last executing test programs: 11.988019242s ago: executing program 0 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a63"], 0xffdd) 11.50487799s ago: executing program 2 (id=170): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r3, 0x0) 11.480529483s ago: executing program 2 (id=171): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 11.348154496s ago: executing program 1 (id=176): r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 543.426276ms ago: executing program 1 (id=183): unshare(0x22020400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) 514.366099ms ago: executing program 0 (id=184): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r1, 0xb}}, 0x48) 513.417949ms ago: executing program 1 (id=185): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@struct={0xc, 0x0, 0x0, 0x4, 0x1, 0x8}, @enum64={0xd, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x100}, {0xa, 0x2, 0xcfb}, {0x9, 0x800}, {0x6, 0x6, 0x81}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x5998}}, @float={0x4, 0x0, 0x0, 0x10, 0x8}]}}, 0x0, 0x92, 0x0, 0x1, 0x2}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) 450.135875ms ago: executing program 0 (id=186): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f6497f1395ca8b951ffacc6b3976143d8547fd036803213d3b15003a5a33c94a772b08061c02f0c5dda70dedfc2ff1b064f247c845a5f196f1adce0e3cf1dc55f4f0a1f70da00634d13487126c08f6d2dfe6ae35eeeea8b8725021fbdf4cfe0c9b5d3cda32ed73cf1f11936b7f9cdd2e8f860080e9282bf39efa498ad63efef90e3d78654f0784301b22a506725b898f76d", 0x99}, {&(0x7f0000000140)="c56c42d0fe92390b52c7c8922ebc7a4767a780c6256b91f8f41d5c1c1a8e428a4086afa97aa75d6b8a450851ca594d3407d7ebdea71e09625205121f", 0x3c}, {&(0x7f0000000640)="557710ef71980facede73a7929cfe97c5af5c97906c1a38b408d28d7b592a6239e742d9cb5182d040858cf3870c7fd4158e4cae1f72f486ca7f8622862fa9c2a39ed40043e49119647165c4e7017d46004098c7d2a40fc61a74cec1da1ddd9187baa6c590571445a13e5ed18bdeb71e57f691080a0423cf037524feaa3efb0de6171075060f5f8d3b8bbab1bb6bf9d", 0x8f}, {&(0x7f0000000800)="878ddb195f23e9cce1ea0b25636bba2bcefbe4ba03f9218bc28765459925d978474360c79cddf6119f24dc337214592c5cffb28cf44854ca2450dbc6d20489029807c618ff13e4b054307e262d11d92067bb33c660b4d6ab36507217bc3825c0fea8666629e67c2bcc233cb080bae518203c3b3d308939c7526055d3a52cbf64627c8d4366dffc57c28a3eb0374be99202950dc684", 0x95}], 0x5}, 0x5) 449.924715ms ago: executing program 1 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x7eda}, 0x18) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 449.702166ms ago: executing program 2 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 449.423606ms ago: executing program 3 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 361.578854ms ago: executing program 1 (id=190): removexattr(0x0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 361.233455ms ago: executing program 4 (id=191): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_io_uring_setup(0x43b5, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0x10, 0x80003, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r4, 0xffe}}, 0x10) close_range(r2, 0xffffffffffffffff, 0x1000000000000000) 361.060214ms ago: executing program 3 (id=192): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x20}, 0x18) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x518, &(0x7f00000009c0)="$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") 360.764914ms ago: executing program 2 (id=193): r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 349.265065ms ago: executing program 1 (id=194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a63"], 0xffdd) 324.985518ms ago: executing program 4 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf251500000060000180140001"], 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 227.710288ms ago: executing program 4 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40004) 227.421428ms ago: executing program 0 (id=197): r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0x3bcc, 0x805, 0x0, 0x0, 0x64) sendmmsg(r4, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1bf1d7", 0x3}], 0x1}}], 0x20, 0x10081) 226.312438ms ago: executing program 2 (id=198): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(0x0, 0x0) 109.11613ms ago: executing program 0 (id=199): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x8000) 108.79282ms ago: executing program 4 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000100018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) 108.6581ms ago: executing program 3 (id=201): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0xc000) 108.45175ms ago: executing program 2 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x361, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 78.404192ms ago: executing program 4 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 73.406903ms ago: executing program 3 (id=204): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0x3bcc, 0x805, 0x0, 0x0, 0x64) sendmmsg(r4, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1bf1d7", 0x3}], 0x1}}], 0x20, 0x10081) 660.28µs ago: executing program 0 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") 279.27µs ago: executing program 3 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() r4 = gettid() tkill(r3, 0x12) tkill(r4, 0x14) 105.73µs ago: executing program 4 (id=207): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x6, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 0s ago: executing program 3 (id=208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 24.334564][ T4310] cgroup: Unknown subsys name 'net' [ 24.615251][ T4310] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.866558][ T4310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 25.612544][ T4326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.614508][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.616827][ T4326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.618144][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.619736][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.621621][ T4326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.622984][ T4326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.624484][ T4326] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 25.625664][ T4326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.626734][ T4326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.628153][ T4326] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 25.629424][ T4326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 25.629746][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.630718][ T4326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 25.632146][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 25.634307][ T4326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 25.634637][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 25.635853][ T4326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.638079][ T4326] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 25.639750][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 25.640021][ T4326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 25.641073][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 25.645441][ T4338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 25.646071][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 25.648666][ T4338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 25.651570][ T4338] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 25.653029][ T4338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 25.663696][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 25.665687][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 25.667059][ T4338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.795252][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 25.807454][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 25.817509][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 25.827141][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 25.828952][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 25.848570][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.849731][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.851201][ T4329] device bridge_slave_0 entered promiscuous mode [ 25.864590][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.865663][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.867036][ T4329] device bridge_slave_1 entered promiscuous mode [ 25.872012][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.873269][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.874739][ T4325] device bridge_slave_0 entered promiscuous mode [ 25.885445][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.886473][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.887856][ T4325] device bridge_slave_1 entered promiscuous mode [ 25.889110][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.890270][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.891761][ T4321] device bridge_slave_0 entered promiscuous mode [ 25.906990][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.908150][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.909536][ T4321] device bridge_slave_1 entered promiscuous mode [ 25.915402][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.917734][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.919182][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.920279][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.921644][ T4330] device bridge_slave_0 entered promiscuous mode [ 25.923446][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.924543][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.925960][ T4330] device bridge_slave_1 entered promiscuous mode [ 25.930446][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.939725][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.945551][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.946688][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.948226][ T4322] device bridge_slave_0 entered promiscuous mode [ 25.959062][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.961372][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.963214][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.964350][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.965758][ T4322] device bridge_slave_1 entered promiscuous mode [ 25.967963][ T4329] team0: Port device team_slave_0 added [ 25.969834][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.976392][ T4325] team0: Port device team_slave_0 added [ 25.978087][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.981982][ T4329] team0: Port device team_slave_1 added [ 25.986752][ T4330] team0: Port device team_slave_0 added [ 25.988473][ T4325] team0: Port device team_slave_1 added [ 26.002830][ T4330] team0: Port device team_slave_1 added [ 26.006914][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.011302][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.014699][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.018433][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.024450][ T4321] team0: Port device team_slave_0 added [ 26.026161][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.027784][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.028843][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.032729][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.034797][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.035855][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.039917][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.041938][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.043171][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.047311][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.051794][ T4321] team0: Port device team_slave_1 added [ 26.060216][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.061186][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.065270][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.067538][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.068619][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.072647][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.085167][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.086246][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.090078][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.093194][ T4322] team0: Port device team_slave_0 added [ 26.133385][ T4329] device hsr_slave_0 entered promiscuous mode [ 26.172600][ T4329] device hsr_slave_1 entered promiscuous mode [ 26.215730][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.216801][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.220490][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.225327][ T4322] team0: Port device team_slave_1 added [ 26.273333][ T4330] device hsr_slave_0 entered promiscuous mode [ 26.312571][ T4330] device hsr_slave_1 entered promiscuous mode [ 26.362399][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.363600][ T4330] Cannot create hsr debugfs directory [ 26.405553][ T4325] device hsr_slave_0 entered promiscuous mode [ 26.442499][ T4325] device hsr_slave_1 entered promiscuous mode [ 26.482438][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.483617][ T4325] Cannot create hsr debugfs directory [ 26.491421][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.492632][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.496533][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.502744][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.503850][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.507840][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.563218][ T4321] device hsr_slave_0 entered promiscuous mode [ 26.612578][ T4321] device hsr_slave_1 entered promiscuous mode [ 26.672382][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.673550][ T4321] Cannot create hsr debugfs directory [ 26.753351][ T4322] device hsr_slave_0 entered promiscuous mode [ 26.792541][ T4322] device hsr_slave_1 entered promiscuous mode [ 26.832353][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.833509][ T4322] Cannot create hsr debugfs directory [ 26.925201][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.954377][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.993823][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.033374][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.090745][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.146954][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.203552][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.250702][ T4330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.304994][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.347607][ T4330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.393713][ T4330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.445685][ T4330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.486736][ T4322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.530769][ T4322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.579466][ T4322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.618019][ T4322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.681884][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.692616][ T4338] Bluetooth: hci3: command 0x0409 tx timeout [ 27.692622][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 27.693607][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 27.702530][ T4338] Bluetooth: hci2: command 0x0409 tx timeout [ 27.703157][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 27.715552][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.717784][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.774089][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.827702][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.869330][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.876059][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.877614][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.879708][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.884975][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.886410][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.887873][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.888902][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.894394][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.896015][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.897478][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.899174][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.900310][ T1711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.913627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.915051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.919163][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.926705][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.930371][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.931688][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.934101][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.935077][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.936312][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.939535][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.947996][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.950412][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.952127][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.953754][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.955281][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.956847][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.958190][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.959644][ T561] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.960753][ T561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.968837][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.973569][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.976851][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.978339][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.979669][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.980884][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.983548][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.985083][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.991280][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.994115][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.995638][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.000920][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.002852][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.004352][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.005723][ T561] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.006791][ T561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.008086][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.009511][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.011435][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.014949][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.023118][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.024311][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.025929][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.027375][ T561] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.028522][ T561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.029873][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.031874][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.033964][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.035376][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.041422][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.045803][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.049261][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.050786][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.053269][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.054885][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.056349][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.058008][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.059374][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.060827][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.063278][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.066236][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.073377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.074932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.076393][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.077397][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.078772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.080266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.081635][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.082758][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.084791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.086452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.095125][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.096723][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.098235][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.099587][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.100656][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.101978][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.106217][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.107713][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.109082][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.110141][ T1711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.111347][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.114635][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.116222][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.126938][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.128326][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.130122][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.131770][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.133944][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.135494][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.136923][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.138337][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.139708][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.141053][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.143065][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.146403][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.151468][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.156415][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.157942][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.159467][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.160963][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.167946][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.169433][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.177016][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.178834][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.180333][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.181857][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.184205][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.185649][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.187639][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.189526][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.190961][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.195877][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.197387][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.198796][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.200090][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.201542][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.204416][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.209775][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.215080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.216293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.222438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.224027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.236305][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.253781][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.255189][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.264237][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.265658][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.271567][ T4325] device veth0_vlan entered promiscuous mode [ 28.278795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.280022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.285053][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.287507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.288992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.303143][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.304406][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.306537][ T4325] device veth1_vlan entered promiscuous mode [ 28.309132][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.310611][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.312221][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.316424][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.317840][ T561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.322865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.324294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.331862][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.337049][ T4329] device veth0_vlan entered promiscuous mode [ 28.344077][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.348062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.349499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.350839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.352267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.355836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.361779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.364216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.365468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.366924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.369865][ T4329] device veth1_vlan entered promiscuous mode [ 28.374164][ T4321] device veth0_vlan entered promiscuous mode [ 28.378014][ T4325] device veth0_macvtap entered promiscuous mode [ 28.381909][ T4321] device veth1_vlan entered promiscuous mode [ 28.384177][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.385520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.386965][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.388340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.389833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.391383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.396479][ T4325] device veth1_macvtap entered promiscuous mode [ 28.409297][ T4329] device veth0_macvtap entered promiscuous mode [ 28.411473][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.413122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.414529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.415987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.417460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.418992][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.428323][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.429664][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.431037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.434719][ T4329] device veth1_macvtap entered promiscuous mode [ 28.437974][ T4330] device veth0_vlan entered promiscuous mode [ 28.440582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.442087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.444017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.448730][ T4321] device veth0_macvtap entered promiscuous mode [ 28.456039][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.457877][ T4330] device veth1_vlan entered promiscuous mode [ 28.460626][ T4321] device veth1_macvtap entered promiscuous mode [ 28.461971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.463822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.465127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.466416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.467826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.473094][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.476890][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.478530][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.480557][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.486488][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.487870][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.489321][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.490684][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.492079][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.494369][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.495880][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.499664][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.500999][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.502244][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.504948][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.511803][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.513690][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.515768][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.521565][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.523333][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.529114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.530663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.532166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.534544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.535944][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.537616][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.539081][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.540708][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.543802][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.545016][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.547030][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.549183][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.550549][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.551840][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.553478][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.560673][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.562259][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.565229][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.567061][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.568998][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.570196][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.571778][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.578383][ T4322] device veth0_vlan entered promiscuous mode [ 28.586492][ T4322] device veth1_vlan entered promiscuous mode [ 28.588168][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.589512][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.590772][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.592053][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.604767][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.606196][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.607614][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.609058][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.614889][ T4322] device veth0_macvtap entered promiscuous mode [ 28.627414][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.628862][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.630273][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.633121][ T4322] device veth1_macvtap entered promiscuous mode [ 28.635875][ T1711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.636133][ T4330] device veth0_macvtap entered promiscuous mode [ 28.637036][ T1711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.639375][ T4330] device veth1_macvtap entered promiscuous mode [ 28.645344][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.646737][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.648032][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.649414][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.663730][ T1711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.667000][ T1711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.671420][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.674139][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.675532][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.677124][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.678561][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.679979][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.682020][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.686237][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.687673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.689119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.695266][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.696903][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.698486][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.700212][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.701940][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.704813][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.706987][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.708806][ T1711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.709506][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.710068][ T1711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.711641][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.715347][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.716985][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.718515][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.720128][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.721534][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.723495][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.725599][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.726945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.728405][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.729917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.731389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.733917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.736070][ T4322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.737507][ T4322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.739001][ T4322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.740396][ T4322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.758399][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.759521][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.760122][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.761137][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.761831][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.765802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.771458][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.774207][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.775715][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.777314][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.778743][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.780169][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.781650][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.784030][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.786272][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.789714][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.791203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.808730][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.810088][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.815834][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.817205][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.834673][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.835862][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.837814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.844839][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.845918][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.847543][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.900294][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.901471][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.905639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.919458][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.920933][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.921826][ T4434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 28.926029][ T4434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 28.927280][ T4434] Zero length message leads to an empty skb [ 28.927699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.930014][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 29.004215][ T4439] team0: Port device team_slave_1 removed [ 29.091370][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.092680][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.100226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.115014][ T4449] loop2: detected capacity change from 0 to 2048 [ 29.154574][ T4449] EXT4-fs (loop2): failed to initialize system zone (-117) [ 29.156018][ T4449] EXT4-fs (loop2): mount failed [ 29.189931][ T4315] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 29.260583][ T4458] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12'. [ 29.268280][ T27] audit: type=1326 audit(29.250:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 29.273432][ T27] audit: type=1326 audit(29.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=448 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 29.277218][ T27] audit: type=1326 audit(29.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 29.308633][ T27] audit: type=1326 audit(29.290:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 29.314157][ T27] audit: type=1326 audit(29.290:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 29.320810][ T27] audit: type=1326 audit(29.290:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 29.327662][ T27] audit: type=1326 audit(29.290:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 29.331571][ T27] audit: type=1326 audit(29.290:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 29.336881][ T27] audit: type=1326 audit(29.290:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 29.340271][ T27] audit: type=1326 audit(29.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 29.772472][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 29.773483][ T4327] Bluetooth: hci0: command 0x041b tx timeout [ 29.782847][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 29.783833][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 29.784768][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 31.852609][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 31.852685][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 31.853615][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 31.854565][ T4327] Bluetooth: hci0: command 0x040f tx timeout [ 31.855509][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 33.932368][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 33.933312][ T4327] Bluetooth: hci0: command 0x0419 tx timeout [ 33.933332][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 33.934255][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 33.935104][ T4338] Bluetooth: hci3: command 0x0419 tx timeout [ 40.272070][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 40.273644][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 40.342891][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 40.354878][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 40.356421][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 40.365904][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 40.367389][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 40.480907][ T4504] loop3: detected capacity change from 0 to 1024 [ 40.482239][ T4504] ======================================================= [ 40.482239][ T4504] WARNING: The mand mount option has been deprecated and [ 40.482239][ T4504] and is ignored by this kernel. Remove the mand [ 40.482239][ T4504] option from the mount to silence this warning. [ 40.482239][ T4504] ======================================================= [ 40.491492][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 40.498046][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.499276][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.501589][ T4508] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 40.502958][ T4504] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.505165][ T4504] ext4: Unknown parameter 'dont_measure' [ 40.625943][ T4520] loop0: detected capacity change from 0 to 8192 [ 51.498451][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 51.499916][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 51.501345][ T4522] device veth0_to_bridge entered promiscuous mode [ 51.503566][ T4525] device veth0_to_bridge left promiscuous mode [ 51.515468][ T4535] netdevsim netdevsim0: Direct firmware load for r failed with error -2 [ 51.516799][ T4535] netdevsim netdevsim0: Falling back to sysfs fallback for: r [ 51.559929][ T4545] loop0: detected capacity change from 0 to 512 [ 51.606421][ T4545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.663835][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 51.704112][ T4567] loop0: detected capacity change from 0 to 1024 [ 51.734010][ T4569] loop2: detected capacity change from 0 to 512 [ 51.735319][ T4569] EXT4-fs: Ignoring removed oldalloc option [ 51.736881][ T4569] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.739447][ T4567] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.54: Invalid block bitmap block 0 in block_group 0 [ 51.741981][ T4567] __quota_error: 19 callbacks suppressed [ 51.741988][ T4567] Quota error (device loop0): write_blk: dquota write failed [ 51.756119][ T4567] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 51.757800][ T4567] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.54: Failed to acquire dquot type 0 [ 51.761499][ T4567] EXT4-fs error (device loop0): ext4_free_blocks:6205: comm syz.0.54: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.766943][ T4569] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.55: Parent and EA inode have the same ino 15 [ 51.772077][ T4569] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.779733][ T4567] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.54: Invalid inode bitmap blk 0 in block_group 0 [ 51.787906][ T4569] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.55: Parent and EA inode have the same ino 15 [ 51.794033][ T4567] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 51.798335][ T4569] EXT4-fs (loop2): 1 orphan inode deleted [ 51.801695][ T4567] EXT4-fs (loop0): 1 orphan inode deleted [ 51.806645][ T4569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.809093][ T4567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.815222][ T1711] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 51.816691][ T1711] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:6: Failed to release dquot type 0 [ 51.820085][ T4574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 51.821512][ T4574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 51.837298][ T4567] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 51.881762][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 51.899830][ T4548] netlink: 580 bytes leftover after parsing attributes in process `syz.1.50'. [ 51.904832][ T27] audit: type=1326 audit(51.890:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 51.908234][ T27] audit: type=1326 audit(51.890:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 51.911680][ T27] audit: type=1326 audit(51.890:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 51.940955][ T27] audit: type=1326 audit(51.890:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 51.946255][ T27] audit: type=1326 audit(51.890:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 51.968486][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 51.972578][ T27] audit: type=1326 audit(51.890:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=165 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 51.978020][ T27] audit: type=1326 audit(51.890:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 52.031188][ T4588] loop0: detected capacity change from 0 to 2048 [ 52.056051][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.059776][ T4588] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 52.091035][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 52.156433][ T4601] hub 2-0:1.0: USB hub found [ 52.157798][ T4601] hub 2-0:1.0: 8 ports detected [ 52.292821][ T4604] loop0: detected capacity change from 0 to 2048 [ 52.353063][ T4604] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 52.985576][ T4612] loop2: detected capacity change from 0 to 2048 [ 53.018734][ T4612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.036604][ T1614] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.036683][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 53.039305][ T1614] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 53.043480][ T1614] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.043480][ T1614] [ 53.044950][ T1614] EXT4-fs (loop0): Total free blocks count 0 [ 53.045850][ T1614] EXT4-fs (loop0): Free/Dirty block details [ 53.046852][ T1614] EXT4-fs (loop0): free_blocks=2415919504 [ 53.047724][ T1614] EXT4-fs (loop0): dirty_blocks=7504 [ 53.048542][ T1614] EXT4-fs (loop0): Block reservation details [ 53.049502][ T1614] EXT4-fs (loop0): i_reserved_data_blocks=469 [ 53.079173][ T1614] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 53.098535][ T4618] loop2: detected capacity change from 0 to 1024 [ 53.110481][ T4618] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.111504][ T4618] EXT4-fs: Ignoring removed nobh option [ 53.129780][ T4618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.149834][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 63.113302][ T4586] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.180983][ T4636] loop4: detected capacity change from 0 to 512 [ 63.189607][ T4636] EXT4-fs: Ignoring removed nobh option [ 63.200640][ T4636] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.228181][ T4644] loop1: detected capacity change from 0 to 512 [ 63.231288][ T4640] netlink: 256 bytes leftover after parsing attributes in process `syz.3.79'. [ 63.239499][ T4636] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #3: comm syz.4.78: corrupted inode contents [ 63.241973][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.247393][ T4636] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #3: comm syz.4.78: mark_inode_dirty error [ 63.255839][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.256496][ T4644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.262866][ T4636] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #3: comm syz.4.78: corrupted inode contents [ 63.265112][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.266183][ T4636] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.78: mark_inode_dirty error [ 63.280223][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.290279][ T4636] __quota_error: 1 callbacks suppressed [ 63.290287][ T4636] Quota error (device loop4): write_blk: dquota write failed [ 63.305992][ T4636] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 63.307576][ T4636] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.78: Failed to acquire dquot type 0 [ 63.311388][ T4648] loop2: detected capacity change from 0 to 8192 [ 63.316463][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.321549][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 63.326995][ T4636] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.78: corrupted inode contents [ 63.327385][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 63.331030][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.345889][ T4636] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #16: comm syz.4.78: mark_inode_dirty error [ 63.355742][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.356856][ T4636] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.78: corrupted inode contents [ 63.389405][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.390430][ T4636] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.78: mark_inode_dirty error [ 63.396019][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.397099][ T4636] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.78: corrupted inode contents [ 63.399942][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.400967][ T4636] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 63.407334][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.408373][ T4636] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.78: corrupted inode contents [ 63.415974][ T4668] loop3: detected capacity change from 0 to 136 [ 63.419174][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.420213][ T4636] EXT4-fs error (device loop4): ext4_truncate:4318: inode #16: comm syz.4.78: mark_inode_dirty error [ 63.423063][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.424072][ T4636] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 63.428530][ T4636] EXT4-fs (loop4): Remounting filesystem read-only [ 63.430655][ T4636] EXT4-fs (loop4): 1 truncate cleaned up [ 63.431585][ T4636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.475367][ T4322] EXT4-fs (loop4): unmounting filesystem. [ 63.527016][ T27] audit: type=1326 audit(63.510:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 63.530360][ T27] audit: type=1326 audit(63.510:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 63.534939][ T27] audit: type=1326 audit(63.510:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 63.534967][ T27] audit: type=1326 audit(63.510:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 63.534984][ T27] audit: type=1326 audit(63.510:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 63.534998][ T27] audit: type=1326 audit(63.510:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 63.535011][ T27] audit: type=1326 audit(63.510:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99f5b9e8 code=0x7ffc0000 [ 63.535024][ T27] audit: type=1326 audit(63.510:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff99f5df8c code=0x7ffc0000 [ 63.546794][ T4649] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 64.493805][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493866][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.494526][ T22] cfg80211: failed to load regulatory.db [ 64.957846][ T4695] loop2: detected capacity change from 0 to 2048 [ 65.128662][ T4695] Alternate GPT is invalid, using primary GPT. [ 65.129921][ T4695] loop2: p2 p3 p7 [ 65.687434][ T4699] loop2: detected capacity change from 0 to 164 [ 65.693411][ T4699] process 'syz.2.97' launched '/dev/fd/4' with NULL argv: empty string added [ 65.696310][ T4699] syz.2.97: attempt to access beyond end of device [ 65.696310][ T4699] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 65.698785][ T4699] syz.2.97: attempt to access beyond end of device [ 65.698785][ T4699] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 65.725381][ T4701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 74.922103][ T4676] netlink: 'syz.4.90': attribute type 21 has an invalid length. [ 74.923423][ T4676] netlink: 144 bytes leftover after parsing attributes in process `syz.4.90'. [ 74.978804][ T4715] IPv6: Can't replace route, no match found [ 75.001172][ T27] kauditd_printk_skb: 630 callbacks suppressed [ 75.001181][ T27] audit: type=1326 audit(74.980:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15b9e8 code=0x7ffc0000 [ 75.006942][ T27] audit: type=1326 audit(74.990:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15b9e8 code=0x7ffc0000 [ 75.011165][ T27] audit: type=1326 audit(74.990:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15b9e8 code=0x7ffc0000 [ 75.017815][ T27] audit: type=1326 audit(74.990:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8b15b9e8 code=0x7ffc0000 [ 75.021238][ T27] audit: type=1326 audit(74.990:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15b9e8 code=0x7ffc0000 [ 75.025045][ T27] audit: type=1326 audit(74.990:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15b9e8 code=0x7ffc0000 [ 75.039852][ T27] audit: type=1326 audit(74.990:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15b9e8 code=0x7ffc0000 [ 75.047609][ T27] audit: type=1326 audit(74.990:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8b15df8c code=0x7ffc0000 [ 75.056989][ T27] audit: type=1326 audit(74.990:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15b9e8 code=0x7ffc0000 [ 75.060771][ T27] audit: type=1326 audit(74.990:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4721 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15b9e8 code=0x7ffc0000 [ 75.239516][ T4748] loop2: detected capacity change from 0 to 8192 [ 75.250527][ T4748] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.316537][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 75.318088][ T4756] netlink: 60 bytes leftover after parsing attributes in process `syz.2.117'. [ 75.337572][ T4758] loop1: detected capacity change from 0 to 1024 [ 75.339049][ T4758] EXT4-fs: Ignoring removed orlov option [ 75.346201][ T4758] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.328513][ T4748] smc: net device bond0 applied user defined pnetid SYZ0 [ 86.364389][ T27] kauditd_printk_skb: 144 callbacks suppressed [ 86.364398][ T27] audit: type=1326 audit(86.350:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.370648][ T27] audit: type=1326 audit(86.350:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.389286][ T27] audit: type=1326 audit(86.350:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.401745][ T27] audit: type=1326 audit(86.350:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.411186][ T27] audit: type=1326 audit(86.370:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.416889][ T27] audit: type=1326 audit(86.370:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.420032][ T27] audit: type=1326 audit(86.370:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.432044][ T27] audit: type=1326 audit(86.370:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=232 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.436284][ T27] audit: type=1326 audit(86.370:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.456301][ T27] audit: type=1326 audit(86.370:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff9ad5b9e8 code=0x7ffc0000 [ 86.487504][ T4780] 9pnet: Could not find request transport: 0xffffffffffffffff [ 86.508689][ T4785] loop2: detected capacity change from 0 to 512 [ 86.511810][ T4785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.519535][ T4785] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.130: Directory hole found for htree leaf block 0 [ 86.524417][ T4785] EXT4-fs (loop2): Remounting filesystem read-only [ 86.525870][ T4785] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.130: Directory hole found for htree leaf block 0 [ 86.528679][ T4785] EXT4-fs (loop2): Remounting filesystem read-only [ 86.538398][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 86.682745][ T4783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.684300][ T4783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.904224][ T4763] device ip6tnl1 entered promiscuous mode [ 86.908125][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 86.909616][ T4778] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 86.916352][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 87.114298][ T4817] loop0: detected capacity change from 0 to 512 [ 87.120136][ T4817] EXT4-fs: Ignoring removed nobh option [ 87.139709][ T4817] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #3: comm syz.0.142: corrupted inode contents [ 87.145059][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.146071][ T4817] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #3: comm syz.0.142: mark_inode_dirty error [ 87.148349][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.149833][ T4817] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #3: comm syz.0.142: corrupted inode contents [ 87.152866][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.153861][ T4817] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.142: mark_inode_dirty error [ 87.158049][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.162032][ T4817] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.142: Failed to acquire dquot type 0 [ 87.167109][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.168537][ T4817] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.142: corrupted inode contents [ 87.170700][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.171640][ T4817] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #16: comm syz.0.142: mark_inode_dirty error [ 87.175409][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.176390][ T4817] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.142: corrupted inode contents [ 87.178605][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.179582][ T4817] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.142: mark_inode_dirty error [ 87.181547][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.182986][ T4817] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.142: corrupted inode contents [ 87.184894][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.185930][ T4817] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 87.187357][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.188394][ T4817] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.142: corrupted inode contents [ 87.190613][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.191835][ T4817] EXT4-fs error (device loop0): ext4_truncate:4318: inode #16: comm syz.0.142: mark_inode_dirty error [ 87.194220][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.195256][ T4817] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 87.200529][ T4817] EXT4-fs (loop0): Remounting filesystem read-only [ 87.204425][ T4817] EXT4-fs (loop0): 1 truncate cleaned up [ 87.205328][ T4817] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 87.219079][ T4824] loop3: detected capacity change from 0 to 512 [ 87.225648][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 87.255978][ T4824] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.257955][ T4824] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.263335][ T4824] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.144: corrupted inode contents [ 87.266485][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 87.267436][ T4824] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm syz.3.144: mark_inode_dirty error [ 87.272847][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 87.274577][ T4824] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.144: corrupted inode contents [ 87.276749][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 87.278451][ T4824] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.144: mark_inode_dirty error [ 87.284214][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 87.285232][ T4824] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.144: corrupted inode contents [ 87.287306][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 87.288519][ T4824] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 87.290433][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 87.291628][ T4824] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.144: corrupted inode contents [ 87.294280][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 87.295408][ T4824] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm syz.3.144: mark_inode_dirty error [ 87.297504][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 87.298869][ T4824] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 87.301636][ T4824] EXT4-fs (loop3): Remounting filesystem read-only [ 87.307021][ T4824] EXT4-fs (loop3): 1 truncate cleaned up [ 87.309204][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:1: Failed to release dquot type 1 [ 87.311415][ T11] EXT4-fs (loop3): Remounting filesystem read-only [ 87.315751][ T4824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.330991][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 98.084403][ T4821] netlink: 'syz.4.143': attribute type 21 has an invalid length. [ 98.085696][ T4821] netlink: 144 bytes leftover after parsing attributes in process `syz.4.143'. [ 98.087072][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 98.088351][ T4832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 98.152082][ T27] kauditd_printk_skb: 697 callbacks suppressed [ 98.152093][ T27] audit: type=1326 audit(98.130:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.156645][ T27] audit: type=1326 audit(98.140:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.159455][ T27] audit: type=1326 audit(98.140:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.171401][ T27] audit: type=1326 audit(98.140:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.178231][ T27] audit: type=1326 audit(98.140:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.181362][ T27] audit: type=1326 audit(98.140:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.188175][ T27] audit: type=1326 audit(98.140:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.191466][ T27] audit: type=1326 audit(98.140:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=44 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.200231][ T4837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 98.215639][ T27] audit: type=1326 audit(98.140:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4848 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.219128][ T27] audit: type=1326 audit(98.160:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 98.505425][ T4891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 98.846696][ T4895] loop1: detected capacity change from 0 to 256 [ 98.881920][ T4895] FAT-fs (loop1): Directory bread(block 64) failed [ 98.887402][ T4895] FAT-fs (loop1): Directory bread(block 65) failed [ 98.888549][ T4895] FAT-fs (loop1): Directory bread(block 66) failed [ 98.889555][ T4895] FAT-fs (loop1): Directory bread(block 67) failed [ 98.901695][ T4895] FAT-fs (loop1): Directory bread(block 68) failed [ 98.903321][ T4895] FAT-fs (loop1): Directory bread(block 69) failed [ 98.904906][ T4895] FAT-fs (loop1): Directory bread(block 70) failed [ 98.906326][ T4895] FAT-fs (loop1): Directory bread(block 71) failed [ 98.907507][ T4895] FAT-fs (loop1): Directory bread(block 72) failed [ 98.908720][ T4895] FAT-fs (loop1): Directory bread(block 73) failed [ 98.929157][ T4895] syz.1.169: attempt to access beyond end of device [ 98.929157][ T4895] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 98.932109][ T4895] syz.1.169: attempt to access beyond end of device [ 98.932109][ T4895] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 99.025182][ T4910] netlink: 'syz.1.174': attribute type 3 has an invalid length. [ 99.026409][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 99.113088][ T4919] loop4: detected capacity change from 0 to 8192 [ 109.826015][ T4920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 109.827420][ T4920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 109.828811][ T4930] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 109.830780][ T4930] device veth1_macvtap left promiscuous mode [ 109.946389][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 109.947842][ T4942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.189'. [ 109.949175][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 109.950900][ T4942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.189'. [ 109.952154][ T4942] netlink: 'syz.3.189': attribute type 6 has an invalid length. [ 109.978002][ T4940] device syzkaller0 entered promiscuous mode [ 110.047292][ T4957] loop3: detected capacity change from 0 to 512 [ 110.049801][ T4957] EXT4-fs: Ignoring removed nobh option [ 110.071357][ T4962] netlink: 72 bytes leftover after parsing attributes in process `syz.4.195'. [ 110.075957][ T4957] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #3: comm syz.3.192: corrupted inode contents [ 110.078000][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.079007][ T4957] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #3: comm syz.3.192: mark_inode_dirty error [ 110.082060][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.083703][ T4957] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #3: comm syz.3.192: corrupted inode contents [ 110.085747][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.086777][ T4957] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.192: mark_inode_dirty error [ 110.088600][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.089758][ T4957] __quota_error: 83 callbacks suppressed [ 110.089765][ T4957] Quota error (device loop3): write_blk: dquota write failed [ 110.091806][ T4957] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 110.096280][ T4957] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.192: Failed to acquire dquot type 0 [ 110.098701][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.101467][ T4957] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.192: corrupted inode contents [ 110.104331][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.105341][ T4957] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm syz.3.192: mark_inode_dirty error [ 110.107376][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.108728][ T4957] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.192: corrupted inode contents [ 110.110795][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.111916][ T4957] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.192: mark_inode_dirty error [ 110.115902][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.117814][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 110.119077][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 110.140285][ T4957] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.192: corrupted inode contents [ 110.151768][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.152927][ T4957] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 110.157134][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.158199][ T4957] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.192: corrupted inode contents [ 110.160209][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.161182][ T4957] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm syz.3.192: mark_inode_dirty error [ 110.172276][ T27] audit: type=1326 audit(110.150:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 110.184925][ T27] audit: type=1326 audit(110.170:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 110.188241][ T27] audit: type=1326 audit(110.170:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 110.191290][ T27] audit: type=1326 audit(110.170:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 110.200495][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.201479][ T4957] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 110.206114][ T4957] EXT4-fs (loop3): Remounting filesystem read-only [ 110.207178][ T27] audit: type=1326 audit(110.180:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 110.207288][ T4957] EXT4-fs (loop3): 1 truncate cleaned up [ 110.211452][ T4957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.223832][ T27] audit: type=1326 audit(110.190:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 110.227247][ T27] audit: type=1326 audit(110.190:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 110.230506][ T27] audit: type=1326 audit(110.190:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.2.198" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb435b9e8 code=0x7ffc0000 [ 110.251726][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 110.383157][ T4991] loop0: detected capacity change from 0 to 512 [ 110.398320][ T4991] [ 110.398706][ T4991] ====================================================== [ 110.399772][ T4991] WARNING: possible circular locking dependency detected [ 110.400811][ T4991] syzkaller #0 Not tainted [ 110.401499][ T4991] ------------------------------------------------------ [ 110.402494][ T4991] syz.0.205/4991 is trying to acquire lock: [ 110.403328][ T4991] ffff0000f8902b98 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x188/0x284c [ 110.404885][ T4991] [ 110.404885][ T4991] but task is already holding lock: [ 110.405962][ T4991] ffff0000f60ee518 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 110.407487][ T4991] [ 110.407487][ T4991] which lock already depends on the new lock. [ 110.407487][ T4991] [ 110.408967][ T4991] [ 110.408967][ T4991] the existing dependency chain (in reverse order) is: [ 110.410244][ T4991] [ 110.410244][ T4991] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 110.411318][ T4991] down_write+0x5c/0x88 [ 110.411982][ T4991] ext4_destroy_inline_data+0x30/0x11c [ 110.412887][ T4991] ext4_writepages+0x3f4/0x284c [ 110.413670][ T4991] do_writepages+0x2c0/0x4fc [ 110.414392][ T4991] __writeback_single_inode+0x164/0x157c [ 110.415445][ T4991] writeback_sb_inodes+0x824/0x1404 [ 110.416397][ T4991] wb_writeback+0x400/0xfb0 [ 110.417223][ T4991] wb_workfn+0x34c/0xd98 [ 110.417929][ T4991] process_one_work+0x7f4/0x13a8 [ 110.418737][ T4991] worker_thread+0x8c8/0xfbc [ 110.419504][ T4991] kthread+0x250/0x2d8 [ 110.420189][ T4991] ret_from_fork+0x10/0x20 [ 110.420910][ T4991] [ 110.420910][ T4991] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 110.422119][ T4991] __lock_acquire+0x293c/0x6544 [ 110.422869][ T4991] lock_acquire+0x20c/0x644 [ 110.423580][ T4991] percpu_down_read+0x70/0x2a8 [ 110.424328][ T4991] ext4_writepages+0x188/0x284c [ 110.425126][ T4991] do_writepages+0x2c0/0x4fc [ 110.425892][ T4991] __writeback_single_inode+0x164/0x157c [ 110.426851][ T4991] writeback_single_inode+0x1c0/0x720 [ 110.427753][ T4991] write_inode_now+0x144/0x1b0 [ 110.428624][ T4991] iput+0x5cc/0x7f4 [ 110.429370][ T4991] ext4_xattr_block_set+0x17a4/0x2810 [ 110.430283][ T4991] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 110.431251][ T4991] __ext4_expand_extra_isize+0x298/0x358 [ 110.432234][ T4991] __ext4_mark_inode_dirty+0x3e4/0x790 [ 110.433091][ T4991] ext4_evict_inode+0xb58/0x1270 [ 110.433885][ T4991] evict+0x3c8/0x810 [ 110.434505][ T4991] iput+0x764/0x7f4 [ 110.435138][ T4991] ext4_process_orphan+0x240/0x2b4 [ 110.435940][ T4991] ext4_orphan_cleanup+0x908/0x104c [ 110.436737][ T4991] ext4_fill_super+0x6440/0x68a8 [ 110.437526][ T4991] get_tree_bdev+0x358/0x544 [ 110.438198][ T4991] ext4_get_tree+0x28/0x38 [ 110.438869][ T4991] vfs_get_tree+0x90/0x274 [ 110.439587][ T4991] do_new_mount+0x228/0x810 [ 110.440308][ T4991] path_mount+0x5b4/0xe78 [ 110.441013][ T4991] __arm64_sys_mount+0x49c/0x584 [ 110.441816][ T4991] invoke_syscall+0x98/0x2bc [ 110.442562][ T4991] el0_svc_common+0x138/0x258 [ 110.443304][ T4991] do_el0_svc+0x58/0x13c [ 110.444011][ T4991] el0_svc+0x58/0x138 [ 110.444667][ T4991] el0t_64_sync_handler+0x84/0xf0 [ 110.445414][ T4991] el0t_64_sync+0x18c/0x190 [ 110.446145][ T4991] [ 110.446145][ T4991] other info that might help us debug this: [ 110.446145][ T4991] [ 110.447584][ T4991] Possible unsafe locking scenario: [ 110.447584][ T4991] [ 110.448669][ T4991] CPU0 CPU1 [ 110.449532][ T4991] ---- ---- [ 110.450277][ T4991] lock(&ei->xattr_sem); [ 110.450881][ T4991] lock(&sbi->s_writepages_rwsem); [ 110.452014][ T4991] lock(&ei->xattr_sem); [ 110.453003][ T4991] lock(&sbi->s_writepages_rwsem); [ 110.453736][ T4991] [ 110.453736][ T4991] *** DEADLOCK *** [ 110.453736][ T4991] [ 110.454843][ T4991] 3 locks held by syz.0.205/4991: [ 110.455536][ T4991] #0: ffff0000f89040e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 110.457066][ T4991] #1: ffff0000f8904650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 110.458533][ T4991] #2: ffff0000f60ee518 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 110.459985][ T4991] [ 110.459985][ T4991] stack backtrace: [ 110.460802][ T4991] CPU: 1 PID: 4991 Comm: syz.0.205 Not tainted syzkaller #0 [ 110.461721][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 110.463115][ T4991] Call trace: [ 110.463593][ T4991] dump_backtrace+0x1c8/0x1f4 [ 110.464312][ T4991] show_stack+0x2c/0x3c [ 110.464912][ T4991] __dump_stack+0x30/0x40 [ 110.465550][ T4991] dump_stack_lvl+0xf8/0x160 [ 110.466200][ T4991] dump_stack+0x1c/0x5c [ 110.466860][ T4991] print_circular_bug+0x148/0x1b0 [ 110.467597][ T4991] check_noncircular+0x240/0x2d4 [ 110.468337][ T4991] __lock_acquire+0x293c/0x6544 [ 110.469014][ T4991] lock_acquire+0x20c/0x644 [ 110.469721][ T4991] percpu_down_read+0x70/0x2a8 [ 110.470453][ T4991] ext4_writepages+0x188/0x284c [ 110.471158][ T4991] do_writepages+0x2c0/0x4fc [ 110.471818][ T4991] __writeback_single_inode+0x164/0x157c [ 110.472561][ T4991] writeback_single_inode+0x1c0/0x720 [ 110.473294][ T4991] write_inode_now+0x144/0x1b0 [ 110.474030][ T4991] iput+0x5cc/0x7f4 [ 110.474587][ T4991] ext4_xattr_block_set+0x17a4/0x2810 [ 110.475421][ T4991] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 110.476295][ T4991] __ext4_expand_extra_isize+0x298/0x358 [ 110.477114][ T4991] __ext4_mark_inode_dirty+0x3e4/0x790 [ 110.477891][ T4991] ext4_evict_inode+0xb58/0x1270 [ 110.478591][ T4991] evict+0x3c8/0x810 [ 110.479126][ T4991] iput+0x764/0x7f4 [ 110.479728][ T4991] ext4_process_orphan+0x240/0x2b4 [ 110.480477][ T4991] ext4_orphan_cleanup+0x908/0x104c [ 110.481172][ T4991] ext4_fill_super+0x6440/0x68a8 [ 110.481857][ T4991] get_tree_bdev+0x358/0x544 [ 110.482523][ T4991] ext4_get_tree+0x28/0x38 [ 110.483155][ T4991] vfs_get_tree+0x90/0x274 [ 110.483798][ T4991] do_new_mount+0x228/0x810 [ 110.484551][ T4991] path_mount+0x5b4/0xe78 [ 110.485268][ T4991] __arm64_sys_mount+0x49c/0x584 [ 110.486067][ T4991] invoke_syscall+0x98/0x2bc [ 110.486764][ T4991] el0_svc_common+0x138/0x258 [ 110.487441][ T4991] do_el0_svc+0x58/0x13c [ 110.488088][ T4991] el0_svc+0x58/0x138 [ 110.488670][ T4991] el0t_64_sync_handler+0x84/0xf0 [ 110.489415][ T4991] el0t_64_sync+0x18c/0x190 [ 110.491636][ T4991] ------------[ cut here ]------------ [ 110.492665][ T4991] EA inode 11 i_nlink=2 [ 110.495241][ T4991] WARNING: CPU: 1 PID: 4991 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 110.497176][ T4991] Modules linked in: [ 110.497762][ T4991] CPU: 1 PID: 4991 Comm: syz.0.205 Not tainted syzkaller #0 [ 110.498841][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 110.500351][ T4991] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 110.501471][ T4991] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 110.502350][ T4991] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 110.503317][ T4991] sp : ffff800021886e00 [ 110.503910][ T4991] x29: ffff800021886ea0 x28: 0000000000000000 x27: dfff800000000000 [ 110.505081][ T4991] x26: 1fffe0001c44f95c x25: ffff700004310dc4 x24: 0000000000000000 [ 110.506249][ T4991] x23: ffff800017a8a000 x22: ffff0000e227c928 x21: 0000000000000002 [ 110.507389][ T4991] x20: 0000000000000001 x19: ffff0000e227c8e8 x18: ffff800011abbcc0 [ 110.508549][ T4991] x17: 1fffe00033edbb7e x16: ffff800008042d90 x15: ffff8000150bd000 [ 110.509692][ T4991] x14: 0000000000000100 x13: 0000000000000120 x12: 0000000000ff0100 [ 110.510907][ T4991] x11: ff0080000804801c x10: 0000000040000002 x9 : 336cefdc2958f500 [ 110.512039][ T4991] x8 : 336cefdc2958f500 x7 : 0000000000000004 x6 : ffff800008251e80 [ 110.513231][ T4991] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 110.514351][ T4991] x2 : ffff8000218869a0 x1 : 0000000000000000 x0 : ffff800008251f14 [ 110.515537][ T4991] Call trace: [ 110.516025][ T4991] ext4_xattr_inode_update_ref+0x42c/0x470 [ 110.516832][ T4991] ext4_xattr_set_entry+0x918/0x15ac [ 110.517695][ T4991] ext4_xattr_ibody_set+0x204/0x600 [ 110.518465][ T4991] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 110.519319][ T4991] __ext4_expand_extra_isize+0x298/0x358 [ 110.520139][ T4991] __ext4_mark_inode_dirty+0x3e4/0x790 [ 110.520925][ T4991] ext4_evict_inode+0xb58/0x1270 [ 110.521638][ T4991] evict+0x3c8/0x810 [ 110.522203][ T4991] iput+0x764/0x7f4 [ 110.522762][ T4991] ext4_process_orphan+0x240/0x2b4 [ 110.523475][ T4991] ext4_orphan_cleanup+0x908/0x104c [ 110.524203][ T4991] ext4_fill_super+0x6440/0x68a8 [ 110.524906][ T4991] get_tree_bdev+0x358/0x544 [ 110.525620][ T4991] ext4_get_tree+0x28/0x38 [ 110.526257][ T4991] vfs_get_tree+0x90/0x274 [ 110.526941][ T4991] do_new_mount+0x228/0x810 [ 110.527624][ T4991] path_mount+0x5b4/0xe78 [ 110.528201][ T4991] __arm64_sys_mount+0x49c/0x584 [ 110.528913][ T4991] invoke_syscall+0x98/0x2bc [ 110.529589][ T4991] el0_svc_common+0x138/0x258 [ 110.530270][ T4991] do_el0_svc+0x58/0x13c [ 110.530868][ T4991] el0_svc+0x58/0x138 [ 110.531419][ T4991] el0t_64_sync_handler+0x84/0xf0 [ 110.532179][ T4991] el0t_64_sync+0x18c/0x190 [ 110.532808][ T4991] irq event stamp: 3225 [ 110.533399][ T4991] hardirqs last enabled at (3225): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 110.534912][ T4991] hardirqs last disabled at (3224): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 110.536317][ T4991] softirqs last enabled at (1896): [] handle_softirqs+0xaf8/0xc6c [ 110.537635][ T4991] softirqs last disabled at (1835): [] __do_softirq+0x14/0x20 [ 110.538896][ T4991] ---[ end trace 0000000000000000 ]--- [ 110.541336][ T4991] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.205: iget: bad extra_isize 90 (inode size 256) [ 110.543689][ T4991] EXT4-fs (loop0): Remounting filesystem read-only [ 110.544677][ T4991] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.205: error while reading EA inode 18 err=-117 [ 110.546550][ T4991] EXT4-fs (loop0): Remounting filesystem read-only [ 110.547511][ T4991] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #18: comm syz.0.205: iget: bad extra_isize 90 (inode size 256) [ 110.549520][ T4991] EXT4-fs (loop0): Remounting filesystem read-only [ 110.550483][ T4991] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.205: error while reading EA inode 18 err=-117 [ 110.553627][ T4991] EXT4-fs (loop0): Remounting filesystem read-only [ 110.554765][ T4991] EXT4-fs (loop0): 1 orphan inode deleted [ 110.555635][ T4991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 110.564339][ T4325] EXT4-fs (loop0): unmounting filesystem.