last executing test programs: 2.01747675s ago: executing program 0 (id=121): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) 2.01722901s ago: executing program 0 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) 2.01693377s ago: executing program 0 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0, @ANYBLOB="000000000000005cfdd46900000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ec0)={0x30, r2, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x8084) 2.00967961s ago: executing program 0 (id=124): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000101c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) pivot_root(&(0x7f0000010280)='./file0\x00', 0x0) 1.989687942s ago: executing program 0 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189078040000000000000086ddffff0000000009cabbf28ffc7b0081086c5a1e8cd0696642640f9246278a7893d1cf6f0c564375d2fea797908da5c742a2654a1f011dfe7417a790f1035697da0496552afd0993e5811427694600b59591745ac468dbcb21127b50089da0a76bd984c39bc90f1175c851"], 0xfdef) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000002000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000e00000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_flash={0x33, 0x200ea6, './file1\x00'}}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e00000006000000020000000000000000a00600", @ANYRES32, @ANYBLOB="0900000000002613d07dfe2313e20000008d0000000000000000000000008594d1812530e7c86e6b1dca6addb9099b9500d05ccc0231af5899893c6b5873f776f28a1c0d5f59dc93e4e62c96ccdc2ecd81a0aed253f201003dc882f5d323897d4b304654ecb3f26ae2d14d21badb3c998ac2cc224cb9ad3d85161eca6b5c63172b076bb574", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000030000000b00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0400000004000000080000000b00210000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="5df5d139de09000000d6", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x18) r8 = syz_io_uring_setup(0x21a1, &(0x7f0000010400)={0x0, 0x4910, 0x80, 0x1001, 0x52}, &(0x7f0000010080), &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000000cf000000a000000006000000250db374", @ANYRES32=r7, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000003000000050000000a00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000080000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa20000000000000702052e1c96ffffb7030000f1ffffffb7040000010000008a00000003000010000000000000000006", @ANYRESDEC=r9, @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r11, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.427639937s ago: executing program 3 (id=137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}], 0x1, 0x0, 0x2}}], 0x48, 0x4000000}, 0x0) 1.423688387s ago: executing program 2 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c"], 0x8c}}, 0x0) 1.39262554s ago: executing program 3 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.339899194s ago: executing program 2 (id=141): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) 1.339492204s ago: executing program 3 (id=143): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x8000, 0x141}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) 1.319903295s ago: executing program 2 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 1.25573565s ago: executing program 3 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) unshare(0x22020400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c000000390009002cbd7000000000000200000004000000040001806b701d324407e16886d0e4f336f0f52564502d0b9a7e70a21d8e54daec93620ec6abffa508faf0c7f00751a83edd04e2b1"], 0x1c}}, 0x0) 1.25550673s ago: executing program 4 (id=148): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r0) 1.249435031s ago: executing program 4 (id=149): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4e042, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) capset(0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x2a, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x19c) write(r3, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) 1.243914031s ago: executing program 2 (id=150): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x28, 0x5, 0x0) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.151958629s ago: executing program 3 (id=152): r0 = socket$caif_stream(0x25, 0x1, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000180000000000000000000000950000000065637a7004b76116c89075e4e54e41b859a82c3d0c9a55a9c6f0df58fc86ff9080bb7c74d70989eaacc744a10084315cd2e6a69261896843095119942d9d5b65051600e86416ad16ff3c81ccf0436d316a315d109ebd2b3c23c01ce107397d843b650ff6bd4fef"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], 0x50) mq_unlink(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140700000a400000000e0a050000000000000000000a0000050900010073797a31200000001400030800034000000002040000800900020073797a3100000000140000001100010000000000000000000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x400c044) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(r4, 0x80) r6 = dup3(r5, r4, 0x80000) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000500)={0x9, &(0x7f00000001c0)=[{0xe624, 0x8, 0x2, 0x401}, {0x3, 0x2, 0x3, 0xb}, {0x480, 0x5, 0x5, 0x6}, {0xeb7a, 0x7, 0x2, 0x34}, {0x2, 0x8, 0xb7, 0xb07}, {0x5ff7, 0x1, 0x8e, 0xfff}, {0x7, 0x5, 0x0, 0xfff}, {0x2, 0x9, 0x1, 0x8}, {0xb, 0x9, 0x9, 0x8}]}, 0x10) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) 672.234736ms ago: executing program 4 (id=154): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 671.999336ms ago: executing program 1 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 655.269528ms ago: executing program 1 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) setresuid(0x0, 0xee00, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) 643.192019ms ago: executing program 0 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0x36041000, 0x0, 0x0, 0x0, 0x0, 0x0) 547.960527ms ago: executing program 1 (id=158): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) read$watch_queue(r2, 0x0, 0x0) 547.732996ms ago: executing program 1 (id=159): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r2 = dup3(r0, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 533.476478ms ago: executing program 4 (id=160): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800) 292.342947ms ago: executing program 4 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) 136.152309ms ago: executing program 2 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x2}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) close_range(r2, 0xffffffffffffffff, 0x0) 135.956499ms ago: executing program 1 (id=163): unshare(0x2040400) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file2\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x121c, &(0x7f0000001840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x70) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 113.704471ms ago: executing program 2 (id=164): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff94, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) exit(0xffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 113.316371ms ago: executing program 3 (id=165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='cachefiles_tmpfile\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@migrate={0x58, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@tfcpad={0x8, 0x16, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x43, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 104.834862ms ago: executing program 4 (id=166): close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0xfffffff9, 0x5, {{0x5, 0x4, 0x3, 0x3e, 0x14, 0x64, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x41}}}}}) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f0000000200)=0x6) 0s ago: executing program 1 (id=167): symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) io_setup(0x9, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 24.806672][ T4306] cgroup: Unknown subsys name 'net' [ 25.015785][ T4306] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.281394][ T4306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 26.536030][ T4322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.540100][ T4325] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.542908][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.544651][ T4333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.545850][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.545932][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.547216][ T4332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.548704][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.549680][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.550284][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.551710][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.552622][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.553984][ T4332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.555154][ T4333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.555745][ T4332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.556901][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.559135][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.559200][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.560341][ T4333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.561774][ T4332] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 26.562937][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 26.563569][ T4332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.565254][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.566570][ T4332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 26.566790][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 26.570818][ T4334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.572565][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.585678][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.588978][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 26.590198][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.710565][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 26.722428][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 26.753969][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 26.762985][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 26.774346][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.775564][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.777045][ T4318] device bridge_slave_0 entered promiscuous mode [ 26.785465][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.786497][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.787899][ T4323] device bridge_slave_0 entered promiscuous mode [ 26.793234][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.794415][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.795830][ T4318] device bridge_slave_1 entered promiscuous mode [ 26.800752][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.801998][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.804272][ T4323] device bridge_slave_1 entered promiscuous mode [ 26.806770][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 26.830704][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.831948][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.834211][ T4319] device bridge_slave_0 entered promiscuous mode [ 26.837171][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.838704][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.839830][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.841178][ T4326] device bridge_slave_0 entered promiscuous mode [ 26.843773][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.845206][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.846334][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.847721][ T4326] device bridge_slave_1 entered promiscuous mode [ 26.851460][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.852648][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.855517][ T4319] device bridge_slave_1 entered promiscuous mode [ 26.857812][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.859966][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.882871][ T4323] team0: Port device team_slave_0 added [ 26.885276][ T4323] team0: Port device team_slave_1 added [ 26.886862][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.892396][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.897492][ T4318] team0: Port device team_slave_0 added [ 26.899085][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.904741][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.908795][ T4318] team0: Port device team_slave_1 added [ 26.919848][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.920922][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.926060][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.930982][ T4319] team0: Port device team_slave_0 added [ 26.931970][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.933703][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.935156][ T4329] device bridge_slave_0 entered promiscuous mode [ 26.939542][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.940645][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.944669][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.949578][ T4319] team0: Port device team_slave_1 added [ 26.950740][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.951721][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.955403][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.957168][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.958125][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.959388][ T4329] device bridge_slave_1 entered promiscuous mode [ 26.961770][ T4326] team0: Port device team_slave_0 added [ 26.967964][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.969030][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.972996][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.979229][ T4326] team0: Port device team_slave_1 added [ 27.044363][ T4323] device hsr_slave_0 entered promiscuous mode [ 27.103450][ T4323] device hsr_slave_1 entered promiscuous mode [ 27.143646][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.144736][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.148397][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.152619][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.153709][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.157358][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.160358][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.166816][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.167904][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.171626][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.177664][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.179243][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.180286][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.184163][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.224295][ T4318] device hsr_slave_0 entered promiscuous mode [ 27.273618][ T4318] device hsr_slave_1 entered promiscuous mode [ 27.313251][ T4318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.314551][ T4318] Cannot create hsr debugfs directory [ 27.336918][ T4329] team0: Port device team_slave_0 added [ 27.394095][ T4326] device hsr_slave_0 entered promiscuous mode [ 27.433362][ T4326] device hsr_slave_1 entered promiscuous mode [ 27.473237][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.474371][ T4326] Cannot create hsr debugfs directory [ 27.476253][ T4329] team0: Port device team_slave_1 added [ 27.524227][ T4319] device hsr_slave_0 entered promiscuous mode [ 27.563394][ T4319] device hsr_slave_1 entered promiscuous mode [ 27.603239][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.604397][ T4319] Cannot create hsr debugfs directory [ 27.625693][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.626730][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.630319][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.639260][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.640291][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.643941][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.714304][ T4329] device hsr_slave_0 entered promiscuous mode [ 27.753727][ T4329] device hsr_slave_1 entered promiscuous mode [ 27.793546][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.794798][ T4329] Cannot create hsr debugfs directory [ 27.863556][ T4318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.898018][ T4318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.946529][ T4318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.985669][ T4318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.046756][ T4323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.087375][ T4323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.129263][ T4323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.184498][ T4323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.250011][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.279190][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.314375][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.357332][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.418074][ T4326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.454756][ T4326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.506507][ T4329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.544199][ T4326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.584705][ T4326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.625000][ T4329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.633452][ T4334] Bluetooth: hci4: command 0x0409 tx timeout [ 28.633608][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 28.634461][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 28.635433][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 28.636373][ T4334] Bluetooth: hci3: command 0x0409 tx timeout [ 28.667136][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.670744][ T4329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.715164][ T4329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.775461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.777424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.789077][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.791817][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.793146][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.798526][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.799647][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.808694][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.816174][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.817745][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.819455][ T253] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.820575][ T253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.825698][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.835793][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.841332][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.842897][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.847397][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.852412][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.856700][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.858218][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.859591][ T253] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.860635][ T253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.861960][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.865923][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.872724][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.876545][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.877999][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.879228][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.880274][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.885478][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.887470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.888925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.896617][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.898218][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.899679][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.901137][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.902239][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.905001][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.907177][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.908702][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.910246][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.916933][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.919932][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.921581][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.923042][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.924917][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.926270][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.927523][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.929118][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.936879][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.939004][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.940359][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.941911][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.944393][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.945916][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.947157][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.949545][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.955160][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.956455][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.957663][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.959040][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.962303][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.966518][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.967578][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.969063][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.970404][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.971664][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.977783][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.980955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.982406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.985031][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.986054][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.987268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.988944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.992150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.993653][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.995104][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.996162][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.999200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.000559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.005288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.007018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.010143][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.016142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.017658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.019066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.020494][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.021520][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.022720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.026169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.030573][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.032083][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.045760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.047296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.048747][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.049848][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.051140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.052525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.060651][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.062340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.064693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.066155][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.067684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.078580][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.080087][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.083888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.085532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.086978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.088440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.089791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.091556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.092926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.097458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.102775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.105999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.114394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.116026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.117426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.118889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.120366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.126013][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.132292][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.143586][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.148013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.149482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.151012][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.152410][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.159619][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.161015][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.168257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.169461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.179065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.180357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.186448][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.195282][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.196909][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.201689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.203588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.218529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.219908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.221419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.222654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.230624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.231894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.236976][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.240357][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.241807][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.243511][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.244917][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.246417][ T4318] device veth0_vlan entered promiscuous mode [ 29.254843][ T4319] device veth0_vlan entered promiscuous mode [ 29.260245][ T4318] device veth1_vlan entered promiscuous mode [ 29.269908][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.272697][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.274346][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.275491][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.277097][ T4319] device veth1_vlan entered promiscuous mode [ 29.284191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.285714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.287138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.288280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.306465][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.307923][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.309508][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.310874][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.312326][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.322501][ T4323] device veth0_vlan entered promiscuous mode [ 29.325391][ T4319] device veth0_macvtap entered promiscuous mode [ 29.327679][ T4319] device veth1_macvtap entered promiscuous mode [ 29.331966][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.336446][ T4318] device veth0_macvtap entered promiscuous mode [ 29.337879][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.339176][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.340516][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.341951][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.344585][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.346489][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.347944][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.349266][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.351152][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.357564][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.359969][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.361964][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.364337][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.365643][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.366838][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.372067][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.374784][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.376282][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.377693][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.379675][ T4318] device veth1_macvtap entered promiscuous mode [ 29.386602][ T4323] device veth1_vlan entered promiscuous mode [ 29.400901][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.402386][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.404813][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.407523][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.409058][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.410416][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.411806][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.414219][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.415601][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.417139][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.421706][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.424451][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.438769][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.440302][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.442105][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.444585][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.446171][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.447560][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.449051][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.450915][ T4323] device veth0_macvtap entered promiscuous mode [ 29.460599][ T4323] device veth1_macvtap entered promiscuous mode [ 29.464999][ T4318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.466338][ T4318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.467483][ T4318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.468626][ T4318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.470616][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.472293][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.473811][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.475323][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.476816][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.478085][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.481578][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.482962][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.489105][ T4329] device veth0_vlan entered promiscuous mode [ 29.491858][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.494081][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.499745][ T4326] device veth0_vlan entered promiscuous mode [ 29.509326][ T4329] device veth1_vlan entered promiscuous mode [ 29.517033][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.518145][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.521316][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.522871][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.531558][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.533111][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.535508][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.537087][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.539279][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.541707][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.543076][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.544914][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.546529][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.548324][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.552691][ T4326] device veth1_vlan entered promiscuous mode [ 29.557825][ T4329] device veth0_macvtap entered promiscuous mode [ 29.570171][ T268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.571414][ T268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.574224][ T4329] device veth1_macvtap entered promiscuous mode [ 29.577246][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.578415][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.580240][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.581827][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.586682][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.588207][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.590178][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.591199][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.592552][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.595146][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.596571][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.598072][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.599393][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.600626][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.602019][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.610728][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.612391][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.614626][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.615994][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.617303][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.618708][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.620772][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.627511][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.629128][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.630449][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.632048][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.635569][ T4323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.636858][ T4323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.638149][ T4323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.639395][ T4323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.645243][ T268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.646372][ T268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.654514][ T4326] device veth0_macvtap entered promiscuous mode [ 29.655851][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.657333][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.659792][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.661407][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.662900][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.665522][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.666974][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.668373][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.670656][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.676095][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.677319][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.678890][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.680269][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.686496][ T4326] device veth1_macvtap entered promiscuous mode [ 29.697333][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.699096][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.704266][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.736898][ T268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.738233][ T268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.740084][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.740369][ T4430] loop1: detected capacity change from 0 to 1764 [ 29.797932][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.799698][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.801171][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.804813][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.806196][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.807756][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.812632][ T4438] loop3: detected capacity change from 0 to 256 [ 29.813762][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.813794][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.814623][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.831177][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.832736][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.845079][ T268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.846312][ T268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.848059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.872796][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.875440][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.878946][ T4441] loop3: detected capacity change from 0 to 736 [ 29.879435][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.885591][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.887098][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.889564][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.891775][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.893669][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.896542][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.908832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.910463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.919894][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.921141][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.922759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.937335][ T4326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.938616][ T4326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.939882][ T4326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.941163][ T4326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.961775][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.963006][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.988484][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.040984][ T27] audit: type=1326 audit(30.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4447 comm="syz.4.5" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5b9e8 code=0x0 [ 30.048233][ T268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.049420][ T268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.051148][ T268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.067073][ T268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.068347][ T268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.070491][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.118440][ T4443] mmap: syz.3.10 (4443) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.564050][ T4482] loop3: detected capacity change from 0 to 512 [ 30.567583][ T4482] ======================================================= [ 30.567583][ T4482] WARNING: The mand mount option has been deprecated and [ 30.567583][ T4482] and is ignored by this kernel. Remove the mand [ 30.567583][ T4482] option from the mount to silence this warning. [ 30.567583][ T4482] ======================================================= [ 30.694319][ T4481] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 30.695494][ T4481] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 30.698342][ T4481] vhci_hcd vhci_hcd.0: Device attached [ 30.700004][ T4482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.701788][ T4484] vhci_hcd: connection closed [ 30.707108][ T4415] vhci_hcd: stop threads [ 30.708746][ T4415] vhci_hcd: release socket [ 30.709599][ T4415] vhci_hcd: disconnect device [ 30.713972][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 30.723648][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 30.725044][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 30.725463][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 30.725866][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 30.773860][ T4490] loop1: detected capacity change from 0 to 512 [ 30.787686][ T4490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.789155][ T4490] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.802022][ T4490] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.17: Allocating blocks 41-42 which overlap fs metadata [ 30.807027][ T4490] Quota error (device loop1): write_blk: dquota write failed [ 30.808474][ T4490] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 30.809983][ T4490] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.17: Allocating blocks 41-42 which overlap fs metadata [ 30.812296][ T4490] Quota error (device loop1): write_blk: dquota write failed [ 30.815961][ T4490] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 30.817671][ T4490] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.17: Failed to acquire dquot type 1 [ 30.819677][ T4490] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 30.822542][ T4490] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.17: corrupted inode contents [ 30.826483][ T4490] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #12: comm syz.1.17: mark_inode_dirty error [ 30.828433][ T4490] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.17: corrupted inode contents [ 30.830510][ T4490] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.17: mark_inode_dirty error [ 30.836894][ T4490] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.17: corrupted inode contents [ 30.839184][ T4490] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 30.840680][ T4490] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.17: corrupted inode contents [ 30.842937][ T4490] EXT4-fs error (device loop1): ext4_truncate:4318: inode #12: comm syz.1.17: mark_inode_dirty error [ 30.845063][ T4490] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 30.846662][ T4490] EXT4-fs (loop1): 1 truncate cleaned up [ 30.847493][ T4490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.884299][ T4490] EXT4-fs (loop1): unmounting filesystem. [ 30.935843][ T4498] netlink: 'syz.0.20': attribute type 29 has an invalid length. [ 30.951595][ T27] audit: type=1326 audit(30.940:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 30.962345][ T27] audit: type=1326 audit(30.950:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 30.969564][ T27] audit: type=1326 audit(30.960:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 30.982791][ T27] audit: type=1326 audit(30.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 30.992909][ T27] audit: type=1326 audit(30.960:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 31.068121][ T4512] loop0: detected capacity change from 0 to 512 [ 31.077553][ T4514] loop4: detected capacity change from 0 to 1024 [ 31.077600][ T4512] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.080629][ T4512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.089738][ T4512] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.093758][ T4512] EXT4-fs (loop0): 1 truncate cleaned up [ 31.116227][ T4510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.118136][ T4512] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 31.128706][ T4318] EXT4-fs (loop3): unmounting filesystem. [ 31.139065][ T4514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.150172][ T4512] EXT4-fs warning (device loop0): ext4_group_extend:1870: can't shrink FS - resize aborted [ 31.161314][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 3) [ 31.169621][ T4514] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 31.171727][ T4514] EXT4-fs (loop4): This should not happen!! Data will be lost [ 31.171727][ T4514] [ 31.181777][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 1) [ 31.186259][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 31.194646][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 1) [ 31.204116][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 1) [ 31.216807][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 1) [ 31.219986][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 1) [ 31.224395][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 1) [ 31.227143][ T4514] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 1) [ 31.234776][ T4524] loop0: detected capacity change from 0 to 128 [ 31.235745][ T4513] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 1) [ 31.236020][ T4513] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: block 3: comm syz.4.28: lblock 3 mapped to illegal pblock 3 (length 1) [ 31.256573][ T4524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.428302][ T4538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'. [ 31.548274][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 31.550162][ T4544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.39'. [ 31.632605][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 31.642926][ T4550] loop0: detected capacity change from 0 to 512 [ 31.654568][ T4553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 31.658888][ T4554] device syzkaller0 entered promiscuous mode [ 31.690732][ T4550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.726276][ T4554] netlink: 44 bytes leftover after parsing attributes in process `syz.3.44'. [ 31.737010][ T4558] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 31.760542][ T4550] netlink: 32 bytes leftover after parsing attributes in process `,&#^%'. [ 31.812562][ T4558] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 31.826988][ T4559] loop2: detected capacity change from 0 to 512 [ 31.838784][ T4559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.850742][ T4559] EXT4-fs (loop2): 1 truncate cleaned up [ 31.851590][ T4559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.880125][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 31.895840][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 31.929612][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 31.931771][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 31.931771][ T9] [ 31.940729][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 31.979489][ T4567] loop4: detected capacity change from 0 to 512 [ 31.980320][ T4571] Zero length message leads to an empty skb [ 31.990412][ T4571] netlink: 'syz.2.49': attribute type 10 has an invalid length. [ 31.995892][ T4567] EXT4-fs warning (device loop4): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.999153][ T4571] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 32.001907][ T4567] EXT4-fs (loop4): mount failed [ 32.390018][ T4596] infiniband syz0: set active [ 32.391482][ T4596] infiniband syz0: added bond_slave_0 [ 32.417720][ T4596] RDS/IB: syz0: added [ 32.418532][ T4596] smc: adding ib device syz0 with port count 1 [ 32.418886][ T4606] loop4: detected capacity change from 0 to 2048 [ 32.419549][ T4596] smc: ib device syz0 port 1 has pnetid [ 32.465480][ T4606] EXT4-fs (loop4): failed to initialize system zone (-117) [ 32.466607][ T4606] EXT4-fs (loop4): mount failed [ 32.507139][ T4532] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 32.685971][ T4624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.72'. [ 32.732652][ T4632] loop4: detected capacity change from 0 to 1024 [ 32.755440][ T4632] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.781333][ T4632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 32.793428][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 32.794488][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 32.795455][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 32.796377][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 32.797286][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 32.817009][ T4642] openvswitch: netlink: Missing key (keys=40, expected=80) [ 32.818794][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 32.838649][ T4642] loop2: detected capacity change from 0 to 1024 [ 32.840242][ T4642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.847619][ T4642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 32.879532][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 32.916362][ T4652] loop4: detected capacity change from 0 to 512 [ 32.926471][ T4652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.938342][ T4652] EXT4-fs (loop4): 1 truncate cleaned up [ 32.939289][ T4652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 32.982016][ T4663] netlink: 'syz.0.89': attribute type 21 has an invalid length. [ 32.983667][ T4663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.89'. [ 32.984865][ T4663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.89'. [ 32.991639][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 33.050818][ T4670] loop2: detected capacity change from 0 to 512 [ 33.125634][ T4670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.149075][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 34.006322][ T4694] loop0: detected capacity change from 0 to 1024 [ 34.047022][ T4697] netlink: 256 bytes leftover after parsing attributes in process `syz.2.101'. [ 34.049159][ T4694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.052973][ T4694] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.0.100: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 34.061102][ T4694] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1812: Corrupt filesystem [ 34.157108][ T4323] EXT4-fs (loop0): unmounting filesystem. [ 34.367100][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.369223][ T4726] bond0: (slave dummy0): Releasing backup interface [ 34.404526][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.405842][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.407600][ T4726] device bridge_slave_0 left promiscuous mode [ 34.408888][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.417175][ T4729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.419437][ T4729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.437825][ T4726] device bridge_slave_1 left promiscuous mode [ 34.439263][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.469768][ T4726] bond0: (slave bond_slave_0): Releasing backup interface [ 34.518974][ T4726] bond0: (slave bond_slave_1): Releasing backup interface [ 34.571810][ T4726] team0: Port device team_slave_0 removed [ 34.577201][ T4726] team0: Port device team_slave_1 removed [ 34.579273][ T4726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.580572][ T4726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.582689][ T4726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.586763][ T4726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.597680][ T4742] device gre0 entered promiscuous mode [ 34.735230][ T4510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.778622][ T4753] syz.0.125 uses obsolete (PF_INET,SOCK_PACKET) [ 34.780131][ T4753] device syzkaller1 entered promiscuous mode [ 34.788813][ T4753] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2 [ 34.790277][ T4753] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file1 [ 34.873507][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 34.874281][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 34.874474][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 34.875429][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 34.876234][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 34.968331][ T4758] device bridge0 entered promiscuous mode [ 34.969696][ T4758] device macsec1 entered promiscuous mode [ 35.086310][ T4510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.089132][ T4768] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 35.184433][ T4510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.341038][ T4510] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.349561][ T4510] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.354793][ T4510] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.358621][ T4510] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.470689][ T4800] bridge0: port 3(batadv1) entered blocking state [ 35.472190][ T4800] bridge0: port 3(batadv1) entered disabled state [ 35.482282][ T4800] device batadv1 entered promiscuous mode [ 35.519583][ T4807] loop4: detected capacity change from 0 to 512 [ 35.568097][ T4803] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 35.596145][ T4807] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.986090][ T268] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 35.987501][ T268] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 36.037579][ T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 36.040601][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 36.042461][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.042461][ T9] [ 36.053441][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 36.054546][ T9] EXT4-fs (loop4): Free/Dirty block details [ 36.055463][ T9] EXT4-fs (loop4): free_blocks=65280 [ 36.056522][ T9] EXT4-fs (loop4): dirty_blocks=31 [ 36.057563][ T9] EXT4-fs (loop4): Block reservation details [ 36.058701][ T9] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 36.062377][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 36.231188][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 36.231197][ T27] audit: type=1326 audit(36.220:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 36.239363][ T27] audit: type=1326 audit(36.220:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 36.271726][ T27] audit: type=1326 audit(36.220:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 36.573439][ T27] audit: type=1326 audit(36.220:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=54 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 36.577401][ T27] audit: type=1326 audit(36.220:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4839 comm="syz.4.160" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b5b9e8 code=0x7ffc0000 [ 36.662113][ T27] audit: type=1326 audit(36.650:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4852 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5b9e8 code=0x7ffc0000 [ 36.665930][ T27] audit: type=1326 audit(36.650:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4852 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5b9e8 code=0x7ffc0000 [ 36.669233][ T27] audit: type=1326 audit(36.650:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4852 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5b9e8 code=0x7ffc0000 [ 36.679182][ T27] audit: type=1326 audit(36.660:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4852 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5b9e8 code=0x7ffc0000 [ 36.682222][ T27] audit: type=1326 audit(36.660:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4852 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5b9e8 code=0x7ffc0000 [ 36.689521][ T4849] loop1: detected capacity change from 0 to 8192 [ 36.692132][ T4849] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.722017][ T4859] loop3: detected capacity change from 0 to 512 [ 36.785365][ T4859] [ 36.785740][ T4859] ====================================================== [ 36.786749][ T4859] WARNING: possible circular locking dependency detected [ 36.787728][ T4859] syzkaller #0 Not tainted [ 36.788328][ T4859] ------------------------------------------------------ [ 36.789243][ T4859] syz.3.165/4859 is trying to acquire lock: [ 36.790015][ T4859] ffff0000f80e2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x188/0x284c [ 36.791400][ T4859] [ 36.791400][ T4859] but task is already holding lock: [ 36.792464][ T4859] ffff0000f80e0650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 36.793727][ T4859] [ 36.793727][ T4859] which lock already depends on the new lock. [ 36.793727][ T4859] [ 36.795096][ T4859] [ 36.795096][ T4859] the existing dependency chain (in reverse order) is: [ 36.796356][ T4859] [ 36.796356][ T4859] -> #1 (sb_internal){.+.+}-{0:0}: [ 36.797366][ T4859] percpu_down_read+0x70/0x2a8 [ 36.798085][ T4859] ext4_evict_inode+0x3dc/0x1270 [ 36.798890][ T4859] evict+0x3c8/0x810 [ 36.799551][ T4859] iput+0x764/0x7f4 [ 36.800135][ T4859] ext4_ext_migrate+0x9dc/0xbfc [ 36.800861][ T4859] ext4_ioctl+0x1a38/0x4198 [ 36.801590][ T4859] __arm64_sys_ioctl+0x14c/0x1c8 [ 36.802348][ T4859] invoke_syscall+0x98/0x2bc [ 36.803009][ T4859] el0_svc_common+0x138/0x258 [ 36.803714][ T4859] do_el0_svc+0x58/0x13c [ 36.804325][ T4859] el0_svc+0x58/0x138 [ 36.804903][ T4859] el0t_64_sync_handler+0x84/0xf0 [ 36.805676][ T4859] el0t_64_sync+0x18c/0x190 [ 36.806355][ T4859] [ 36.806355][ T4859] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 36.807527][ T4859] __lock_acquire+0x293c/0x6544 [ 36.808282][ T4859] lock_acquire+0x20c/0x644 [ 36.809082][ T4859] percpu_down_read+0x70/0x2a8 [ 36.809845][ T4859] ext4_writepages+0x188/0x284c [ 36.810617][ T4859] do_writepages+0x2c0/0x4fc [ 36.811308][ T4859] __writeback_single_inode+0x164/0x157c [ 36.812152][ T4859] writeback_single_inode+0x1c0/0x720 [ 36.812984][ T4859] write_inode_now+0x144/0x1b0 [ 36.813743][ T4859] iput+0x5cc/0x7f4 [ 36.814344][ T4859] ext4_xattr_block_set+0x17a4/0x2810 [ 36.815176][ T4859] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 36.816062][ T4859] __ext4_expand_extra_isize+0x298/0x358 [ 36.816870][ T4859] __ext4_mark_inode_dirty+0x3e4/0x790 [ 36.817689][ T4859] ext4_evict_inode+0xb58/0x1270 [ 36.818470][ T4859] evict+0x3c8/0x810 [ 36.819072][ T4859] iput+0x764/0x7f4 [ 36.819713][ T4859] ext4_process_orphan+0x240/0x2b4 [ 36.820523][ T4859] ext4_orphan_cleanup+0x908/0x104c [ 36.821307][ T4859] ext4_fill_super+0x6440/0x68a8 [ 36.822075][ T4859] get_tree_bdev+0x358/0x544 [ 36.822782][ T4859] ext4_get_tree+0x28/0x38 [ 36.823516][ T4859] vfs_get_tree+0x90/0x274 [ 36.824200][ T4859] do_new_mount+0x228/0x810 [ 36.824930][ T4859] path_mount+0x5b4/0xe78 [ 36.825601][ T4859] __arm64_sys_mount+0x49c/0x584 [ 36.826350][ T4859] invoke_syscall+0x98/0x2bc [ 36.827043][ T4859] el0_svc_common+0x138/0x258 [ 36.827776][ T4859] do_el0_svc+0x58/0x13c [ 36.828487][ T4859] el0_svc+0x58/0x138 [ 36.829182][ T4859] el0t_64_sync_handler+0x84/0xf0 [ 36.829908][ T4859] el0t_64_sync+0x18c/0x190 [ 36.830593][ T4859] [ 36.830593][ T4859] other info that might help us debug this: [ 36.830593][ T4859] [ 36.832015][ T4859] Possible unsafe locking scenario: [ 36.832015][ T4859] [ 36.833000][ T4859] CPU0 CPU1 [ 36.833759][ T4859] ---- ---- [ 36.834475][ T4859] lock(sb_internal); [ 36.835076][ T4859] lock(&sbi->s_writepages_rwsem); [ 36.836296][ T4859] lock(sb_internal); [ 36.837262][ T4859] lock(&sbi->s_writepages_rwsem); [ 36.837978][ T4859] [ 36.837978][ T4859] *** DEADLOCK *** [ 36.837978][ T4859] [ 36.839164][ T4859] 3 locks held by syz.3.165/4859: [ 36.839890][ T4859] #0: ffff0000f80e00e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 36.841368][ T4859] #1: ffff0000f80e0650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 36.842837][ T4859] #2: ffff0000e23180c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 36.844292][ T4859] [ 36.844292][ T4859] stack backtrace: [ 36.845104][ T4859] CPU: 1 PID: 4859 Comm: syz.3.165 Not tainted syzkaller #0 [ 36.846181][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 36.847566][ T4859] Call trace: [ 36.847997][ T4859] dump_backtrace+0x1c8/0x1f4 [ 36.848662][ T4859] show_stack+0x2c/0x3c [ 36.849256][ T4859] __dump_stack+0x30/0x40 [ 36.849843][ T4859] dump_stack_lvl+0xf8/0x160 [ 36.850461][ T4859] dump_stack+0x1c/0x5c [ 36.851148][ T4859] print_circular_bug+0x148/0x1b0 [ 36.851954][ T4859] check_noncircular+0x240/0x2d4 [ 36.852713][ T4859] __lock_acquire+0x293c/0x6544 [ 36.853381][ T4859] lock_acquire+0x20c/0x644 [ 36.854024][ T4859] percpu_down_read+0x70/0x2a8 [ 36.854707][ T4859] ext4_writepages+0x188/0x284c [ 36.855373][ T4859] do_writepages+0x2c0/0x4fc [ 36.855976][ T4859] __writeback_single_inode+0x164/0x157c [ 36.856742][ T4859] writeback_single_inode+0x1c0/0x720 [ 36.857524][ T4859] write_inode_now+0x144/0x1b0 [ 36.858200][ T4859] iput+0x5cc/0x7f4 [ 36.858748][ T4859] ext4_xattr_block_set+0x17a4/0x2810 [ 36.859496][ T4859] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 36.860283][ T4859] __ext4_expand_extra_isize+0x298/0x358 [ 36.861066][ T4859] __ext4_mark_inode_dirty+0x3e4/0x790 [ 36.861864][ T4859] ext4_evict_inode+0xb58/0x1270 [ 36.862532][ T4859] evict+0x3c8/0x810 [ 36.863065][ T4859] iput+0x764/0x7f4 [ 36.863605][ T4859] ext4_process_orphan+0x240/0x2b4 [ 36.864290][ T4859] ext4_orphan_cleanup+0x908/0x104c [ 36.865003][ T4859] ext4_fill_super+0x6440/0x68a8 [ 36.865671][ T4859] get_tree_bdev+0x358/0x544 [ 36.866267][ T4859] ext4_get_tree+0x28/0x38 [ 36.866843][ T4859] vfs_get_tree+0x90/0x274 [ 36.867446][ T4859] do_new_mount+0x228/0x810 [ 36.868066][ T4859] path_mount+0x5b4/0xe78 [ 36.868683][ T4859] __arm64_sys_mount+0x49c/0x584 [ 36.869362][ T4859] invoke_syscall+0x98/0x2bc [ 36.869995][ T4859] el0_svc_common+0x138/0x258 [ 36.870715][ T4859] do_el0_svc+0x58/0x13c [ 36.871288][ T4859] el0_svc+0x58/0x138 [ 36.871877][ T4859] el0t_64_sync_handler+0x84/0xf0 [ 36.872596][ T4859] el0t_64_sync+0x18c/0x190 [ 36.897488][ T4859] ------------[ cut here ]------------ [ 36.898384][ T4859] EA inode 11 i_nlink=2 [ 36.898460][ T4859] WARNING: CPU: 0 PID: 4859 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 36.900628][ T4859] Modules linked in: [ 36.901180][ T4859] CPU: 0 PID: 4859 Comm: syz.3.165 Not tainted syzkaller #0 [ 36.902275][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 36.903618][ T4859] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 36.904647][ T4859] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 36.905490][ T4859] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 36.906308][ T4859] sp : ffff8000219d6e00 [ 36.906856][ T4859] x29: ffff8000219d6ea0 x28: 0000000000000000 x27: dfff800000000000 [ 36.907913][ T4859] x26: 1fffe0001eabc95c x25: ffff70000433adc4 x24: 0000000000000000 [ 36.908955][ T4859] x23: ffff800017a15000 x22: ffff0000f55e4928 x21: 0000000000000002 [ 36.909994][ T4859] x20: 0000000000000001 x19: ffff0000f55e48e8 x18: ffff800011a5bd40 [ 36.911161][ T4859] x17: 0000000000000000 x16: ffff800008042d90 x15: 0000000000000002 [ 36.912274][ T4859] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 36.913393][ T4859] x11: 0000000000074659 x10: ffff8000275c9000 x9 : 15905b2404b94f00 [ 36.914488][ T4859] x8 : 15905b2404b94f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 36.915760][ T4859] x5 : ffff8000219d6898 x4 : ffff800015134e00 x3 : ffff800008313428 [ 36.916942][ T4859] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 36.918043][ T4859] Call trace: [ 36.918528][ T4859] ext4_xattr_inode_update_ref+0x42c/0x470 [ 36.919343][ T4859] ext4_xattr_set_entry+0x918/0x15ac [ 36.920072][ T4859] ext4_xattr_ibody_set+0x204/0x600 [ 36.920800][ T4859] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 36.921627][ T4859] __ext4_expand_extra_isize+0x298/0x358 [ 36.922382][ T4859] __ext4_mark_inode_dirty+0x3e4/0x790 [ 36.923152][ T4859] ext4_evict_inode+0xb58/0x1270 [ 36.923898][ T4859] evict+0x3c8/0x810 [ 36.924416][ T4859] iput+0x764/0x7f4 [ 36.924948][ T4859] ext4_process_orphan+0x240/0x2b4 [ 36.925655][ T4859] ext4_orphan_cleanup+0x908/0x104c [ 36.926376][ T4859] ext4_fill_super+0x6440/0x68a8 [ 36.927030][ T4859] get_tree_bdev+0x358/0x544 [ 36.927676][ T4859] ext4_get_tree+0x28/0x38 [ 36.928261][ T4859] vfs_get_tree+0x90/0x274 [ 36.928887][ T4859] do_new_mount+0x228/0x810 [ 36.929488][ T4859] path_mount+0x5b4/0xe78 [ 36.930130][ T4859] __arm64_sys_mount+0x49c/0x584 [ 36.930858][ T4859] invoke_syscall+0x98/0x2bc [ 36.931483][ T4859] el0_svc_common+0x138/0x258 [ 36.932065][ T4859] do_el0_svc+0x58/0x13c [ 36.932642][ T4859] el0_svc+0x58/0x138 [ 36.933181][ T4859] el0t_64_sync_handler+0x84/0xf0 [ 36.933860][ T4859] el0t_64_sync+0x18c/0x190 [ 36.934471][ T4859] irq event stamp: 3477 [ 36.935032][ T4859] hardirqs last enabled at (3477): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 36.936503][ T4859] hardirqs last disabled at (3476): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 36.937929][ T4859] softirqs last enabled at (2340): [] local_bh_enable+0x10/0x34 [ 36.939135][ T4859] softirqs last disabled at (2338): [] local_bh_disable+0x10/0x34 [ 36.940483][ T4859] ---[ end trace 0000000000000000 ]--- [ 36.941271][ C0] vkms_vblank_simulate: vblank timer overrun [ 36.949152][ T4859] EXT4-fs (loop3): 1 orphan inode deleted [ 36.950133][ T4859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.498979][ T4318] EXT4-fs (loop3): unmounting filesystem.