499][ T4251] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.590334][ T4446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.639143][ T4446] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.887261][ T4251] usb 1-1: Using ep0 maxpacket: 32 [ 86.892343][ T4452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.983333][ T4426] loop0: detected capacity change from 0 to 256 [ 87.135140][ T4426] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 87.267259][ T4251] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.295810][ T4467] loop4: detected capacity change from 0 to 512 [ 87.367118][ T4251] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 87.383531][ T4251] usb 1-1: can't read configurations, error -71 [ 87.392874][ T4467] EXT4-fs (loop4): Ignoring removed nobh option [ 87.414206][ T4467] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.72: invalid indirect mapped block 256 (level 2) [ 87.585862][ T4467] EXT4-fs (loop4): 2 truncates cleaned up [ 87.600592][ T4478] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 87.610572][ T4467] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,debug_want_extra_isize=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 87.906656][ T4486] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.78'. [ 87.945820][ T4485] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.78'. [ 87.976140][ T4489] loop2: detected capacity change from 0 to 1024 [ 88.117819][ T4489] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.135561][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 88.135576][ T26] audit: type=1800 audit(1748124417.298:68): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.72" name="file3" dev="loop4" ino=15 res=0 errno=0 [ 88.517611][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.526810][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.638855][ T4511] device bridge_slave_1 left promiscuous mode [ 88.646595][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.745283][ T4511] device bridge_slave_0 left promiscuous mode [ 88.792208][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.135017][ T4526] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.91'. [ 89.201795][ T4525] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.91'. [ 89.393525][ T26] audit: type=1326 audit(1748124418.548:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 89.417878][ T26] audit: type=1326 audit(1748124418.558:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 89.440408][ T26] audit: type=1326 audit(1748124418.558:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 90.147260][ T26] audit: type=1326 audit(1748124418.638:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3a3775f225 code=0x7ffc0000 [ 90.324073][ T4268] kernel write not supported for file /40/attr/exec (pid: 4268 comm: kworker/0:9) [ 90.349665][ T26] audit: type=1326 audit(1748124418.638:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 90.403094][ T26] audit: type=1326 audit(1748124418.778:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 90.572759][ T26] audit: type=1326 audit(1748124419.238:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a376c8b39 code=0x7ffc0000 [ 90.585243][ T4552] loop4: detected capacity change from 0 to 164 [ 90.663038][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 90.687168][ T26] audit: type=1326 audit(1748124419.238:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 90.792992][ T26] audit: type=1326 audit(1748124419.238:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4529 comm="syz.3.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 91.004180][ T4564] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.106'. [ 91.035878][ T4566] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.106'. [ 91.052821][ T4548] Cannot find add_set index 0 as target [ 91.436506][ T4581] loop3: detected capacity change from 0 to 1024 [ 91.522241][ T4581] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.613213][ T4581] loop9: detected capacity change from 0 to 7 [ 91.639683][ T4302] Dev loop9: unable to read RDB block 7 [ 91.656906][ T4302] loop9: unable to read partition table [ 91.716558][ T4302] loop9: partition table beyond EOD, truncated [ 91.728371][ T4581] Dev loop9: unable to read RDB block 7 [ 91.754244][ T4581] loop9: unable to read partition table [ 91.768348][ T4581] loop9: partition table beyond EOD, truncated [ 91.788510][ T4581] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 91.788510][ T4581] U) failed (rc=-5) [ 91.863782][ T4596] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.117'. [ 91.890592][ T4598] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.117'. [ 92.136061][ T4607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.121'. [ 92.403055][ T4617] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.404511][ T4594] device hsr0 entered promiscuous mode [ 92.476737][ T4594] device macvlan2 entered promiscuous mode [ 92.983314][ T4634] __nla_validate_parse: 1 callbacks suppressed [ 92.983332][ T4634] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.131'. [ 92.983753][ T4644] syz.4.136 uses obsolete (PF_INET,SOCK_PACKET) [ 93.006308][ T4640] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.131'. [ 93.093415][ T4648] syz.3.137[4648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.093525][ T4648] syz.3.137[4648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.223388][ T4651] loop4: detected capacity change from 0 to 1024 [ 93.282149][ T4654] loop0: detected capacity change from 0 to 256 [ 93.301386][ T4651] EXT4-fs (loop4): Ignoring removed orlov option [ 93.352667][ T4651] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback. [ 93.386247][ T4654] FAT-fs (loop0): Directory bread(block 64) failed [ 93.433750][ T4654] FAT-fs (loop0): Directory bread(block 65) failed [ 93.452258][ T4654] FAT-fs (loop0): Directory bread(block 66) failed [ 93.459487][ T4654] FAT-fs (loop0): Directory bread(block 67) failed [ 93.466852][ T4654] FAT-fs (loop0): Directory bread(block 68) failed [ 93.474381][ T4654] FAT-fs (loop0): Directory bread(block 69) failed [ 93.481945][ T4654] FAT-fs (loop0): Directory bread(block 70) failed [ 93.490726][ T4654] FAT-fs (loop0): Directory bread(block 71) failed [ 93.498340][ T4654] FAT-fs (loop0): Directory bread(block 72) failed [ 93.505494][ T4654] FAT-fs (loop0): Directory bread(block 73) failed [ 93.641343][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 93.641359][ T26] audit: type=1800 audit(1748124422.808:135): pid=4654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.140" name="file0" dev="loop0" ino=1048590 res=0 errno=0 [ 93.643095][ T4654] attempt to access beyond end of device [ 93.643095][ T4654] loop0: rw=0, want=1164, limit=256 [ 93.695332][ T4654] attempt to access beyond end of device [ 93.695332][ T4654] loop0: rw=0, want=1164, limit=256 [ 93.835171][ T4680] Zero length message leads to an empty skb [ 93.909712][ T4682] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.149'. [ 93.935490][ T4676] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.149'. [ 93.960411][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 94.035949][ T4688] loop2: detected capacity change from 0 to 1024 [ 94.165896][ T4688] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.338896][ T26] audit: type=1326 audit(1748124423.508:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 94.392297][ T26] audit: type=1326 audit(1748124423.508:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 94.538928][ T26] audit: type=1326 audit(1748124423.508:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4707 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ff5c6969 code=0x7ffc0000 [ 94.754438][ T4729] syz.0.168[4729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.754544][ T4729] syz.0.168[4729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.835253][ T4732] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.165'. [ 94.907245][ T26] audit: type=1326 audit(1748124424.068:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4187a4969 code=0x7ffc0000 [ 94.962191][ T4738] loop0: detected capacity change from 0 to 512 [ 94.987910][ T26] audit: type=1326 audit(1748124424.068:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4187a4969 code=0x7ffc0000 [ 94.993019][ T4728] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.165'. [ 95.022372][ T26] audit: type=1326 audit(1748124424.068:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd4187a4969 code=0x7ffc0000 [ 95.056224][ T26] audit: type=1326 audit(1748124424.068:142): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4187a4969 code=0x7ffc0000 [ 95.082430][ T26] audit: type=1326 audit(1748124424.068:143): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.2.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4187a4969 code=0x7ffc0000 [ 95.239973][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 95.270546][ T4738] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.172: inode #1: comm syz.0.172: iget: illegal inode # [ 95.983808][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.017127][ T4738] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.172: error while reading EA inode 1 err=-117 [ 96.041307][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.106223][ T4738] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.127461][ T4745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.163043][ T4738] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.172: inode #1: comm syz.0.172: iget: illegal inode # [ 96.221266][ T4738] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.172: error while reading EA inode 1 err=-117 [ 96.264610][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 96.276753][ T4738] EXT4-fs (loop0): 1 orphan inode deleted [ 96.284027][ T4738] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 96.358283][ T26] audit: type=1326 audit(1748124425.528:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.4.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb16b04969 code=0x7ffc0000 [ 96.484556][ T4771] loop2: detected capacity change from 0 to 128 [ 96.585562][ T4771] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 96.642237][ T4771] EXT4-fs error (device loop2): ext4_fill_super:4841: inode #2: comm syz.2.185: iget: checksum invalid [ 96.702531][ T4771] EXT4-fs (loop2): get root inode failed [ 96.709438][ T4782] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.715673][ T4771] EXT4-fs (loop2): mount failed [ 96.922675][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.191'. [ 97.072557][ T4801] loop3: detected capacity change from 0 to 512 [ 97.100136][ T4801] EXT4-fs (loop3): Mount option "norecovery" incompatible with ext2 [ 97.182560][ T4801] tipc: Started in network mode [ 97.208104][ T4801] tipc: Node identity ac14140f, cluster identity 4711 [ 97.255814][ T4801] tipc: New replicast peer: 255.255.255.255 [ 97.292644][ T4801] tipc: Enabled bearer , priority 10 [ 97.687895][ T4832] loop0: detected capacity change from 0 to 512 [ 97.706591][ T4833] capability: warning: `syz.3.209' uses 32-bit capabilities (legacy support in use) [ 97.742034][ T4832] EXT4-fs (loop0): Ignoring removed orlov option [ 97.772084][ T4832] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.819966][ T4832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.877489][ T4832] EXT4-fs (loop0): 1 orphan inode deleted [ 97.904431][ T4832] EXT4-fs (loop0): 1 truncate cleaned up [ 97.960859][ T4832] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,errors=remount-ro,. Quota mode: none. [ 98.037746][ T4832] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.0.208: path /41/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 98.150676][ T4832] EXT4-fs (loop0): Remounting filesystem read-only [ 98.347750][ T4268] tipc: Node number set to 2886997007 [ 99.371923][ T4867] __nla_validate_parse: 4 callbacks suppressed [ 99.371958][ T4867] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.221'. [ 99.404315][ T26] kauditd_printk_skb: 272 callbacks suppressed [ 99.404330][ T26] audit: type=1326 audit(1748124428.568:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 99.489388][ T4874] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.221'. [ 99.496529][ T26] audit: type=1326 audit(1748124428.598:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 99.553525][ T4883] loop3: detected capacity change from 0 to 512 [ 99.608465][ T4884] loop4: detected capacity change from 0 to 2048 [ 99.615381][ T26] audit: type=1326 audit(1748124428.598:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4877 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3772c969 code=0x7ffc0000 [ 99.690762][ T26] audit: type=1326 audit(1748124428.748:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e37375969 code=0x7ffc0000 [ 99.695634][ T4885] IPVS: stopping master sync thread 4889 ... [ 99.735501][ T4889] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 99.757113][ T26] audit: type=1326 audit(1748124428.748:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e37375969 code=0x7ffc0000 [ 99.780341][ T26] audit: type=1326 audit(1748124428.748:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e37375969 code=0x7ffc0000 [ 99.801514][ T4884] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.806447][ T26] audit: type=1326 audit(1748124428.748:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e37375969 code=0x7ffc0000 [ 99.841183][ T26] audit: type=1326 audit(1748124428.748:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e37375969 code=0x7ffc0000 [ 99.882356][ T4883] EXT4-fs (loop3): 1 orphan inode deleted [ 99.889599][ T4883] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.901500][ T4883] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.920058][ T4884] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 99.929318][ T4883] [ 99.931797][ T4883] ====================================================== [ 99.932874][ T26] audit: type=1326 audit(1748124428.748:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e37375969 code=0x7ffc0000 [ 99.939081][ T4883] WARNING: possible circular locking dependency detected [ 99.939104][ T4883] 5.15.184-syzkaller #0 Not tainted [ 99.939116][ T4883] ------------------------------------------------------ [ 99.939122][ T4883] syz.3.226/4883 is trying to acquire lock: [ 99.939132][ T4883] ffff88805f1e1668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x32f/0x1b30 [ 99.963695][ T26] audit: type=1326 audit(1748124428.748:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e37375969 code=0x7ffc0000 [ 99.969189][ T4883] [ 99.969189][ T4883] but task is already holding lock: [ 99.969198][ T4883] ffff8880795d0208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 100.038703][ T4883] [ 100.038703][ T4883] which lock already depends on the new lock. [ 100.038703][ T4883] [ 100.049326][ T4883] [ 100.049326][ T4883] the existing dependency chain (in reverse order) is: [ 100.058426][ T4883] [ 100.058426][ T4883] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 100.066508][ T4883] down_read+0x44/0x2e0 [ 100.072019][ T4883] v2_read_dquot+0x4a/0x110 [ 100.077530][ T4883] dquot_acquire+0x152/0x520 [ 100.083956][ T4883] ext4_acquire_dquot+0x2d9/0x4a0 [ 100.090013][ T4883] dqget+0x778/0xeb0 [ 100.094618][ T4883] __dquot_initialize+0x328/0xcb0 [ 100.100259][ T4883] ext4_process_orphan+0x54/0x300 [ 100.105979][ T4883] ext4_orphan_cleanup+0xaa9/0x12e0 [ 100.111983][ T4883] ext4_fill_super+0x9288/0x9a00 [ 100.117456][ T4883] mount_bdev+0x287/0x3c0 [ 100.122304][ T4883] legacy_get_tree+0xe6/0x180 [ 100.127497][ T4883] vfs_get_tree+0x88/0x270 [ 100.132525][ T4883] do_new_mount+0x24a/0xa40 [ 100.138009][ T4883] __se_sys_mount+0x2d6/0x3c0 [ 100.143258][ T4883] do_syscall_64+0x4c/0xa0 [ 100.148291][ T4883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.155160][ T4883] [ 100.155160][ T4883] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 100.163476][ T4883] __mutex_lock_common+0x1eb/0x2390 [ 100.170063][ T4883] mutex_lock_nested+0x17/0x20 [ 100.175628][ T4883] dquot_commit+0x5a/0x410 [ 100.181752][ T4883] ext4_write_dquot+0x1f0/0x360 [ 100.189454][ T4883] mark_all_dquot_dirty+0x1e3/0x400 [ 100.196194][ T4883] __dquot_free_space+0x7ca/0xb90 [ 100.202305][ T4883] ext4_free_blocks+0x1af5/0x2480 [ 100.209289][ T4883] ext4_ext_remove_space+0x1eaa/0x4390 [ 100.215933][ T4883] ext4_ext_truncate+0x192/0x240 [ 100.221427][ T4883] ext4_truncate+0x9f1/0x10d0 [ 100.226817][ T4883] ext4_evict_inode+0xb43/0x1080 [ 100.232375][ T4883] evict+0x485/0x870 [ 100.236901][ T4883] ext4_orphan_cleanup+0xaa9/0x12e0 [ 100.242782][ T4883] ext4_fill_super+0x9288/0x9a00 [ 100.248262][ T4883] mount_bdev+0x287/0x3c0 [ 100.253133][ T4883] legacy_get_tree+0xe6/0x180 [ 100.258470][ T4883] vfs_get_tree+0x88/0x270 [ 100.263611][ T4883] do_new_mount+0x24a/0xa40 [ 100.268645][ T4883] __se_sys_mount+0x2d6/0x3c0 [ 100.273973][ T4883] do_syscall_64+0x4c/0xa0 [ 100.279081][ T4883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.285514][ T4883] [ 100.285514][ T4883] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 100.293339][ T4883] __lock_acquire+0x2c33/0x7c60 [ 100.298715][ T4883] lock_acquire+0x197/0x3f0 [ 100.303827][ T4883] down_read+0x44/0x2e0 [ 100.308609][ T4883] ext4_map_blocks+0x32f/0x1b30 [ 100.314066][ T4883] ext4_getblk+0x16d/0x630 [ 100.319009][ T4883] ext4_bread+0x26/0x180 [ 100.324481][ T4883] ext4_quota_write+0x230/0x570 [ 100.330041][ T4883] get_free_dqblk+0x387/0x7d0 [ 100.335348][ T4883] do_insert_tree+0xc9a/0x1970 [ 100.340916][ T4883] do_insert_tree+0x5b1/0x1970 [ 100.346787][ T4883] do_insert_tree+0x5b1/0x1970 [ 100.353419][ T4883] do_insert_tree+0x5b1/0x1970 [ 100.358795][ T4883] qtree_write_dquot+0x361/0x4b0 [ 100.364336][ T4883] v2_write_dquot+0x108/0x190 [ 100.369538][ T4883] dquot_acquire+0x2d5/0x520 [ 100.374830][ T4883] ext4_acquire_dquot+0x2d9/0x4a0 [ 100.380564][ T4883] dqget+0x778/0xeb0 [ 100.385080][ T4883] __dquot_initialize+0x328/0xcb0 [ 100.390711][ T4883] ext4_xattr_set+0xbd/0x320 [ 100.396422][ T4883] __vfs_setxattr+0x3e0/0x420 [ 100.401629][ T4883] __vfs_setxattr_noperm+0x129/0x5e0 [ 100.407631][ T4883] vfs_setxattr+0x168/0x2f0 [ 100.413927][ T4883] setxattr+0x2da/0x300 [ 100.419168][ T4883] path_setxattr+0x142/0x280 [ 100.424852][ T4883] __x64_sys_lsetxattr+0xb4/0xd0 [ 100.430590][ T4883] do_syscall_64+0x4c/0xa0 [ 100.436973][ T4883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.443429][ T4883] [ 100.443429][ T4883] other info that might help us debug this: [ 100.443429][ T4883] [ 100.454014][ T4883] Chain exists of: [ 100.454014][ T4883] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 100.454014][ T4883] [ 100.467689][ T4883] Possible unsafe locking scenario: [ 100.467689][ T4883] [ 100.475587][ T4883] CPU0 CPU1 [ 100.482175][ T4883] ---- ---- [ 100.488079][ T4883] lock(&s->s_dquot.dqio_sem); [ 100.493119][ T4883] lock(&dquot->dq_lock); [ 100.500416][ T4883] lock(&s->s_dquot.dqio_sem); [ 100.507810][ T4883] lock(&ei->i_data_sem/2); [ 100.512521][ T4883] [ 100.512521][ T4883] *** DEADLOCK *** [ 100.512521][ T4883] [ 100.520966][ T4883] 4 locks held by syz.3.226/4883: [ 100.526489][ T4883] #0: ffff8880795d0460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 100.535751][ T4883] #1: ffff88805f2e8de8 (&type->i_mutex_dir_key#4){++++}-{3:3}, at: vfs_setxattr+0x141/0x2f0 [ 100.546032][ T4883] #2: ffff88805f0ee268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 100.556142][ T4883] #3: ffff8880795d0208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 100.566336][ T4883] [ 100.566336][ T4883] stack backtrace: [ 100.573352][ T4883] CPU: 1 PID: 4883 Comm: syz.3.226 Not tainted 5.15.184-syzkaller #0 [ 100.582638][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.593200][ T4883] Call Trace: [ 100.596493][ T4883] [ 100.599523][ T4883] dump_stack_lvl+0x168/0x230 [ 100.604682][ T4883] ? load_image+0x3b0/0x3b0 [ 100.609273][ T4883] ? show_regs_print_info+0x20/0x20 [ 100.614711][ T4883] ? print_circular_bug+0x12b/0x1a0 [ 100.621101][ T4883] check_noncircular+0x274/0x310 [ 100.626178][ T4883] ? add_chain_block+0x940/0x940 [ 100.631575][ T4883] ? lockdep_lock+0xdc/0x1e0 [ 100.637211][ T4883] ? mark_lock+0x94/0x320 [ 100.644185][ T4883] ? mark_lock+0x94/0x320 [ 100.648894][ T4883] __lock_acquire+0x2c33/0x7c60 [ 100.654406][ T4883] ? __lock_acquire+0x13ad/0x7c60 [ 100.659816][ T4883] ? verify_lock_unused+0x140/0x140 [ 100.666350][ T4883] ? verify_lock_unused+0x140/0x140 [ 100.671800][ T4883] ? check_path+0x21/0x40 [ 100.676435][ T4883] ? check_noncircular+0x16f/0x310 [ 100.681779][ T4883] lock_acquire+0x197/0x3f0 [ 100.686332][ T4883] ? ext4_map_blocks+0x32f/0x1b30 [ 100.691371][ T4883] ? __might_sleep+0xf0/0xf0 [ 100.695958][ T4883] ? read_lock_is_recursive+0x10/0x10 [ 100.701434][ T4883] ? rcu_is_watching+0x11/0xa0 [ 100.706503][ T4883] down_read+0x44/0x2e0 [ 100.710692][ T4883] ? ext4_map_blocks+0x32f/0x1b30 [ 100.715906][ T4883] ext4_map_blocks+0x32f/0x1b30 [ 100.721157][ T4883] ? _raw_spin_unlock+0x40/0x40 [ 100.726052][ T4883] ? ext4_issue_zeroout+0x250/0x250 [ 100.731278][ T4883] ? stack_trace_save+0x98/0xe0 [ 100.736270][ T4883] ? stack_depot_save+0x404/0x440 [ 100.741591][ T4883] ext4_getblk+0x16d/0x630 [ 100.746021][ T4883] ? do_insert_tree+0xc9a/0x1970 [ 100.751306][ T4883] ? do_insert_tree+0x5b1/0x1970 [ 100.756327][ T4883] ? do_insert_tree+0x5b1/0x1970 [ 100.761289][ T4883] ? ext4_get_block_unwritten+0x30/0x30 [ 100.766923][ T4883] ? __vfs_setxattr+0x3e0/0x420 [ 100.771968][ T4883] ? path_setxattr+0x142/0x280 [ 100.777024][ T4883] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 100.782539][ T4883] ? do_syscall_64+0x4c/0xa0 [ 100.787676][ T4883] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.793965][ T4883] ext4_bread+0x26/0x180 [ 100.798413][ T4883] ext4_quota_write+0x230/0x570 [ 100.803286][ T4883] ? ext4_quota_read+0x3a0/0x3a0 [ 100.808341][ T4883] get_free_dqblk+0x387/0x7d0 [ 100.813105][ T4883] ? ext4_quota_read+0x3a0/0x3a0 [ 100.818162][ T4883] do_insert_tree+0xc9a/0x1970 [ 100.823003][ T4883] do_insert_tree+0x5b1/0x1970 [ 100.828527][ T4883] do_insert_tree+0x5b1/0x1970 [ 100.833648][ T4883] do_insert_tree+0x5b1/0x1970 [ 100.838752][ T4883] qtree_write_dquot+0x361/0x4b0 [ 100.843833][ T4883] v2_write_dquot+0x108/0x190 [ 100.848990][ T4883] dquot_acquire+0x2d5/0x520 [ 100.853947][ T4883] ext4_acquire_dquot+0x2d9/0x4a0 [ 100.859787][ T4883] dqget+0x778/0xeb0 [ 100.864557][ T4883] __dquot_initialize+0x328/0xcb0 [ 100.869825][ T4883] ? dquot_initialize+0x20/0x20 [ 100.875422][ T4883] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 100.883271][ T4883] ? _raw_spin_unlock+0x40/0x40 [ 100.888417][ T4883] ext4_xattr_set+0xbd/0x320 [ 100.893665][ T4883] ? evm_protected_xattr_common+0x170/0x190 [ 100.899803][ T4883] ? ext4_xattr_set_credits+0x290/0x290 [ 100.905665][ T4883] ? evm_protect_xattr+0x76f/0x970 [ 100.911364][ T4883] ? ext4_xattr_security_get+0x40/0x40 [ 100.919921][ T4883] __vfs_setxattr+0x3e0/0x420 [ 100.924807][ T4883] __vfs_setxattr_noperm+0x129/0x5e0 [ 100.930505][ T4883] vfs_setxattr+0x168/0x2f0 [ 100.935321][ T4883] ? xattr_permission+0x500/0x500 [ 100.940395][ T4883] ? _copy_from_user+0x111/0x170 [ 100.945897][ T4883] ? setxattr+0x243/0x300 [ 100.951296][ T4883] setxattr+0x2da/0x300 [ 100.955567][ T4883] ? path_setxattr+0x280/0x280 [ 100.960568][ T4883] ? __mnt_want_write+0x1e2/0x260 [ 100.966071][ T4883] path_setxattr+0x142/0x280 [ 100.970828][ T4883] ? simple_xattr_list_add+0xf0/0xf0 [ 100.976246][ T4883] ? lock_chain_count+0x20/0x20 [ 100.981291][ T4883] ? vtime_user_exit+0x2dc/0x400 [ 100.986356][ T4883] __x64_sys_lsetxattr+0xb4/0xd0 [ 100.991305][ T4883] do_syscall_64+0x4c/0xa0 [ 100.996086][ T4883] ? clear_bhb_loop+0x30/0x80 [ 101.000777][ T4883] ? clear_bhb_loop+0x30/0x80 [ 101.006063][ T4883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.011979][ T4883] RIP: 0033:0x7f3a3772c969 [ 101.016500][ T4883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.037596][ T4883] RSP: 002b:00007f3a35594038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 101.046022][ T4883] RAX: ffffffffffffffda RBX: 00007f3a37953fa0 RCX: 00007f3a3772c969 [ 101.054646][ T4883] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000080 [ 101.063025][ T4883] RBP: 00007f3a377aeab1 R08: 0000000000000000 R09: 0000000000000000 [ 101.071867][ T4883] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 101.079896][ T4883] R13: 0000000000000000 R14: 00007f3a37953fa0 R15: 00007ffc213f7738 [ 101.087888][ T4883]