last executing test programs: 1.610528301s ago: executing program 2 (id=126): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.354979592s ago: executing program 2 (id=132): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480), 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) 570.000216ms ago: executing program 4 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000200", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980400000000001800128008000100736974000c00028008000300ac1414"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendto$packet(r2, &(0x7f0000000740)="05d936277c6f3922007f8347e261bf0fe7ed7ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c7", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) 510.180409ms ago: executing program 0 (id=144): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0x1eb) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000002b40)=""/4084, 0xff4}], 0x1, 0x1, 0x0, 0xb) 477.00631ms ago: executing program 3 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 468.945781ms ago: executing program 2 (id=147): getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 410.110233ms ago: executing program 1 (id=148): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) unshare(0x8000000) unshare(0x2c040000) 409.482173ms ago: executing program 4 (id=149): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0073d51dbbf996339a", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x10, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0008}]}) nanosleep(&(0x7f0000000280)={0x0, 0x989680}, 0x0) 409.154583ms ago: executing program 3 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 408.995663ms ago: executing program 0 (id=151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="38010000100001000000000800000000ac1e000100000000000000000000000000000000000000000000000000000000000200004e2000500000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000010000000033000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a0001000a0000000000000048000100"], 0x138}}, 0x24000058) 408.595413ms ago: executing program 2 (id=152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 307.372457ms ago: executing program 0 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) umount2(0x0, 0x9) 307.147507ms ago: executing program 4 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r2, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x200) 306.907897ms ago: executing program 1 (id=155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x5c}}, 0x10004080) 306.677807ms ago: executing program 2 (id=156): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r1) 306.375497ms ago: executing program 3 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x20}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 244.84692ms ago: executing program 4 (id=158): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) tkill(0x0, 0x13) tkill(0x0, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 244.3948ms ago: executing program 0 (id=159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0xb8}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x5) r5 = socket(0x28, 0x5, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, 0x0, 0x4000000) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close_range(r1, 0xffffffffffffffff, 0x0) 243.94749ms ago: executing program 1 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) 243.54739ms ago: executing program 2 (id=161): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x6a040000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 243.29269ms ago: executing program 3 (id=162): sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 178.395233ms ago: executing program 1 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getgroups(0x0, 0x0) 178.067403ms ago: executing program 0 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 177.638123ms ago: executing program 1 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) 173.475253ms ago: executing program 4 (id=166): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x9) sendfile(r3, r0, 0x0, 0x7ffff088) 138.853134ms ago: executing program 3 (id=167): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0039936da8abb4625380b974"], 0x1, 0x539, &(0x7f00000005c0)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) close_range(r0, 0xffffffffffffffff, 0xff0f000000000000) 74.321677ms ago: executing program 0 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0xa000200) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 73.888817ms ago: executing program 4 (id=169): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r1, 0x0, 0x2144}, 0x18) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r4], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x69, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000780)=""/192, &(0x7f0000000000)=0xc0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) 73.711818ms ago: executing program 1 (id=170): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xd}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 0s ago: executing program 3 (id=171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 31.300037][ T4308] cgroup: Unknown subsys name 'net' [ 31.551412][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.837807][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.113192][ T4322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.115299][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.117682][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.119082][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.120413][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.122517][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.122626][ T4333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.123856][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.125219][ T4333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.126119][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.127391][ T4333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.128109][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.129374][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 33.131268][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.132228][ T4333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.133155][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.134158][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.134766][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.135968][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.137245][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.138495][ T4333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 33.139135][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 33.140289][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 33.141308][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.142220][ T4333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.144638][ T4333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.146505][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.158712][ T4322] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.162014][ T4322] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 33.163332][ T4322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.284051][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 33.303237][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 33.322051][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 33.335363][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.336718][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.338328][ T4318] device bridge_slave_0 entered promiscuous mode [ 33.350577][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 33.361449][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.362678][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.364096][ T4318] device bridge_slave_1 entered promiscuous mode [ 33.382779][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.388363][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.391489][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.392659][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.394221][ T4321] device bridge_slave_0 entered promiscuous mode [ 33.395886][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.397003][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.398340][ T4328] device bridge_slave_0 entered promiscuous mode [ 33.400524][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.401643][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.403144][ T4328] device bridge_slave_1 entered promiscuous mode [ 33.412698][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.413958][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.415572][ T4321] device bridge_slave_1 entered promiscuous mode [ 33.426101][ T4318] team0: Port device team_slave_0 added [ 33.429233][ T4318] team0: Port device team_slave_1 added [ 33.436781][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 33.438860][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.440020][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.441513][ T4324] device bridge_slave_0 entered promiscuous mode [ 33.446730][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.450960][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.454684][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.455916][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.457402][ T4324] device bridge_slave_1 entered promiscuous mode [ 33.462081][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.468158][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.474930][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.476058][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.480139][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.494112][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.495166][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.498894][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.503236][ T4321] team0: Port device team_slave_0 added [ 33.505431][ T4328] team0: Port device team_slave_0 added [ 33.507764][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.514985][ T4321] team0: Port device team_slave_1 added [ 33.516778][ T4328] team0: Port device team_slave_1 added [ 33.520800][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.534991][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.536059][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.539853][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.579868][ T4318] device hsr_slave_0 entered promiscuous mode [ 33.628909][ T4318] device hsr_slave_1 entered promiscuous mode [ 33.669237][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.670441][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.674372][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.678439][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.679710][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.681171][ T4325] device bridge_slave_0 entered promiscuous mode [ 33.683004][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.684180][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.688393][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.693019][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.694277][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.698036][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.701215][ T4324] team0: Port device team_slave_0 added [ 33.702410][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.703564][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.705032][ T4325] device bridge_slave_1 entered promiscuous mode [ 33.714157][ T4324] team0: Port device team_slave_1 added [ 33.726233][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.779860][ T4321] device hsr_slave_0 entered promiscuous mode [ 33.839023][ T4321] device hsr_slave_1 entered promiscuous mode [ 33.878841][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.880126][ T4321] Cannot create hsr debugfs directory [ 33.885589][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.891942][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.893122][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.897092][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.907237][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.908450][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.912477][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.969715][ T4328] device hsr_slave_0 entered promiscuous mode [ 34.019040][ T4328] device hsr_slave_1 entered promiscuous mode [ 34.068834][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.069965][ T4328] Cannot create hsr debugfs directory [ 34.073201][ T4325] team0: Port device team_slave_0 added [ 34.077914][ T4325] team0: Port device team_slave_1 added [ 34.105625][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.106803][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.110802][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.159834][ T4324] device hsr_slave_0 entered promiscuous mode [ 34.198945][ T4324] device hsr_slave_1 entered promiscuous mode [ 34.258819][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.260091][ T4324] Cannot create hsr debugfs directory [ 34.273195][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.274357][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.278157][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.359993][ T4325] device hsr_slave_0 entered promiscuous mode [ 34.399289][ T4325] device hsr_slave_1 entered promiscuous mode [ 34.438819][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.439902][ T4325] Cannot create hsr debugfs directory [ 34.465568][ T4318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.503449][ T4318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.544776][ T4318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.584749][ T4318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.656947][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.701699][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.740100][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.781900][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.821258][ T4324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.872415][ T4324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.919020][ T4321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.979928][ T4324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.019968][ T4324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.066801][ T4321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.100061][ T4321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.157312][ T4321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.204098][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.209119][ T4322] Bluetooth: hci3: command 0x0409 tx timeout [ 35.209253][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 35.210181][ T4322] Bluetooth: hci4: command 0x0409 tx timeout [ 35.211192][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 35.216778][ T4325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.218933][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 35.243000][ T4325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.294661][ T4325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.332552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.334598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.337776][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.339396][ T4325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.405642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.407396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.409615][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.410814][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.412592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.422556][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.424192][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.425670][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.426720][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.432847][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.447905][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.449805][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.451651][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.460200][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.461853][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.463572][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.465848][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.467536][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.476179][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.480762][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.482339][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.484614][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.499518][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.502234][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.503712][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.513285][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.519767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.521442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.522854][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.524112][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.525857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.527672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.533292][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.534385][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.535936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.540441][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.543766][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.551855][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.553364][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.556520][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.562106][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.571965][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.574059][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.575377][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.576587][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.577908][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.580532][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.582015][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.583813][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.585408][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.586622][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.588132][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.590128][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.591648][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.592705][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.594071][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.595749][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.597397][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.599625][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.601174][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.602862][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.604336][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.605769][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.618399][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.620052][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.622128][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.623649][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.625240][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.626827][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.628425][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.630609][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.632127][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.633939][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.638391][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.642424][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.644199][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.647696][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.649895][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.652932][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.654917][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.656664][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.657803][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.662680][ T4321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.664306][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.673529][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.675281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.677076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.679723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.681462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.682960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.684555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.686692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.692670][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.694249][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.695704][ T255] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.696814][ T255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.698180][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.704101][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.716635][ T4324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.718308][ T4324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.726334][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.728226][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.734131][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.735555][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.736758][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.738172][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.741069][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.742709][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.744566][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.746107][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.747725][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.749783][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.751291][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.752853][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.754300][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.758167][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.761180][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.762581][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.764205][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.766173][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.771684][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.778399][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.786707][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.788021][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.789935][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.791684][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.797364][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.802529][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.804037][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.806219][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.831764][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.833311][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.834756][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.836340][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.840646][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.848503][ T4318] device veth0_vlan entered promiscuous mode [ 35.851386][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.853435][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.855105][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.856891][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.868508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.870583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.871928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.874006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.875595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.877152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.881037][ T4318] device veth1_vlan entered promiscuous mode [ 35.887927][ T4318] device veth0_macvtap entered promiscuous mode [ 35.891637][ T4328] device veth0_vlan entered promiscuous mode [ 35.894469][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.896160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.897717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.900186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.901855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.903489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.914383][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.915755][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.918007][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.922338][ T4318] device veth1_macvtap entered promiscuous mode [ 35.932168][ T4328] device veth1_vlan entered promiscuous mode [ 35.944066][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.945617][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.947238][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.949943][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.951916][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.960160][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.961615][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.963377][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.964880][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.966363][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.975777][ T4328] device veth0_macvtap entered promiscuous mode [ 35.980883][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.982543][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.984011][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.985615][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.988656][ T4321] device veth0_vlan entered promiscuous mode [ 35.991372][ T4328] device veth1_macvtap entered promiscuous mode [ 35.994027][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.995511][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.996916][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.000195][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.001591][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.002882][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.005438][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.007233][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.009171][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.011679][ T4321] device veth1_vlan entered promiscuous mode [ 36.014368][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.021921][ T4318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.023248][ T4318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.024483][ T4318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.025760][ T4318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.030170][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.031695][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.033255][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.034823][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.036129][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.041782][ T4324] device veth0_vlan entered promiscuous mode [ 36.050498][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.052260][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.054451][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.062597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.064206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.065807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.069555][ T4324] device veth1_vlan entered promiscuous mode [ 36.083207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.087346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.092348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.096175][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.097921][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.101198][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.106994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.108593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.110693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.125054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.126704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.131075][ T4321] device veth0_macvtap entered promiscuous mode [ 36.134676][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.136084][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.137396][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.141533][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.146390][ T4324] device veth0_macvtap entered promiscuous mode [ 36.152428][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.153751][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.154844][ T4324] device veth1_macvtap entered promiscuous mode [ 36.156361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.158362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.161868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.163348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.164996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.167063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.171575][ T4321] device veth1_macvtap entered promiscuous mode [ 36.192024][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.193654][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.195289][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.202888][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.204558][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.206142][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.207703][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.210962][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.212219][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.213721][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.215201][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.216737][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.219506][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.220591][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.220776][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.222301][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.224942][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.226618][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.228191][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.231092][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.233386][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.235838][ T4325] device veth0_vlan entered promiscuous mode [ 36.238476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.240023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.241527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.243694][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.245410][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.246936][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.248445][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.251135][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.256781][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.261087][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.263828][ T4325] device veth1_vlan entered promiscuous mode [ 36.268036][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.270430][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.272035][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.273714][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.275281][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.278611][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.282214][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.292331][ T4325] device veth0_macvtap entered promiscuous mode [ 36.294844][ T4325] device veth1_macvtap entered promiscuous mode [ 36.297844][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.299643][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.301119][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.302697][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.304250][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.305769][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.307168][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.314384][ T4324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.315768][ T4324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.317057][ T4324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.318451][ T4324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.321327][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.324177][ T255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.325436][ T255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.327526][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.339959][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.341513][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.343025][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.344520][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.345972][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.347491][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.350158][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.351748][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.353997][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.357996][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.362792][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.364359][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.366000][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.367505][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.369796][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.371306][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.372758][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.375827][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.377929][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.382891][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.384375][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.385835][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.392145][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.393844][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.395403][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.396865][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.400461][ T4325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.401944][ T4325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.403404][ T4325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.404836][ T4325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.413664][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.414875][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.415637][ T4431] loop0: detected capacity change from 0 to 8192 [ 36.416458][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.429179][ T4431] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 36.431487][ T4431] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 36.433044][ T4431] REISERFS (device loop0): using ordered data mode [ 36.434057][ T4431] reiserfs: using flush barriers [ 36.441063][ T4431] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 36.449778][ T4431] REISERFS (device loop0): checking transaction log (loop0) [ 36.477258][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.478570][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.483021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.487946][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.493698][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.510587][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.560819][ T4435] loop1: detected capacity change from 0 to 512 [ 36.566225][ T4431] REISERFS (device loop0): Using tea hash to sort names [ 36.567927][ T4431] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 36.571833][ T255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.573042][ T255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.575091][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.586086][ T4435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.588461][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.592261][ T4431] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 36.598633][ T4435] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes [ 36.599389][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.610546][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.634833][ T255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.636259][ T255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.637916][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.772231][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.773862][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.775870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.855667][ T4449] loop2: detected capacity change from 0 to 8192 [ 36.869664][ T4449] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 36.871865][ T4449] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 36.873803][ T4449] REISERFS (device loop2): using ordered data mode [ 36.874867][ T4449] reiserfs: using flush barriers [ 36.886313][ T4449] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 36.896030][ T4449] REISERFS (device loop2): checking transaction log (loop2) [ 36.898689][ T4449] REISERFS (device loop2): Using r5 hash to sort names [ 36.901477][ T4449] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 36.947193][ T4460] loop4: detected capacity change from 0 to 1024 [ 37.048313][ T4452] loop3: detected capacity change from 0 to 32768 [ 37.289168][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 37.290276][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 37.370657][ T4322] Bluetooth: hci4: command 0x041b tx timeout [ 37.372357][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 37.374481][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 37.382194][ T4312] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.425792][ T4466] loop4: detected capacity change from 0 to 512 [ 37.462988][ T4466] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.10: bad orphan inode 11 [ 37.465233][ T4466] ext4_test_bit(bit=10, block=4) = 1 [ 37.468353][ T4466] is_bad_inode(inode)=0 [ 37.471663][ T4466] NEXT_ORPHAN(inode)=2080374784 [ 37.473648][ T4466] max_ino=32 [ 37.474186][ T4466] i_nlink=0 [ 37.477099][ T4466] EXT4-fs (loop4): 1 truncate cleaned up [ 37.482611][ T4466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.601916][ T4474] loop2: detected capacity change from 0 to 1024 [ 37.605561][ T4474] EXT4-fs: Ignoring removed bh option [ 37.606765][ T4474] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.614052][ T4474] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 37.615937][ T4474] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 38.041745][ T4474] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6 [ 38.095221][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 38.177364][ T4489] tipc: Started in network mode [ 38.178287][ T4489] tipc: Node identity ac14142f, cluster identity 4711 [ 38.181928][ T4492] loop2: detected capacity change from 0 to 1024 [ 38.183589][ T4492] ======================================================= [ 38.183589][ T4492] WARNING: The mand mount option has been deprecated and [ 38.183589][ T4492] and is ignored by this kernel. Remove the mand [ 38.183589][ T4492] option from the mount to silence this warning. [ 38.183589][ T4492] ======================================================= [ 38.191020][ T4489] tipc: New replicast peer: 0.0.0.0 [ 38.192572][ T4489] tipc: Enabled bearer , priority 10 [ 38.196896][ T4489] tipc: New replicast peer: 172.30.1.2 [ 38.222138][ T4492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.289272][ T4495] process 'syz.3.14' launched './file1' with NULL argv: empty string added [ 38.532074][ T4481] loop0: detected capacity change from 0 to 32768 [ 38.541987][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 38.648519][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 38.719887][ T4511] loop4: detected capacity change from 0 to 7 [ 38.734758][ T4511] Dev loop4: unable to read RDB block 7 [ 38.742584][ T4511] loop4: unable to read partition table [ 38.743464][ T4511] loop4: partition table beyond EOD, truncated [ 38.744617][ T4511] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 38.762419][ T4513] random: crng reseeded on system resumption [ 38.785929][ T27] audit: type=1326 audit(38.770:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f35b9e8 code=0x7ffc0000 [ 38.791646][ T27] audit: type=1326 audit(38.780:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f35b9e8 code=0x7ffc0000 [ 38.798256][ T27] audit: type=1326 audit(38.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f35b9e8 code=0x7ffc0000 [ 38.813200][ T27] audit: type=1326 audit(38.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff7f35b9e8 code=0x7ffc0000 [ 38.828473][ T27] audit: type=1326 audit(38.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f35b9e8 code=0x7ffc0000 [ 38.845343][ T27] audit: type=1326 audit(38.830:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5b9e8 code=0x7ffc0000 [ 38.857838][ T27] audit: type=1326 audit(38.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff88d5df8c code=0x7ffc0000 [ 38.870286][ T27] audit: type=1326 audit(38.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5b9e8 code=0x7ffc0000 [ 38.881622][ T27] audit: type=1326 audit(38.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.1.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff7f35b9e8 code=0x7ffc0000 [ 38.890729][ T27] audit: type=1326 audit(38.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4517 comm="syz.0.25" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=235 compat=0 ip=0xffff88d5b9e8 code=0x7ffc0000 [ 38.922433][ T4519] Zero length message leads to an empty skb [ 39.219637][ T22] tipc: Node number set to 2886997039 [ 39.369074][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 39.370134][ T4326] Bluetooth: hci0: command 0x040f tx timeout [ 39.449661][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 39.450702][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 39.451628][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 39.868962][ T4560] syz.4.44 uses obsolete (PF_INET,SOCK_PACKET) [ 39.935695][ T4567] hub 9-0:1.0: USB hub found [ 39.936687][ T4567] hub 9-0:1.0: 8 ports detected [ 40.110344][ T4572] loop2: detected capacity change from 0 to 1024 [ 41.267513][ T4607] loop3: detected capacity change from 0 to 256 [ 41.300517][ T4607] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.307786][ T4609] loop0: detected capacity change from 0 to 128 [ 41.356239][ T4609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.449302][ T4326] Bluetooth: hci0: command 0x0419 tx timeout [ 41.450300][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 41.529243][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 41.530359][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 41.531325][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 41.650974][ T4318] EXT4-fs (loop0): unmounting filesystem. [ 41.791467][ T4630] netlink: 'syz.1.72': attribute type 4 has an invalid length. [ 41.849725][ T4632] loop1: detected capacity change from 0 to 128 [ 41.863430][ T4632] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.874650][ T4632] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.248181][ T4642] loop1: detected capacity change from 0 to 8192 [ 42.628855][ T4657] loop0: detected capacity change from 0 to 512 [ 42.665747][ T4660] netlink: 'syz.4.87': attribute type 10 has an invalid length. [ 42.683483][ T4444] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.701361][ T4660] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.706900][ T4660] bond0: (slave team0): Enslaving as an active interface with an up link [ 42.855618][ T4671] tipc: Started in network mode [ 42.857706][ T4671] tipc: Node identity ac14140f, cluster identity 4711 [ 42.863721][ T4671] tipc: New replicast peer: 255.255.255.255 [ 42.867282][ T4671] tipc: Enabled bearer , priority 10 [ 42.927875][ T4675] loop4: detected capacity change from 0 to 512 [ 42.950039][ T4675] EXT4-fs: Ignoring removed nobh option [ 42.969044][ T4675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.016164][ T4675] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #3: comm syz.4.92: corrupted inode contents [ 43.031405][ T4675] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #3: comm syz.4.92: mark_inode_dirty error [ 43.050501][ T4675] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #3: comm syz.4.92: corrupted inode contents [ 43.052802][ T4675] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.92: mark_inode_dirty error [ 43.055606][ T4675] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.92: Failed to acquire dquot type 0 [ 43.082019][ T4675] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.92: corrupted inode contents [ 43.095840][ T4675] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #16: comm syz.4.92: mark_inode_dirty error [ 43.109575][ T4675] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.92: corrupted inode contents [ 43.111658][ T4675] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.92: mark_inode_dirty error [ 43.122457][ T4675] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.92: corrupted inode contents [ 43.127834][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 43.130610][ T4675] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 43.130946][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 43.133355][ T112] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 43.133370][ T4675] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.92: corrupted inode contents [ 43.137599][ T4675] EXT4-fs error (device loop4): ext4_truncate:4318: inode #16: comm syz.4.92: mark_inode_dirty error [ 43.140558][ T112] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 43.152496][ T4675] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 43.169120][ T4675] EXT4-fs (loop4): 1 truncate cleaned up [ 43.170111][ T4675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.235511][ T4688] fido_id[4688]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.272830][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 43.417009][ T4697] loop0: detected capacity change from 0 to 4096 [ 43.453406][ T4697] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.522881][ T4701] loop4: detected capacity change from 0 to 8192 [ 43.562305][ T4318] EXT4-fs (loop0): unmounting filesystem. [ 43.563930][ T4701] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.582816][ T4701] netlink: 3 bytes leftover after parsing attributes in process `syz.4.102'. [ 43.584402][ T4701] 0X: renamed from caif0 [ 43.668987][ T4701] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 43.701732][ T4710] hub 2-0:1.0: USB hub found [ 43.705261][ T4710] hub 2-0:1.0: 8 ports detected [ 43.806765][ T4720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'. [ 43.979639][ T7] tipc: Node number set to 2886997007 [ 44.163221][ T4744] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.264161][ T4747] loop1: detected capacity change from 0 to 8192 [ 44.275605][ T4747] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.908339][ T4771] loop4: detected capacity change from 0 to 512 [ 44.929666][ T4771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.941991][ T4771] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.950991][ T4771] EXT4-fs (loop4): 1 truncate cleaned up [ 44.952083][ T4771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.011791][ T4774] loop1: detected capacity change from 0 to 512 [ 45.023247][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 45.030112][ T4774] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.052326][ T4774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.067932][ T4778] loop3: detected capacity change from 0 to 1024 [ 45.070873][ T4774] netlink: 'syz.1.134': attribute type 4 has an invalid length. [ 45.072268][ T4778] EXT4-fs: Ignoring removed bh option [ 45.085724][ T4778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.118088][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 45.125956][ T4780] loop4: detected capacity change from 0 to 4096 [ 45.136496][ T4321] EXT4-fs (loop3): unmounting filesystem. [ 45.146427][ T4780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.180363][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 45.183344][ T4325] EXT4-fs (loop4): unmounting filesystem. [ 45.221290][ T27] kauditd_printk_skb: 106 callbacks suppressed [ 45.221301][ T27] audit: type=1326 audit(45.210:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8115b9e8 code=0x7ffc0000 [ 45.228398][ T27] audit: type=1326 audit(45.210:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=9 compat=0 ip=0xffff8115b9e8 code=0x7ffc0000 [ 45.236106][ T27] audit: type=1326 audit(45.210:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8115b9e8 code=0x7ffc0000 [ 45.299102][ T4799] loop0: detected capacity change from 0 to 512 [ 45.357714][ T4799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.410431][ T4318] EXT4-fs (loop0): unmounting filesystem. [ 45.420775][ T27] audit: type=1326 audit(45.410:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa155b9e8 code=0x7ffc0000 [ 45.430969][ T27] audit: type=1326 audit(45.420:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa155b9e8 code=0x7ffc0000 [ 45.435062][ T27] audit: type=1326 audit(45.420:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=101 compat=0 ip=0xffffa155b9e8 code=0x7ffc0000 [ 45.448869][ T27] audit: type=1326 audit(45.430:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa155b9e8 code=0x7ffc0000 [ 45.452318][ T27] audit: type=1326 audit(45.430:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4808 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa155b9e8 code=0x7ffc0000 [ 45.512849][ T27] audit: type=1326 audit(45.500:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5b9e8 code=0x7ffc0000 [ 45.516006][ T27] audit: type=1326 audit(45.500:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5b9e8 code=0x7ffc0000 [ 45.565590][ T4832] smc: net device bond0 applied user defined pnetid SYZ0 [ 45.567098][ T4832] smc: net device bond0 erased user defined pnetid SYZ0 [ 45.582348][ T4832] tipc: New replicast peer: 255.255.255.83 [ 45.583386][ T4832] tipc: Enabled bearer , priority 10 [ 45.610282][ T4840] netlink: 'syz.3.162': attribute type 4 has an invalid length. [ 45.717721][ T4849] loop3: detected capacity change from 0 to 164 [ 45.735502][ T4854] loop0: detected capacity change from 0 to 512 [ 45.738445][ T4849] ISOFS: unable to read i-node block [ 45.748322][ T4854] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.751156][ T4849] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 45.754957][ T4856] netlink: 'syz.1.170': attribute type 13 has an invalid length. [ 45.764745][ T4854] EXT4-fs (loop0): 1 truncate cleaned up [ 45.779673][ T4858] loop4: detected capacity change from 0 to 512 [ 45.785769][ T4854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.822906][ T4854] mmap: syz.0.168 (4854) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.828474][ T4858] [ 45.828911][ T4858] ====================================================== [ 45.830073][ T4858] WARNING: possible circular locking dependency detected [ 45.831205][ T4858] syzkaller #0 Not tainted [ 45.831925][ T4858] ------------------------------------------------------ [ 45.833008][ T4858] syz.4.169/4858 is trying to acquire lock: [ 45.833900][ T4858] ffff0000ceba0b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x188/0x284c [ 45.835521][ T4858] [ 45.835521][ T4858] but task is already holding lock: [ 45.836680][ T4858] ffff0000ceba4650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 45.838002][ T4858] [ 45.838002][ T4858] which lock already depends on the new lock. [ 45.838002][ T4858] [ 45.839436][ T4858] [ 45.839436][ T4858] the existing dependency chain (in reverse order) is: [ 45.840808][ T4858] [ 45.840808][ T4858] -> #1 (sb_internal){.+.+}-{0:0}: [ 45.841934][ T4858] percpu_down_read+0x70/0x2a8 [ 45.842671][ T4858] ext4_evict_inode+0x3dc/0x1270 [ 45.843467][ T4858] evict+0x3c8/0x810 [ 45.844119][ T4858] iput+0x764/0x7f4 [ 45.844828][ T4858] ext4_ext_migrate+0x9dc/0xbfc [ 45.845667][ T4858] ext4_ioctl+0x1a38/0x4198 [ 45.846424][ T4858] __arm64_sys_ioctl+0x14c/0x1c8 [ 45.847279][ T4858] invoke_syscall+0x98/0x2bc [ 45.848058][ T4858] el0_svc_common+0x138/0x258 [ 45.848857][ T4858] do_el0_svc+0x58/0x13c [ 45.849600][ T4858] el0_svc+0x58/0x138 [ 45.850368][ T4858] el0t_64_sync_handler+0x84/0xf0 [ 45.851324][ T4858] el0t_64_sync+0x18c/0x190 [ 45.852113][ T4858] [ 45.852113][ T4858] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 45.853331][ T4858] __lock_acquire+0x293c/0x6544 [ 45.854131][ T4858] lock_acquire+0x20c/0x644 [ 45.854871][ T4858] percpu_down_read+0x70/0x2a8 [ 45.855623][ T4858] ext4_writepages+0x188/0x284c [ 45.856529][ T4858] do_writepages+0x2c0/0x4fc [ 45.857331][ T4858] __writeback_single_inode+0x164/0x157c [ 45.858330][ T4858] writeback_single_inode+0x1c0/0x720 [ 45.859293][ T4858] write_inode_now+0x144/0x1b0 [ 45.860165][ T4858] iput+0x5cc/0x7f4 [ 45.860855][ T4858] ext4_xattr_block_set+0x17a4/0x2810 [ 45.861742][ T4858] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 45.862727][ T4858] __ext4_expand_extra_isize+0x298/0x358 [ 45.863690][ T4858] __ext4_mark_inode_dirty+0x3e4/0x790 [ 45.864652][ T4858] ext4_evict_inode+0xb58/0x1270 [ 45.865447][ T4858] evict+0x3c8/0x810 [ 45.866142][ T4858] iput+0x764/0x7f4 [ 45.866818][ T4858] ext4_process_orphan+0x240/0x2b4 [ 45.867699][ T4858] ext4_orphan_cleanup+0x908/0x104c [ 45.868554][ T4858] ext4_fill_super+0x6440/0x68a8 [ 45.869364][ T4858] get_tree_bdev+0x358/0x544 [ 45.870094][ T4858] ext4_get_tree+0x28/0x38 [ 45.870833][ T4858] vfs_get_tree+0x90/0x274 [ 45.871554][ T4858] do_new_mount+0x228/0x810 [ 45.872245][ T4858] path_mount+0x5b4/0xe78 [ 45.872979][ T4858] __arm64_sys_mount+0x49c/0x584 [ 45.873743][ T4858] invoke_syscall+0x98/0x2bc [ 45.874501][ T4858] el0_svc_common+0x138/0x258 [ 45.875231][ T4858] do_el0_svc+0x58/0x13c [ 45.875906][ T4858] el0_svc+0x58/0x138 [ 45.876524][ T4858] el0t_64_sync_handler+0x84/0xf0 [ 45.877291][ T4858] el0t_64_sync+0x18c/0x190 [ 45.878011][ T4858] [ 45.878011][ T4858] other info that might help us debug this: [ 45.878011][ T4858] [ 45.879419][ T4858] Possible unsafe locking scenario: [ 45.879419][ T4858] [ 45.880453][ T4858] CPU0 CPU1 [ 45.881169][ T4858] ---- ---- [ 45.881924][ T4858] lock(sb_internal); [ 45.882486][ T4858] lock(&sbi->s_writepages_rwsem); [ 45.883541][ T4858] lock(sb_internal); [ 45.884654][ T4858] lock(&sbi->s_writepages_rwsem); [ 45.885489][ T4858] [ 45.885489][ T4858] *** DEADLOCK *** [ 45.885489][ T4858] [ 45.886838][ T4858] 3 locks held by syz.4.169/4858: [ 45.887578][ T4858] #0: ffff0000ceba40e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 45.889106][ T4858] #1: ffff0000ceba4650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 45.890550][ T4858] #2: ffff0000e18e0ad0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 45.892014][ T4858] [ 45.892014][ T4858] stack backtrace: [ 45.892852][ T4858] CPU: 0 PID: 4858 Comm: syz.4.169 Not tainted syzkaller #0 [ 45.893846][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 45.895196][ T4858] Call trace: [ 45.895660][ T4858] dump_backtrace+0x1c8/0x1f4 [ 45.896393][ T4858] show_stack+0x2c/0x3c [ 45.897013][ T4858] __dump_stack+0x30/0x40 [ 45.897682][ T4858] dump_stack_lvl+0xf8/0x160 [ 45.898358][ T4858] dump_stack+0x1c/0x5c [ 45.898947][ T4858] print_circular_bug+0x148/0x1b0 [ 45.899753][ T4858] check_noncircular+0x240/0x2d4 [ 45.900495][ T4858] __lock_acquire+0x293c/0x6544 [ 45.901223][ T4858] lock_acquire+0x20c/0x644 [ 45.901888][ T4858] percpu_down_read+0x70/0x2a8 [ 45.902604][ T4858] ext4_writepages+0x188/0x284c [ 45.903351][ T4858] do_writepages+0x2c0/0x4fc [ 45.904170][ T4858] __writeback_single_inode+0x164/0x157c [ 45.905092][ T4858] writeback_single_inode+0x1c0/0x720 [ 45.906011][ T4858] write_inode_now+0x144/0x1b0 [ 45.906749][ T4858] iput+0x5cc/0x7f4 [ 45.907320][ T4858] ext4_xattr_block_set+0x17a4/0x2810 [ 45.908185][ T4858] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 45.909062][ T4858] __ext4_expand_extra_isize+0x298/0x358 [ 45.909840][ T4858] __ext4_mark_inode_dirty+0x3e4/0x790 [ 45.910647][ T4858] ext4_evict_inode+0xb58/0x1270 [ 45.911379][ T4858] evict+0x3c8/0x810 [ 45.911967][ T4858] iput+0x764/0x7f4 [ 45.912550][ T4858] ext4_process_orphan+0x240/0x2b4 [ 45.913268][ T4858] ext4_orphan_cleanup+0x908/0x104c [ 45.914027][ T4858] ext4_fill_super+0x6440/0x68a8 [ 45.914758][ T4858] get_tree_bdev+0x358/0x544 [ 45.915432][ T4858] ext4_get_tree+0x28/0x38 [ 45.916009][ T4858] vfs_get_tree+0x90/0x274 [ 45.916634][ T4858] do_new_mount+0x228/0x810 [ 45.917294][ T4858] path_mount+0x5b4/0xe78 [ 45.918034][ T4858] __arm64_sys_mount+0x49c/0x584 [ 45.918872][ T4858] invoke_syscall+0x98/0x2bc [ 45.919624][ T4858] el0_svc_common+0x138/0x258 [ 45.920405][ T4858] do_el0_svc+0x58/0x13c [ 45.921148][ T4858] el0_svc+0x58/0x138 [ 45.921811][ T4858] el0t_64_sync_handler+0x84/0xf0 [ 45.922578][ T4858] el0t_64_sync+0x18c/0x190 [ 45.934087][ T4858] ------------[ cut here ]------------ [ 45.935105][ T4858] EA inode 11 i_nlink=2 [ 45.935180][ T4858] WARNING: CPU: 1 PID: 4858 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 45.937545][ T4858] Modules linked in: [ 45.938230][ T4858] CPU: 1 PID: 4858 Comm: syz.4.169 Not tainted syzkaller #0 [ 45.939417][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 45.941102][ T4858] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 45.942299][ T4858] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 45.943304][ T4858] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 45.944243][ T4858] sp : ffff800021026e00 [ 45.944884][ T4858] x29: ffff800021026ea0 x28: 0000000000000000 x27: dfff800000000000 [ 45.946127][ T4858] x26: 1fffe0001ed31e60 x25: ffff700004204dc4 x24: 0000000000000000 [ 45.947352][ T4858] x23: ffff800017a8a000 x22: ffff0000f698f148 x21: 0000000000000002 [ 45.948579][ T4858] x20: 0000000000000001 x19: ffff0000f698f108 x18: ffff800011abbcc0 [ 45.949808][ T4858] x17: 0000000000000000 x16: ffff800008042d90 x15: 0000000000000002 [ 45.951040][ T4858] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 45.952277][ T4858] x11: 000000000006a0d1 x10: ffff80002b604000 x9 : 1eca76187b122f00 [ 45.953476][ T4858] x8 : 1eca76187b122f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 45.954734][ T4858] x5 : ffff800021026898 x4 : ffff8000151a4920 x3 : ffff80000852e538 [ 45.955989][ T4858] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 45.957238][ T4858] Call trace: [ 45.957756][ T4858] ext4_xattr_inode_update_ref+0x42c/0x470 [ 45.958708][ T4858] ext4_xattr_set_entry+0x918/0x15ac [ 45.959600][ T4858] ext4_xattr_ibody_set+0x204/0x600 [ 45.960446][ T4858] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 45.961337][ T4858] __ext4_expand_extra_isize+0x298/0x358 [ 45.962179][ T4858] __ext4_mark_inode_dirty+0x3e4/0x790 [ 45.963021][ T4858] ext4_evict_inode+0xb58/0x1270 [ 45.963729][ T4858] evict+0x3c8/0x810 [ 45.964328][ T4858] iput+0x764/0x7f4 [ 45.964885][ T4858] ext4_process_orphan+0x240/0x2b4 [ 45.965657][ T4858] ext4_orphan_cleanup+0x908/0x104c [ 45.966535][ T4858] ext4_fill_super+0x6440/0x68a8 [ 45.967328][ T4858] get_tree_bdev+0x358/0x544 [ 45.968054][ T4858] ext4_get_tree+0x28/0x38 [ 45.968710][ T4858] vfs_get_tree+0x90/0x274 [ 45.969488][ T4858] do_new_mount+0x228/0x810 [ 45.970217][ T4858] path_mount+0x5b4/0xe78 [ 45.970913][ T4858] __arm64_sys_mount+0x49c/0x584 [ 45.971703][ T4858] invoke_syscall+0x98/0x2bc [ 45.972447][ T4858] el0_svc_common+0x138/0x258 [ 45.973279][ T4858] do_el0_svc+0x58/0x13c [ 45.974009][ T4858] el0_svc+0x58/0x138 [ 45.974677][ T4858] el0t_64_sync_handler+0x84/0xf0 [ 45.975487][ T4858] el0t_64_sync+0x18c/0x190 [ 45.976221][ T4858] irq event stamp: 2893 [ 45.976934][ T4858] hardirqs last enabled at (2893): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 45.978504][ T4858] hardirqs last disabled at (2892): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 45.980034][ T4858] softirqs last enabled at (2162): [] handle_softirqs+0xaf8/0xc6c [ 45.981550][ T4858] softirqs last disabled at (2151): [] __do_softirq+0x14/0x20 [ 45.982971][ T4858] ---[ end trace 0000000000000000 ]--- [ 46.011074][ T4858] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #18: comm syz.4.169: iget: bad extra_isize 90 (inode size 256) [ 46.013385][ T4858] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.169: error while reading EA inode 18 err=-117 [ 46.015428][ T4858] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #18: comm syz.4.169: iget: bad extra_isize 90 (inode size 256) [ 46.017601][ T4858] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.169: error while reading EA inode 18 err=-117 [ 46.021615][ T4858] EXT4-fs (loop4): 1 orphan inode deleted [ 46.022549][ T4858] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.024409][ T4318] EXT4-fs (loop0): unmounting filesystem. [ 46.064706][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.066080][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.404336][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.416898][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.684376][ T4856] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.685934][ T4856] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.687274][ T4856] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.688635][ T4856] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.943145][ T4325] EXT4-fs (loop4): unmounting filesystem.