last executing test programs: 20.2472207s ago: executing program 4 (id=6): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x34}}, 0x24000880) 18.76126088s ago: executing program 4 (id=15): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8480, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x249, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81) 18.464943559s ago: executing program 4 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x2, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x1, 0x2, 0x29, 0x67, 0x0, 0x2, 0x21, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0x9, 0x0, 0x0, 0x3, 0x0, "5a29cb", 0xa, "0eb310"}, "d482762be3"}}}}, 0x37) 10.142203314s ago: executing program 4 (id=91): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000200)=0x400000b, 0x4) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 9.065835523s ago: executing program 4 (id=98): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9.018125595s ago: executing program 4 (id=100): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 4.456034949s ago: executing program 0 (id=140): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x60000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x9a}, 0x1, 0x0, 0x0, 0x240000e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.221332265s ago: executing program 0 (id=142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="050029000000000008002c00040000003c002b80"], 0x154}, 0x1, 0x0, 0x0, 0x404c040}, 0x40) 4.095251519s ago: executing program 0 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a133f969e0594d70a1b98e61bed565e34f3cd997040fe04a3259c409f0f5e0508f45bd23bf63ba65b20df98c34e561b6e820f83ecf47add09fc8bb", 0xa8, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) 3.094168086s ago: executing program 0 (id=146): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}, 0x0) 2.984291769s ago: executing program 0 (id=148): r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r1, &(0x7f0000003e80)={&(0x7f0000002900)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003cc0)=[{&(0x7f0000002940)={0x10, 0x24, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000003e40)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x20008040}, 0x40d0) 2.92418019s ago: executing program 0 (id=149): openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x32, 0x4}, 0x20) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.412225234s ago: executing program 3 (id=156): r0 = io_uring_setup(0x49ea, &(0x7f0000000000)={0x0, 0x5cb0, 0x8, 0x1, 0x15a}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x10000000) 2.264446658s ago: executing program 3 (id=157): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@barrier}, {@nobarrier}, {@grpjquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) 1.737123863s ago: executing program 3 (id=162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30004001}, 0x4008800) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.48490252s ago: executing program 2 (id=166): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0xa}, {0x10000002, 0x2, 0x8000000, 0xc}], 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r3, &(0x7f0000004bc0)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004940)=[{&(0x7f0000000140)="0f68161086", 0x5}], 0x1, &(0x7f0000004ac0)=ANY=[@ANYBLOB="60000000000000000000000007000000890b0c7f000001ac1414aa4424a4c080000005ffffffff000000050000800000009307000000000000080000000004940d0d4c8664e8fc4e14d8607889131bac1414aaac1e000100000000e000000100140000000000000000000000020000007c0000000000000014000000000000000000000002000000000001000000000011000000000000000000000001000000000000000000000014000000000000000000000002000000ef000000000000001c00"], 0xe0}, 0x88c) 1.356462333s ago: executing program 1 (id=167): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") unlink(&(0x7f0000000180)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) 1.348342603s ago: executing program 2 (id=168): set_mempolicy(0x2, &(0x7f0000000280)=0x3067, 0xe1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@data_ordered}, {@stripe}, {@quota}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@nouid32}, {@block_validity}]}, 0x1, 0x606, &(0x7f0000000600)="$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") 1.221278647s ago: executing program 1 (id=169): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f00000002c0)={[{@bsdgroups}, {@noblock_validity}, {@usrjquota}, {@data_err_ignore}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@grpquota}, {@usrquota}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") 1.174604228s ago: executing program 3 (id=170): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x4) 700.54515ms ago: executing program 2 (id=171): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061117c000000000006000007000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 677.795051ms ago: executing program 3 (id=172): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 584.996824ms ago: executing program 1 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x22f0}, @void, @eth={@random="414f670bc70e", @remote, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0xc, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[@dstopts={0x2f}], "b961880b"}}}}}}, 0x46) 504.615056ms ago: executing program 2 (id=174): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb100002f000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 451.931897ms ago: executing program 3 (id=175): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) unshare(0x30000000) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYRES16], 0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 397.998439ms ago: executing program 2 (id=176): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}, {&(0x7f00000005c0)="4da5ee04a0845c797ca49147c481dd49f58b03021fd92fbbc434245d181b19ba248551a46d1b07206c260097136ed3b11a759ea176eb76de4600000800a6da84c3710a742bd13eca788492287c66eeec84e8b375d40394070cb7a4ba362316bdf26694f42742bed76161fdde81fa6fdd2f216f84edc30cc87f2b6e534cc798a4c456338dd66ab460d25ef1156e76f269b5f2015665cee1f29512717c0054414b8c87caa39fa968e858099d2ed8a789d8cff32b421fea1d083218aecffc82704f06fbd20da6a00aa7114f219f7f622180c0aba6e363c74e761537bd1a", 0xdc}, {&(0x7f0000000500)="880bc39b19d0856ac3608318062fa23e0df4d2489275010586d3ba32d4163571ebdacde90f2a84870e304f84bc9272da3d88833edee58a41554e9331d4882e736320bd897883ddccce43c16260f83b", 0x4f}, {&(0x7f0000001b80)="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", 0x454}], 0x4, 0x0, 0x0, 0x900}, 0x0) 248.549443ms ago: executing program 1 (id=177): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="0100a1201000"}) 240.586523ms ago: executing program 2 (id=178): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e18, &(0x7f0000000080)={[{@nobarrier}, {@grpid}]}, 0x22, 0x655, &(0x7f00000012c0)="$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") 141.019996ms ago: executing program 1 (id=179): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0xa}, {0x10000002, 0x2, 0x8000000, 0xc}], 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r3, &(0x7f0000004bc0)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004940)=[{&(0x7f0000000140)="0f68161086", 0x5}], 0x1, &(0x7f0000004ac0)=ANY=[@ANYBLOB="60000000000000000000000007000000890b0c7f000001ac1414aa4424a4c080000005ffffffff000000050000800000009307000000000000080000000004940d0d4c8664e8fc4e14d8607889131bac1414aaac1e000100000000e000000100140000000000000000000000020000007c0000000000000014000000000000000000000002000000000001000000000011000000000000000000000001000000000000000000000014000000000000000000000002000000ef000000000000001c00"], 0xe0}, 0x88c) 0s ago: executing program 1 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x7, 0x2, 0x6, 0x6}, 0x7b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x2) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 47.440549][ T4171] cgroup: Unknown subsys name 'net' [ 47.568153][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.791144][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.052131][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 50.090199][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 50.112618][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 50.143523][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 50.177101][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.268931][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.276574][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.285033][ T4185] device bridge_slave_0 entered promiscuous mode [ 50.298866][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.305964][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.314599][ T4185] device bridge_slave_1 entered promiscuous mode [ 50.331303][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.338620][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.346889][ T4183] device bridge_slave_0 entered promiscuous mode [ 50.359565][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.367033][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.374862][ T4183] device bridge_slave_1 entered promiscuous mode [ 50.399891][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.407105][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.415544][ T4184] device bridge_slave_0 entered promiscuous mode [ 50.428128][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.435320][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.443379][ T4184] device bridge_slave_1 entered promiscuous mode [ 50.471775][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.489095][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.510696][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.517951][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.525798][ T4198] device bridge_slave_0 entered promiscuous mode [ 50.535198][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.545817][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.556413][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.565578][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.572613][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.580420][ T4191] device bridge_slave_0 entered promiscuous mode [ 50.588045][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.595220][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.603126][ T4198] device bridge_slave_1 entered promiscuous mode [ 50.616468][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.636180][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.643664][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.651320][ T4191] device bridge_slave_1 entered promiscuous mode [ 50.681665][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.699752][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.715623][ T4184] team0: Port device team_slave_0 added [ 50.728062][ T4183] team0: Port device team_slave_0 added [ 50.736128][ T4185] team0: Port device team_slave_0 added [ 50.743132][ T4183] team0: Port device team_slave_1 added [ 50.755260][ T4184] team0: Port device team_slave_1 added [ 50.767662][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.777871][ T4185] team0: Port device team_slave_1 added [ 50.795464][ T4198] team0: Port device team_slave_0 added [ 50.809389][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.836750][ T4198] team0: Port device team_slave_1 added [ 50.843561][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.850507][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.876652][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.888593][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.895834][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.921834][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.939675][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.946705][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.973062][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.984616][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.991556][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.017597][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.040317][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.047503][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.074244][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.102097][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.109158][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.135149][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.146566][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.153690][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.179668][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.202894][ T4191] team0: Port device team_slave_0 added [ 51.210772][ T4191] team0: Port device team_slave_1 added [ 51.243639][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.250730][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.276854][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.295299][ T4184] device hsr_slave_0 entered promiscuous mode [ 51.302414][ T4184] device hsr_slave_1 entered promiscuous mode [ 51.311288][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.318374][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.344312][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.369622][ T4185] device hsr_slave_0 entered promiscuous mode [ 51.377058][ T4185] device hsr_slave_1 entered promiscuous mode [ 51.383858][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.391586][ T4185] Cannot create hsr debugfs directory [ 51.409623][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.416867][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.442798][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.477193][ T4183] device hsr_slave_0 entered promiscuous mode [ 51.484315][ T4183] device hsr_slave_1 entered promiscuous mode [ 51.490847][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.498806][ T4183] Cannot create hsr debugfs directory [ 51.533665][ T4191] device hsr_slave_0 entered promiscuous mode [ 51.540402][ T4191] device hsr_slave_1 entered promiscuous mode [ 51.547102][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.554937][ T4191] Cannot create hsr debugfs directory [ 51.599943][ T4198] device hsr_slave_0 entered promiscuous mode [ 51.606710][ T4198] device hsr_slave_1 entered promiscuous mode [ 51.613498][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.621066][ T4198] Cannot create hsr debugfs directory [ 51.788824][ T4190] Bluetooth: hci4: command 0x0409 tx timeout [ 51.795663][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 51.801811][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 51.813277][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 51.819461][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 51.879858][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.891347][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.905906][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.916120][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.958078][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.967574][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.977951][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.989998][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.055867][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.066761][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.090325][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.105491][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.117320][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.151943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.165239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.178779][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.189804][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.201763][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.220439][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.230272][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.253795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.265007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.275679][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.282917][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.292070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.303651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.311961][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.319042][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.326672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.336061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.345134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.354176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.362538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.370835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.382556][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.404258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.414615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.433583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.441261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.457634][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.468113][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.482060][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.499062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.507515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.517632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.526623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.535248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.543821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.552081][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.559160][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.566813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.574604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.604770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.619570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.630682][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.637833][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.652243][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.662220][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.677269][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.698938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.712234][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.727392][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.752910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.763933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.774089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.782902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.799206][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.808716][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.816556][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.825023][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.834698][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.854122][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.862590][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.871243][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.880614][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.915820][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.924727][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.934429][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.941478][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.953835][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.963199][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.971497][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.978566][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.987455][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.996358][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.004901][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.014271][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.022619][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.031204][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.044118][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.058695][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.068612][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.079344][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.089195][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.097006][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.112165][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.122656][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.141265][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.155102][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.169858][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.179377][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.194240][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.202526][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.210790][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.219251][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.237392][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.247534][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.258555][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.265687][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.283199][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.290927][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.341697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.353827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.365068][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.372152][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.384076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.419489][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.442432][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.462031][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.476732][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.486734][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.496328][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.505916][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.513993][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.521448][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.530380][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.539167][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.548859][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.557412][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.566272][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.574613][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.582479][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.595091][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.626161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.656696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.677598][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.695050][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.717466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.727606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.740168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.751357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.775205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.784964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.793587][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.800641][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.833100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.842116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.851236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.859905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.869412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.877768][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 53.884525][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 53.886047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.890593][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 53.902591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.904881][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 53.918855][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 53.919327][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.931913][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.941532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.950547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.960263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.977030][ T4184] device veth0_vlan entered promiscuous mode [ 53.992498][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.008936][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.016641][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.024693][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.034038][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.042598][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.051562][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.059909][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.068166][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.076138][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.084121][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.113017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.121750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.131084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.140350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.151584][ T4184] device veth1_vlan entered promiscuous mode [ 54.162964][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.170937][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.180859][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.190942][ T4191] device veth0_vlan entered promiscuous mode [ 54.211281][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.223421][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.245466][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.253819][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.262029][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.273802][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.282039][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.291894][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.304252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.312465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.337226][ T4184] device veth0_macvtap entered promiscuous mode [ 54.353166][ T4183] device veth0_vlan entered promiscuous mode [ 54.367249][ T4191] device veth1_vlan entered promiscuous mode [ 54.375352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.383992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.391877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.400502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.409787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.418553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.428767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.436920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.444825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.455496][ T4185] device veth0_vlan entered promiscuous mode [ 54.465604][ T4184] device veth1_macvtap entered promiscuous mode [ 54.487466][ T4185] device veth1_vlan entered promiscuous mode [ 54.501702][ T4183] device veth1_vlan entered promiscuous mode [ 54.540368][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.559008][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.568202][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.576593][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.585550][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.595430][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.603589][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.611988][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.626599][ T4191] device veth0_macvtap entered promiscuous mode [ 54.641517][ T4191] device veth1_macvtap entered promiscuous mode [ 54.649157][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.658466][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.668188][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.677545][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.690774][ T4185] device veth0_macvtap entered promiscuous mode [ 54.700961][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.711212][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.720182][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.730833][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.739813][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.755909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.765641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.774633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.783786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.792413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.800018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.808202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.832048][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.845256][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.857642][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.876852][ T4185] device veth1_macvtap entered promiscuous mode [ 54.885486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.894330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.904828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.913993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.922368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.935765][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.955507][ T4183] device veth0_macvtap entered promiscuous mode [ 54.964339][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.977832][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.990133][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.026641][ T4183] device veth1_macvtap entered promiscuous mode [ 55.034764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.043518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.051491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.060401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.069937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.079582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.091546][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.101583][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.110456][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.119387][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.139260][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.150229][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.160608][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.171236][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.182531][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.202104][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.218787][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.231718][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.242259][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.252109][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.262639][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.274005][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.284237][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.294781][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.306372][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.317108][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.328845][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.337391][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.346120][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.355256][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.363967][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.372834][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.381424][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.404609][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.416462][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.426854][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.437754][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.447821][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.458531][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.471097][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.483220][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.491931][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.501070][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.509916][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.541755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.553603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.562211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.571280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.585733][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.594681][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.603671][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.612364][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.639658][ T4198] device veth0_vlan entered promiscuous mode [ 55.646450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.655705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.708414][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.721134][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.745832][ T4198] device veth1_vlan entered promiscuous mode [ 55.759576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.772626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.829943][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.833883][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.842514][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.861598][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.886634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.893533][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.901929][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.904140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.917513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.925537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.943462][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 55.961577][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 55.968708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.976847][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 55.981420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.984138][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 55.997566][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 56.010293][ T4198] device veth0_macvtap entered promiscuous mode [ 56.021571][ T1419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.021951][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.033921][ T4198] device veth1_macvtap entered promiscuous mode [ 56.044377][ T1419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.062100][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.069897][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.078596][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.087174][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.096486][ T747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.140731][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.164635][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.175909][ T4266] loop2: detected capacity change from 0 to 256 [ 56.181158][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.198347][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.209274][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.222206][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.232326][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.243694][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.250697][ T4266] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.253849][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.275816][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.287966][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.313375][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.321280][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.363806][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.394852][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.409235][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.429411][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.441510][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.452860][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.465201][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.478641][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.490118][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.559396][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.618201][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.631273][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.651796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.688718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.700149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.758190][ T4277] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.813287][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.824889][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.836415][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.846843][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.923815][ T4277] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.925670][ T4286] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.269881][ T4277] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.273101][ T4264] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 57.451442][ T4310] loop2: detected capacity change from 0 to 512 [ 57.511323][ T4310] EXT4-fs (loop2): 1 truncate cleaned up [ 57.512518][ T4277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.518984][ T4310] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 57.547786][ T4264] usb 2-1: Using ep0 maxpacket: 8 [ 57.692544][ T4264] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 57.711120][ T4264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.719316][ T4316] loop2: detected capacity change from 0 to 512 [ 57.742257][ T4264] usb 2-1: config 0 has no interface number 0 [ 57.757949][ T4264] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 57.780638][ T4264] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 57.791206][ T4264] usb 2-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 57.809765][ T4316] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 57.830370][ T4316] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.882150][ T4277] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.896266][ T4316] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,dioread_nolock,abort,grpjquota=,lazytime,auto_da_alloc,mblk_io_submit,max_dir_size_kb=0x0000000000000100,min_batch_time=0x000000000000007a,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 57.915402][ T4277] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.925424][ T4316] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.946641][ T4277] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.968658][ T4277] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.983453][ T4264] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 57.996780][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.023491][ T4264] usb 2-1: Product: syz [ 58.024819][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.027681][ T4264] usb 2-1: Manufacturer: syz [ 58.042331][ T4264] usb 2-1: SerialNumber: syz [ 58.079190][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 58.081812][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.087876][ T4264] usb 2-1: config 0 descriptor?? [ 58.105277][ T4328] loop4: detected capacity change from 0 to 128 [ 58.113449][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 58.120044][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 58.127269][ T4286] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 58.148312][ T26] audit: type=1800 audit(1777473382.503:2): pid=4316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 58.170562][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.178162][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 58.186013][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 58.208250][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.235627][ T4316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 58.279319][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.299745][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.325593][ T4316] netlink: 'syz.2.12': attribute type 4 has an invalid length. [ 58.345186][ T4316] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12'. [ 58.402541][ T4316] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 58.474342][ T4264] usb 2-1: NFC: intf ffff88807b459000 id ffffffff8cb52720 [ 58.505258][ T4264] usb 2-1: USB disconnect, device number 2 [ 58.519475][ T4333] device syzkaller1 entered promiscuous mode [ 58.689658][ T4340] loop2: detected capacity change from 0 to 512 [ 58.795895][ T4340] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 58.833285][ T4340] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.673454][ T4354] loop2: detected capacity change from 0 to 512 [ 59.680684][ T4354] ======================================================= [ 59.680684][ T4354] WARNING: The mand mount option has been deprecated and [ 59.680684][ T4354] and is ignored by this kernel. Remove the mand [ 59.680684][ T4354] option from the mount to silence this warning. [ 59.680684][ T4354] ======================================================= [ 59.858178][ T4354] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.874912][ T4354] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.938856][ T4354] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.22: corrupted inode contents [ 59.957878][ T4354] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.22: mark_inode_dirty error [ 59.999265][ T4354] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.22: corrupted inode contents [ 60.043868][ T4372] capability: warning: `syz.0.28' uses 32-bit capabilities (legacy support in use) [ 60.194630][ T4354] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.22: mark_inode_dirty error [ 61.071588][ T4389] loop3: detected capacity change from 0 to 2048 [ 61.105788][ T4382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 61.146654][ T4389] loop3: p2 p3 p7 [ 61.279915][ T4389] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 61.352570][ T4389] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 61.419460][ T4394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.430356][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 61.475954][ T4389] device bond_slave_0 entered promiscuous mode [ 61.482367][ T4389] device bond_slave_1 entered promiscuous mode [ 61.488648][ T4389] device syz_tun entered promiscuous mode [ 61.497681][ T4389] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 61.554021][ T4389] bond1: (slave macvlan2): unknown ethtool speed (20010) for port 1 (set it to 0) [ 61.587937][ T4389] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 61.598527][ T4389] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 61.635321][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 63.320010][ T4443] loop2: detected capacity change from 0 to 512 [ 63.581592][ T4443] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 63.598256][ T4443] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a803c018, mo2=0100] [ 63.610363][ T4443] System zones: 2-12, 7-7 [ 63.621121][ T4443] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.684994][ T4443] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.50: Block bitmap for bg 0 marked uninitialized [ 63.769941][ T4443] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 63.780752][ T4443] EXT4-fs (loop2): 1 orphan inode deleted [ 63.786645][ T4443] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,abort,noauto_da_alloc,,errors=continue. Quota mode: none. [ 63.806093][ T4443] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 63.822941][ T4443] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a803c018, mo2=0100] [ 63.843672][ T4443] EXT4-fs error (device loop2): ext4_remount:6062: comm syz.2.50: Abort forced by user [ 63.886612][ T4443] EXT4-fs (loop2): Remounting filesystem read-only [ 63.895577][ T4443] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none. [ 64.080079][ T4438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.48'. [ 65.050565][ T4493] xt_TPROXY: Can be used only with -p tcp or -p udp [ 65.284548][ T4498] tipc: Started in network mode [ 65.303629][ T4498] tipc: Node identity e69713c0876b, cluster identity 4711 [ 65.311454][ T4498] tipc: Enabled bearer , priority 0 [ 65.398671][ T4505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'. [ 65.437907][ T4498] tipc: Resetting bearer [ 65.452074][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.478295][ T4496] tipc: Disabling bearer [ 65.694972][ T21] usb 3-1: device descriptor read/64, error -71 [ 66.004638][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 66.186825][ T4515] loop3: detected capacity change from 0 to 128 [ 66.265195][ T21] usb 3-1: device descriptor read/64, error -71 [ 66.301312][ T4517] netlink: 92 bytes leftover after parsing attributes in process `syz.0.80'. [ 66.389526][ T21] usb usb3-port1: attempt power cycle [ 66.703523][ T4540] tipc: Enabling of bearer rejected, failed to enable media [ 66.967431][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 66.994403][ T4547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 67.062714][ T21] usb 3-1: device descriptor read/8, error -71 [ 67.351135][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 67.458274][ T21] usb 3-1: device descriptor read/8, error -71 [ 67.587759][ T21] usb usb3-port1: unable to enumerate USB device [ 67.860025][ T4375] Bluetooth: hci5: Frame reassembly failed (-84) [ 69.083863][ T4592] loop3: detected capacity change from 0 to 512 [ 69.109981][ T4593] loop0: detected capacity change from 0 to 2048 [ 69.174278][ T4592] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.231679][ T4592] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.434361][ T4592] EXT4-fs (loop3): 1 truncate cleaned up [ 69.445363][ T4593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.467830][ T4592] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,grpjquota=,mb_optimize_scan=0x0000000000000001,minixdf,dioread_lock,. Quota mode: none. [ 69.648284][ T4597] loop2: detected capacity change from 0 to 2048 [ 69.802226][ T4597] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.081529][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 70.087757][ T4186] Bluetooth: hci5: sending frame failed (-49) [ 70.149278][ T4594] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 70.268766][ T4594] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 70.343233][ T4594] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.343233][ T4594] [ 70.388506][ T4613] loop0: detected capacity change from 0 to 512 [ 70.394946][ T4594] EXT4-fs (loop2): Total free blocks count 0 [ 70.443762][ T4594] EXT4-fs (loop2): Free/Dirty block details [ 70.477432][ T4594] EXT4-fs (loop2): free_blocks=4096 [ 70.492312][ T4594] EXT4-fs (loop2): dirty_blocks=512 [ 70.513721][ T4613] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.639032][ T4594] EXT4-fs (loop2): Block reservation details [ 70.747371][ T4594] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 71.183131][ T4613] EXT4-fs (loop0): 1 orphan inode deleted [ 71.194259][ T4613] EXT4-fs (loop0): 1 truncate cleaned up [ 71.202364][ T4613] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodelalloc,nombcache,stripe=0x0000000000000005,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 71.364298][ T4619] syz.3.118 uses obsolete (PF_INET,SOCK_PACKET) [ 71.507719][ T4374] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 71.539273][ T4374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.539273][ T4374] [ 71.554296][ T4629] loop0: detected capacity change from 0 to 1024 [ 71.651838][ T4629] EXT4-fs (loop0): Ignoring removed bh option [ 71.670159][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.676763][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.702140][ T4629] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 72.098139][ T4657] loop3: detected capacity change from 0 to 512 [ 72.163980][ T4657] EXT4-fs (loop3): Ignoring removed nobh option [ 72.218842][ T4657] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.232337][ T4657] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 72.257227][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 72.263373][ T4186] Bluetooth: hci5: sending frame failed (-49) [ 72.310310][ T4657] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.133: attempt to clear invalid blocks 2 len 1 [ 72.359371][ T4669] loop2: detected capacity change from 0 to 512 [ 72.412840][ T4671] device syzkaller0 entered promiscuous mode [ 72.424815][ T4657] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 72.476937][ T4657] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.133: invalid indirect mapped block 1819239214 (level 0) [ 72.524932][ T4669] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.139: ea_inode file size=16777216 entry size=6 [ 72.544632][ T4669] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.555534][ T4657] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.133: invalid indirect mapped block 1819239214 (level 1) [ 72.559329][ T4669] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.139: iget: bad extra_isize 90 (inode size 256) [ 72.633451][ T4657] EXT4-fs (loop3): 1 truncate cleaned up [ 72.639154][ T4657] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,nobh,nombcache,nogrpid,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 72.668098][ T4669] EXT4-fs (loop2): Remounting filesystem read-only [ 72.677855][ T4678] netlink: 236 bytes leftover after parsing attributes in process `syz.0.142'. [ 72.686860][ T4669] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.139: error while reading EA inode 11 err=-117 [ 72.706426][ T4669] EXT4-fs (loop2): Remounting filesystem read-only [ 72.768525][ T4669] EXT4-fs (loop2): 1 orphan inode deleted [ 72.877412][ T4683] loop1: detected capacity change from 0 to 512 [ 72.883811][ T4669] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,prjquota,init_itable=0x0000000000000003,auto_da_alloc,. Quota mode: writeback. [ 72.958765][ T4683] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 73.389869][ T4683] EXT4-fs (loop1): 1 truncate cleaned up [ 73.556765][ T4683] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x0000000000001000,norecovery,noload,abort,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 73.588423][ T4692] loop3: detected capacity change from 0 to 512 [ 73.604582][ T4669] EXT4-fs error (device loop2): ext4_nfs_get_inode:1433: inode #11: comm syz.2.139: iget: bad extra_isize 90 (inode size 256) [ 73.621045][ T26] audit: type=1800 audit(1777473397.423:3): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.144" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 73.661833][ T4669] EXT4-fs (loop2): Remounting filesystem read-only [ 73.770331][ T4692] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mb_optimize_scan=0x0000000000000001,user_xattr,noblock_validity,,errors=continue. Quota mode: writeback. [ 73.795703][ T4692] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.269118][ T4711] loop2: detected capacity change from 0 to 512 [ 74.389961][ T4711] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.445350][ T4715] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.465112][ T4711] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.153: bg 0: block 142: padding at end of block bitmap is not set [ 74.470076][ T4715] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.490492][ T4232] Bluetooth: hci5: command 0x1009 tx timeout [ 74.584694][ T4723] set_capacity_and_notify: 1 callbacks suppressed [ 74.584709][ T4723] loop3: detected capacity change from 0 to 512 [ 74.604204][ T4711] EXT4-fs (loop2): Remounting filesystem read-only [ 74.611644][ T4715] EXT4-fs (loop1): shut down requested (1) [ 74.626865][ T4711] EXT4-fs (loop2): 1 truncate cleaned up [ 74.639864][ T4711] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 74.700862][ T4723] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nobarrier,grpjquota=,,errors=continue. Quota mode: writeback. [ 74.803638][ T4723] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.393142][ T4701] ODEBUG: Out of memory. ODEBUG disabled [ 75.466753][ T4744] tipc: Enabled bearer , priority 0 [ 75.493443][ T4748] loop1: detected capacity change from 0 to 128 [ 75.498324][ T4744] tipc: Resetting bearer [ 75.528954][ T4743] tipc: Disabling bearer [ 75.552075][ T4747] loop2: detected capacity change from 0 to 1024 [ 75.589320][ T26] audit: type=1800 audit(1777473399.258:4): pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.167" name="file1" dev="loop1" ino=1048593 res=0 errno=0 [ 75.615666][ T4747] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 75.674040][ T4751] loop3: detected capacity change from 0 to 512 [ 75.691257][ T4747] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 75.789087][ T4747] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,data=ordered,stripe=0x0000000000000000,quota,data=ordered,mblk_io_submit,usrquota,nodioread_nolock,inode_readahead_blks=0x0000000000020000,nouid32,block_validity,,errors=continue. Quota mode: writeback. [ 75.844414][ T4751] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.878630][ T4751] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.879022][ T4755] loop1: detected capacity change from 0 to 512 [ 76.036235][ T4751] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 76.059371][ T4751] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 76.073245][ T4755] EXT4-fs (loop1): old and new quota format mixing [ 76.081052][ T4751] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.170: Failed to acquire dquot type 0 [ 76.550506][ T4771] loop3: detected capacity change from 0 to 512 [ 76.629984][ T4773] loop2: detected capacity change from 0 to 1024 [ 76.701130][ T4773] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 76.746060][ T4773] EXT4-fs (loop2): group descriptors corrupted! [ 76.779034][ T4771] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.917495][ T4780] device syzkaller0 entered promiscuous mode [ 76.933475][ T4771] [ 76.933483][ T4771] ====================================================== [ 76.933489][ T4771] WARNING: possible circular locking dependency detected [ 76.933506][ T4771] syzkaller #0 Not tainted [ 76.933516][ T4771] ------------------------------------------------------ [ 76.933522][ T4771] syz.3.175/4771 is trying to acquire lock: [ 76.933533][ T4771] ffff88802138ec58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 76.933585][ T4771] [ 76.933585][ T4771] but task is already holding lock: [ 76.933590][ T4771] ffff88805f8014b8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 76.933640][ T4771] [ 76.933640][ T4771] which lock already depends on the new lock. [ 76.933640][ T4771] [ 76.933646][ T4771] [ 76.933646][ T4771] the existing dependency chain (in reverse order) is: [ 76.933651][ T4771] [ 76.933651][ T4771] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 76.933677][ T4771] down_write+0x38/0x60 [ 76.933698][ T4771] ext4_destroy_inline_data+0x24/0xe0 [ 76.933715][ T4771] ext4_writepages+0x670/0x2df0 [ 76.933733][ T4771] do_writepages+0x476/0x6e0 [ 76.933752][ T4771] filemap_fdatawrite_wbc+0x1eb/0x240 [ 76.933772][ T4771] filemap_flush+0xd4/0x130 [ 76.933789][ T4771] ext4_convert_inline_data+0x18b/0x5f0 [ 76.933806][ T4771] ext4_page_mkwrite+0x1df/0x1250 [ 76.933824][ T4771] do_page_mkwrite+0x168/0x3c0 [ 76.933841][ T4771] wp_page_shared+0x16b/0x6d0 [ 76.933857][ T4771] handle_mm_fault+0x1f06/0x4410 [ 76.933873][ T4771] do_user_addr_fault+0x489/0xc80 [ 76.933892][ T4771] exc_page_fault+0x60/0x100 [ 76.933911][ T4771] asm_exc_page_fault+0x22/0x30 [ 76.933927][ T4771] [ 76.933927][ T4771] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 76.933952][ T4771] __lock_acquire+0x2c42/0x7d10 [ 76.933973][ T4771] lock_acquire+0x19e/0x400 [ 76.933991][ T4771] percpu_down_read+0x46/0x1b0 [ 76.934009][ T4771] ext4_writepages+0x20f/0x2df0 [ 76.934026][ T4771] do_writepages+0x476/0x6e0 [ 76.934044][ T4771] __writeback_single_inode+0x153/0xda0 [ 76.934061][ T4771] writeback_single_inode+0x3cb/0x8e0 [ 76.934076][ T4771] write_inode_now+0x23b/0x2c0 [ 76.934091][ T4771] iput+0x5ab/0x8a0 [ 76.934108][ T4771] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 76.934129][ T4771] ext4_xattr_block_set+0x979/0x2d20 [ 76.934149][ T4771] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 76.934169][ T4771] __ext4_expand_extra_isize+0x301/0x3e0 [ 76.934188][ T4771] __ext4_mark_inode_dirty+0x469/0x700 [ 76.934205][ T4771] ext4_evict_inode+0xa8d/0x1090 [ 76.934221][ T4771] evict+0x4c9/0x8d0 [ 76.934239][ T4771] ext4_orphan_cleanup+0xad2/0x1320 [ 76.934255][ T4771] ext4_fill_super+0x8d6e/0x94f0 [ 76.934273][ T4771] mount_bdev+0x287/0x3c0 [ 76.934290][ T4771] legacy_get_tree+0xe6/0x180 [ 76.934306][ T4771] vfs_get_tree+0x88/0x270 [ 76.934322][ T4771] do_new_mount+0x24a/0xa40 [ 76.934339][ T4771] __se_sys_mount+0x2e3/0x3d0 [ 76.934356][ T4771] do_syscall_64+0x4c/0xa0 [ 76.934371][ T4771] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.934389][ T4771] [ 76.934389][ T4771] other info that might help us debug this: [ 76.934389][ T4771] [ 76.934394][ T4771] Possible unsafe locking scenario: [ 76.934394][ T4771] [ 76.934399][ T4771] CPU0 CPU1 [ 76.934403][ T4771] ---- ---- [ 76.934408][ T4771] lock(&ei->xattr_sem); [ 76.934420][ T4771] lock(&sbi->s_writepages_rwsem); [ 76.934434][ T4771] lock(&ei->xattr_sem); [ 76.934446][ T4771] lock(&sbi->s_writepages_rwsem); [ 76.934458][ T4771] [ 76.934458][ T4771] *** DEADLOCK *** [ 76.934458][ T4771] [ 76.934462][ T4771] 3 locks held by syz.3.175/4771: [ 76.934473][ T4771] #0: ffff88802138c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 76.934528][ T4771] #1: ffff88802138c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 76.934571][ T4771] #2: ffff88805f8014b8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 76.934622][ T4771] [ 76.934622][ T4771] stack backtrace: [ 76.934636][ T4771] CPU: 1 PID: 4771 Comm: syz.3.175 Not tainted syzkaller #0 [ 76.934654][ T4771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.934668][ T4771] Call Trace: [ 76.934674][ T4771] [ 76.934681][ T4771] dump_stack_lvl+0x188/0x250 [ 76.934699][ T4771] ? load_image+0x400/0x400 [ 76.934717][ T4771] ? show_regs_print_info+0x20/0x20 [ 76.934737][ T4771] ? print_circular_bug+0x12b/0x1a0 [ 76.934757][ T4771] check_noncircular+0x296/0x330 [ 76.934774][ T4771] ? look_up_lock_class+0x71/0x110 [ 76.934796][ T4771] ? add_chain_block+0x940/0x940 [ 76.934811][ T4771] ? lockdep_lock+0xf1/0x1f0 [ 76.934834][ T4771] ? mark_lock+0x94/0x320 [ 76.934851][ T4771] __lock_acquire+0x2c42/0x7d10 [ 76.934878][ T4771] ? __lock_acquire+0x12e8/0x7d10 [ 76.934901][ T4771] ? verify_lock_unused+0x140/0x140 [ 76.934925][ T4771] ? mark_lock+0x94/0x320 [ 76.934941][ T4771] ? __lock_acquire+0x13bc/0x7d10 [ 76.934966][ T4771] lock_acquire+0x19e/0x400 [ 76.934986][ T4771] ? ext4_writepages+0x20f/0x2df0 [ 76.935007][ T4771] ? mark_lock+0x94/0x320 [ 76.935022][ T4771] ? __might_sleep+0xf0/0xf0 [ 76.935039][ T4771] ? read_lock_is_recursive+0x10/0x10 [ 76.935061][ T4771] ? mark_lock+0x94/0x320 [ 76.935078][ T4771] ? __lock_acquire+0x13bc/0x7d10 [ 76.935099][ T4771] percpu_down_read+0x46/0x1b0 [ 76.935118][ T4771] ? ext4_writepages+0x20f/0x2df0 [ 76.935137][ T4771] ext4_writepages+0x20f/0x2df0 [ 76.935162][ T4771] ? mark_lock+0x94/0x320 [ 76.935178][ T4771] ? verify_lock_unused+0x140/0x140 [ 76.935202][ T4771] ? mark_lock+0x94/0x320 [ 76.935217][ T4771] ? ext4_readpage+0x2e0/0x2e0 [ 76.935236][ T4771] ? __lock_acquire+0x13bc/0x7d10 [ 76.935257][ T4771] ? rcu_lock_release+0x5/0x20 [ 76.935283][ T4771] ? lock_chain_count+0x20/0x20 [ 76.935307][ T4771] ? ext4_readpage+0x2e0/0x2e0 [ 76.935327][ T4771] do_writepages+0x476/0x6e0 [ 76.935353][ T4771] ? __writepage+0x130/0x130 [ 76.935372][ T4771] ? writeback_single_inode+0x3c0/0x8e0 [ 76.935391][ T4771] ? __lock_acquire+0x7d10/0x7d10 [ 76.935411][ T4771] ? do_raw_spin_lock+0x128/0x2f0 [ 76.935431][ T4771] __writeback_single_inode+0x153/0xda0 [ 76.935452][ T4771] writeback_single_inode+0x3cb/0x8e0 [ 76.935471][ T4771] ? write_inode_now+0x2c0/0x2c0 [ 76.935510][ T4771] write_inode_now+0x23b/0x2c0 [ 76.935527][ T4771] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 76.935548][ T4771] ? do_raw_spin_unlock+0x11d/0x230 [ 76.935568][ T4771] iput+0x5ab/0x8a0 [ 76.935591][ T4771] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 76.935630][ T4771] ? ext4_xattr_ibody_set+0x330/0x330 [ 76.935661][ T4771] ext4_xattr_block_set+0x979/0x2d20 [ 76.935691][ T4771] ? ext4_get_inode_loc+0x120/0x120 [ 76.935714][ T4771] ? ext4_xattr_block_find+0x500/0x500 [ 76.935735][ T4771] ? ext4_xattr_block_find+0xe6/0x500 [ 76.935759][ T4771] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 76.935792][ T4771] __ext4_expand_extra_isize+0x301/0x3e0 [ 76.935815][ T4771] __ext4_mark_inode_dirty+0x469/0x700 [ 76.935839][ T4771] ext4_evict_inode+0xa8d/0x1090 [ 76.935856][ T4771] ? _raw_spin_unlock+0x24/0x40 [ 76.935877][ T4771] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.935898][ T4771] ? do_raw_spin_unlock+0x11d/0x230 [ 76.935916][ T4771] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.935935][ T4771] evict+0x4c9/0x8d0 [ 76.935957][ T4771] ? proc_nr_inodes+0x320/0x320 [ 76.935982][ T4771] ? do_raw_spin_unlock+0x11d/0x230 [ 76.936001][ T4771] ? _raw_spin_unlock+0x24/0x40 [ 76.936018][ T4771] ? iput+0x706/0x8a0 [ 76.936039][ T4771] ext4_orphan_cleanup+0xad2/0x1320 [ 76.936062][ T4771] ? ext4_orphan_del+0xbf0/0xbf0 [ 76.936081][ T4771] ? errseq_check_and_advance+0x62/0x120 [ 76.936101][ T4771] ext4_fill_super+0x8d6e/0x94f0 [ 76.936121][ T4771] ? format_decode+0x898/0x1300 [ 76.936150][ T4771] ? ext4_mount+0x40/0x40 [ 76.936168][ T4771] ? set_blocksize+0x1f3/0x370 [ 76.936187][ T4771] ? sb_set_blocksize+0xa5/0xe0 [ 76.936204][ T4771] mount_bdev+0x287/0x3c0 [ 76.936223][ T4771] ? ext4_mount+0x40/0x40 [ 76.936242][ T4771] legacy_get_tree+0xe6/0x180 [ 76.936263][ T4771] ? ext4_errno_to_code+0x160/0x160 [ 76.936284][ T4771] vfs_get_tree+0x88/0x270 [ 76.936305][ T4771] do_new_mount+0x24a/0xa40 [ 76.936328][ T4771] __se_sys_mount+0x2e3/0x3d0 [ 76.936348][ T4771] ? __x64_sys_mount+0xc0/0xc0 [ 76.936366][ T4771] ? lockdep_hardirqs_on+0x94/0x140 [ 76.936385][ T4771] ? __x64_sys_mount+0x1c/0xc0 [ 76.936405][ T4771] do_syscall_64+0x4c/0xa0 [ 76.936423][ T4771] ? clear_bhb_loop+0x30/0x80 [ 76.936441][ T4771] ? clear_bhb_loop+0x30/0x80 [ 76.936460][ T4771] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.936486][ T4771] RIP: 0033:0x7effdccd604a [ 76.936503][ T4771] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.936518][ T4771] RSP: 002b:00007effdaf0ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.936538][ T4771] RAX: ffffffffffffffda RBX: 00007effdaf0cee0 RCX: 00007effdccd604a [ 76.936552][ T4771] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007effdaf0cea0 [ 76.936566][ T4771] RBP: 0000200000000180 R08: 00007effdaf0cee0 R09: 0000000000000000 [ 76.936578][ T4771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 76.936591][ T4771] R13: 00007effdaf0cea0 R14: 000000000000047a R15: 00002000000001c0 [ 76.936615][ T4771] [ 76.972250][ T4771] ------------[ cut here ]------------ [ 76.972261][ T4771] EA inode 11 i_nlink=0 [ 76.972461][ T4771] WARNING: CPU: 1 PID: 4771 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 76.972495][ T4771] Modules linked in: [ 76.972507][ T4771] CPU: 1 PID: 4771 Comm: syz.3.175 Not tainted syzkaller #0 [ 76.972526][ T4771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.972538][ T4771] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 76.972558][ T4771] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 7a e7 a1 ff 49 8b 37 48 c7 c7 80 9d 3d 8a 89 da e8 69 7d 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 93 6d a0 07 [ 76.972574][ T4771] RSP: 0018:ffffc9000390f140 EFLAGS: 00010246 [ 76.972591][ T4771] RAX: d5d302630b85b600 RBX: 0000000000000000 RCX: 0000000000080000 [ 76.972604][ T4771] RDX: ffffc9000e712000 RSI: 0000000000034992 RDI: 0000000000034993 [ 76.972628][ T4771] RBP: ffffc9000390f230 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 76.972643][ T4771] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88805f803e70 [ 76.972657][ T4771] R13: 1ffff1100bf0080d R14: dffffc0000000000 R15: ffff88805f803eb0 [ 76.972672][ T4771] FS: 00007effdaf0d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 76.972690][ T4771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.972703][ T4771] CR2: 00007f03c1d4b000 CR3: 000000005af15000 CR4: 00000000003506e0 [ 76.972720][ T4771] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.972731][ T4771] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.972743][ T4771] Call Trace: [ 76.972749][ T4771] [ 76.972759][ T4771] ? ext4_xattr_block_csum+0x560/0x560 [ 76.972783][ T4771] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 76.972805][ T4771] ? lock_chain_count+0x20/0x20 [ 76.972829][ T4771] ext4_xattr_set_entry+0xed9/0x3ea0 [ 76.972858][ T4771] ? kfree+0xef/0x2a0 [ 76.972924][ T4771] ? ext4_xattr_block_set+0xd99/0x2d20 [ 76.972956][ T4771] ? ext4_xattr_ibody_set+0x330/0x330 [ 76.972981][ T4771] ? ext4_get_inode_loc+0x120/0x120 [ 76.973006][ T4771] ext4_xattr_ibody_set+0x112/0x330 [ 76.973029][ T4771] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 76.973064][ T4771] __ext4_expand_extra_isize+0x301/0x3e0 [ 76.973088][ T4771] __ext4_mark_inode_dirty+0x469/0x700 [ 76.973111][ T4771] ext4_evict_inode+0xa8d/0x1090 [ 76.973130][ T4771] ? _raw_spin_unlock+0x24/0x40 [ 76.973152][ T4771] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.973180][ T4771] ? do_raw_spin_unlock+0x11d/0x230 [ 76.973198][ T4771] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.973217][ T4771] evict+0x4c9/0x8d0 [ 76.973241][ T4771] ? proc_nr_inodes+0x320/0x320 [ 76.973262][ T4771] ? do_raw_spin_unlock+0x11d/0x230 [ 76.973289][ T4771] ? _raw_spin_unlock+0x24/0x40 [ 76.973312][ T4771] ? iput+0x706/0x8a0 [ 76.973335][ T4771] ext4_orphan_cleanup+0xad2/0x1320 [ 76.973359][ T4771] ? ext4_orphan_del+0xbf0/0xbf0 [ 76.973380][ T4771] ? errseq_check_and_advance+0x62/0x120 [ 76.973401][ T4771] ext4_fill_super+0x8d6e/0x94f0 [ 76.973420][ T4771] ? format_decode+0x898/0x1300 [ 76.973451][ T4771] ? ext4_mount+0x40/0x40 [ 76.973468][ T4771] ? set_blocksize+0x1f3/0x370 [ 76.973487][ T4771] ? sb_set_blocksize+0xa5/0xe0 [ 76.973505][ T4771] mount_bdev+0x287/0x3c0 [ 76.973525][ T4771] ? ext4_mount+0x40/0x40 [ 76.973544][ T4771] legacy_get_tree+0xe6/0x180 [ 76.973564][ T4771] ? ext4_errno_to_code+0x160/0x160 [ 76.973585][ T4771] vfs_get_tree+0x88/0x270 [ 76.973606][ T4771] do_new_mount+0x24a/0xa40 [ 76.973628][ T4771] __se_sys_mount+0x2e3/0x3d0 [ 76.973679][ T4771] ? __x64_sys_mount+0xc0/0xc0 [ 76.973706][ T4771] ? lockdep_hardirqs_on+0x94/0x140 [ 76.973728][ T4771] ? __x64_sys_mount+0x1c/0xc0 [ 76.973749][ T4771] do_syscall_64+0x4c/0xa0 [ 76.973767][ T4771] ? clear_bhb_loop+0x30/0x80 [ 76.973785][ T4771] ? clear_bhb_loop+0x30/0x80 [ 76.973805][ T4771] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.973825][ T4771] RIP: 0033:0x7effdccd604a [ 76.973842][ T4771] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.973858][ T4771] RSP: 002b:00007effdaf0ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.973879][ T4771] RAX: ffffffffffffffda RBX: 00007effdaf0cee0 RCX: 00007effdccd604a [ 76.973891][ T4771] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007effdaf0cea0 [ 76.973904][ T4771] RBP: 0000200000000180 R08: 00007effdaf0cee0 R09: 0000000000000000 [ 76.973917][ T4771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 76.973929][ T4771] R13: 00007effdaf0cea0 R14: 000000000000047a R15: 00002000000001c0 [ 76.973948][ T4771] [ 76.973965][ T4771] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.973975][ T4771] CPU: 1 PID: 4771 Comm: syz.3.175 Not tainted syzkaller #0 [ 76.973993][ T4771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.974003][ T4771] Call Trace: [ 76.974009][ T4771] [ 76.974014][ T4771] dump_stack_lvl+0x188/0x250 [ 76.974034][ T4771] ? show_regs_print_info+0x20/0x20 [ 76.974051][ T4771] ? load_image+0x400/0x400 [ 76.974072][ T4771] panic+0x2e5/0x810 [ 76.974094][ T4771] ? bpf_jit_dump+0xd0/0xd0 [ 76.974118][ T4771] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 76.974136][ T4771] __warn+0x248/0x2b0 [ 76.974156][ T4771] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 76.974174][ T4771] report_bug+0x1b7/0x2e0 [ 76.974197][ T4771] handle_bug+0x3a/0x70 [ 76.974215][ T4771] exc_invalid_op+0x16/0x40 [ 76.974233][ T4771] asm_exc_invalid_op+0x16/0x20 [ 76.974250][ T4771] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 76.974270][ T4771] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 7a e7 a1 ff 49 8b 37 48 c7 c7 80 9d 3d 8a 89 da e8 69 7d 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 93 6d a0 07 [ 76.974284][ T4771] RSP: 0018:ffffc9000390f140 EFLAGS: 00010246 [ 76.974300][ T4771] RAX: d5d302630b85b600 RBX: 0000000000000000 RCX: 0000000000080000 [ 76.974319][ T4771] RDX: ffffc9000e712000 RSI: 0000000000034992 RDI: 0000000000034993 [ 76.974332][ T4771] RBP: ffffc9000390f230 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 76.974346][ T4771] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff88805f803e70 [ 76.974360][ T4771] R13: 1ffff1100bf0080d R14: dffffc0000000000 R15: ffff88805f803eb0 [ 76.974384][ T4771] ? ext4_xattr_block_csum+0x560/0x560 [ 76.974408][ T4771] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 76.974429][ T4771] ? lock_chain_count+0x20/0x20 [ 76.974452][ T4771] ext4_xattr_set_entry+0xed9/0x3ea0 [ 76.974480][ T4771] ? kfree+0xef/0x2a0 [ 76.974499][ T4771] ? ext4_xattr_block_set+0xd99/0x2d20 [ 76.974522][ T4771] ? ext4_xattr_ibody_set+0x330/0x330 [ 76.974545][ T4771] ? ext4_get_inode_loc+0x120/0x120 [ 76.974570][ T4771] ext4_xattr_ibody_set+0x112/0x330 [ 76.974593][ T4771] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 76.974626][ T4771] __ext4_expand_extra_isize+0x301/0x3e0 [ 76.974657][ T4771] __ext4_mark_inode_dirty+0x469/0x700 [ 76.974681][ T4771] ext4_evict_inode+0xa8d/0x1090 [ 76.974699][ T4771] ? _raw_spin_unlock+0x24/0x40 [ 76.974724][ T4771] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.974744][ T4771] ? do_raw_spin_unlock+0x11d/0x230 [ 76.974763][ T4771] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 76.974781][ T4771] evict+0x4c9/0x8d0 [ 76.974805][ T4771] ? proc_nr_inodes+0x320/0x320 [ 76.974826][ T4771] ? do_raw_spin_unlock+0x11d/0x230 [ 76.974845][ T4771] ? _raw_spin_unlock+0x24/0x40 [ 76.974862][ T4771] ? iput+0x706/0x8a0 [ 76.974882][ T4771] ext4_orphan_cleanup+0xad2/0x1320 [ 76.974904][ T4771] ? ext4_orphan_del+0xbf0/0xbf0 [ 76.974923][ T4771] ? errseq_check_and_advance+0x62/0x120 [ 76.974944][ T4771] ext4_fill_super+0x8d6e/0x94f0 [ 76.974963][ T4771] ? format_decode+0x898/0x1300 [ 76.974991][ T4771] ? ext4_mount+0x40/0x40 [ 76.975008][ T4771] ? set_blocksize+0x1f3/0x370 [ 76.975026][ T4771] ? sb_set_blocksize+0xa5/0xe0 [ 76.975044][ T4771] mount_bdev+0x287/0x3c0 [ 76.975063][ T4771] ? ext4_mount+0x40/0x40 [ 76.975083][ T4771] legacy_get_tree+0xe6/0x180 [ 76.975102][ T4771] ? ext4_errno_to_code+0x160/0x160 [ 76.975127][ T4771] vfs_get_tree+0x88/0x270 [ 76.975148][ T4771] do_new_mount+0x24a/0xa40 [ 76.975171][ T4771] __se_sys_mount+0x2e3/0x3d0 [ 76.975193][ T4771] ? __x64_sys_mount+0xc0/0xc0 [ 76.975215][ T4771] ? lockdep_hardirqs_on+0x94/0x140 [ 76.975235][ T4771] ? __x64_sys_mount+0x1c/0xc0 [ 76.975254][ T4771] do_syscall_64+0x4c/0xa0 [ 76.975272][ T4771] ? clear_bhb_loop+0x30/0x80 [ 76.975290][ T4771] ? clear_bhb_loop+0x30/0x80 [ 76.975313][ T4771] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.975333][ T4771] RIP: 0033:0x7effdccd604a [ 76.975347][ T4771] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.975362][ T4771] RSP: 002b:00007effdaf0ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.975380][ T4771] RAX: ffffffffffffffda RBX: 00007effdaf0cee0 RCX: 00007effdccd604a [ 76.975394][ T4771] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007effdaf0cea0 [ 76.975408][ T4771] RBP: 0000200000000180 R08: 00007effdaf0cee0 R09: 0000000000000000 [ 76.975421][ T4771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 76.975433][ T4771] R13: 00007effdaf0cea0 R14: 000000000000047a R15: 00002000000001c0 [ 76.975451][ T4771] [ 76.975792][ T4771] Kernel Offset: disabled [ 78.801346][ T4771] Rebooting in 86400 seconds..