last executing test programs: 4.105634212s ago: executing program 2 (id=143): r0 = inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) 3.905654065s ago: executing program 4 (id=146): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 3.718779619s ago: executing program 4 (id=148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) 3.537326032s ago: executing program 4 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x300, 0x0, 0x30141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 3.456352144s ago: executing program 2 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3.197721589s ago: executing program 4 (id=153): creat(&(0x7f0000000300)='./file0\x00', 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[]) 3.11554297s ago: executing program 4 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10003, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x4006) 3.078713871s ago: executing program 2 (id=155): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) setrlimit(0x7, &(0x7f00000000c0)={0x0, 0x3}) 3.033621422s ago: executing program 1 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x800003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="2100000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000400"], 0x50) 3.017553502s ago: executing program 2 (id=157): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@multicast2]}]}}}], 0x18}}], 0x2, 0x4800) 2.954059593s ago: executing program 1 (id=158): getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x2, "ec37"}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.841491646s ago: executing program 2 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$eJzs3b9qFF0cBuCTTUI+8pGQStDGg1Y2Q5LaIkESCC4omhVUECZkosuOu2Fni51gEWsbwdI7EEs7QbyB3IVdmpAqlRGd/DEBq5DdIs/TzMu8c+D8GDhTzu7d969bG0WykfZCbWEk1BZCqB2MhJlQC8e2w50Pbz++e/z02f3Fen3pUYzLi6tz8zHG6Zvfnr/5fOt77/8nX6a/ToSdmRe7e/M/dq7tXN/9ufqqWcRmEdudXkzjWqfTS9fyLK43i1YS48M8S4ssNttF1j3Tb+Sdzc0ypu31qcnNblYUMW2XsZWVsdeJvW4Z05dpsx2TJIlTk4GLaHw6ODwMe4eVYe+GwfP+r7a/DvX/Qtjf7jf6jepa9csr9aXZ+Mf46ar9fr8xetLPVX0824+HyaN+/nx//Gm5XfW/u3sP6ufWT4T1S54dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAqyuJJ2ZO7+73+43Rqk/+1VdpeaW+NHv0wNl+LNwYG9gYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAhRbnVSvM86wqCIJyEYZ9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHinP/0e9k4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpqLcaqV5nnUvMQx7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4qF8BAAD//3nQbMU=") 2.525595142s ago: executing program 2 (id=163): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x4, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_map={0x81, 0x4eb, 0x400, 0x8, 0xf, 0x3}}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sync() r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) 1.485141082s ago: executing program 1 (id=168): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f00000031c0)={0x1, 0x1, 0x8002, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7fffffff}) 1.174406508s ago: executing program 3 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) 889.697983ms ago: executing program 3 (id=178): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x3, 0x3, 0x4a, @local}, 0x10) 801.589794ms ago: executing program 3 (id=181): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x84, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x8c, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x5, 0x2, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 771.897295ms ago: executing program 3 (id=183): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r4, @ANYBLOB="000126bd7000fbdbdf25120000000800070000020000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r5, 0x0, 0x4ffe6, 0x9) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 603.519799ms ago: executing program 3 (id=185): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x300, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7800, 0xfffffffc}}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 550.519529ms ago: executing program 0 (id=186): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r1], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0xce3468f833de3c7d, 0xffffffffffffffff, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYRES32=r5], 0x38}}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000032000000320000000b000000020000000200000f020000000500000019faffff0600000004000000020000000400000070001000090500000000000000002e613061615f6100"], &(0x7f00000002c0), 0x57, 0x0, 0x0, 0x1}, 0x28) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff7, '\x00', 0x0, r3, 0x3, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x19, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x69}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x8, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xdb, &(0x7f0000000600)=""/219, 0x41000, 0x5, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000700)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000007c0)=[r4, r10], &(0x7f0000000800)=[{0x5, 0x1, 0x3, 0x4}, {0x1, 0x4, 0x5}, {0x0, 0x2, 0x2, 0xc}, {0x5, 0x3, 0x6, 0x1}, {0x4, 0x1, 0x2, 0x3}, {0x5, 0x1, 0xd, 0x3}, {0x1, 0x4, 0x5, 0x14}, {0x3, 0x2, 0xf, 0x5}, {0x1, 0x4, 0x3}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x64033, 0xffffffffffffffff, 0x0) r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}, {0x0, 0x5, 0x4}], 0x2, 0x100000c01, 0x0, 0x0, 0x0, 0x6e}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x8, r12}, 0x38) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r14, 0xfffffffffffffe08, 0x0}, 0x10) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) r15 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r15, 0x0, 0xd4, 0x0, 0x0) 492.442141ms ago: executing program 3 (id=187): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="13", 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c080}, 0x4000891) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x8}, 0x8) 435.617482ms ago: executing program 1 (id=188): read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) 426.270582ms ago: executing program 0 (id=189): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xff4495f43aaef17f) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0x20000000000002a2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000028000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xae64}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x4000000000000178}, 0x18) mlock(&(0x7f0000945000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = timerfd_create(0x7, 0x80800) timerfd_settime(r2, 0x3, 0x0, 0x0) timerfd_gettime(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) 305.653534ms ago: executing program 1 (id=190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r5) 305.389744ms ago: executing program 1 (id=191): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") mknod(0x0, 0x8001420, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_io_uring_setup(0x5739, &(0x7f0000000280)={0x0, 0x1, 0x10100, 0x0, 0x32e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 237.579936ms ago: executing program 0 (id=192): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) readahead(0xffffffffffffffff, 0x7, 0x0) 105.422528ms ago: executing program 0 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.65422ms ago: executing program 0 (id=194): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 4.40604ms ago: executing program 0 (id=195): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80}}, &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 0s ago: executing program 4 (id=196): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 48.582633][ T4172] cgroup: Unknown subsys name 'net' [ 48.697455][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.952340][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.706776][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 51.834022][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.898773][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.941568][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.958058][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.965396][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.973929][ T4192] device bridge_slave_0 entered promiscuous mode [ 51.992717][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 52.013520][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.020682][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.028949][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.081567][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.088768][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.096754][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.134111][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.141167][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.149519][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.158320][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.170007][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.177640][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.185539][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.207084][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.218642][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.226130][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.234119][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.278521][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.285819][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.294348][ T4195] device bridge_slave_0 entered promiscuous mode [ 52.303637][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.319283][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.326531][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.334683][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.347412][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.354648][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.362763][ T4195] device bridge_slave_1 entered promiscuous mode [ 52.370796][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.382222][ T4192] team0: Port device team_slave_0 added [ 52.388258][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.395464][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.403220][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.412326][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.444546][ T4192] team0: Port device team_slave_1 added [ 52.463162][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.486518][ T4182] team0: Port device team_slave_0 added [ 52.494632][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.510583][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.526297][ T4182] team0: Port device team_slave_1 added [ 52.540858][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.559470][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.570465][ T4183] team0: Port device team_slave_0 added [ 52.577425][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.584517][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.612393][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.646047][ T4183] team0: Port device team_slave_1 added [ 52.652534][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.659484][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.685651][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.697355][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.704943][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.731280][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.743939][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.750893][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.777592][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.829416][ T4184] team0: Port device team_slave_0 added [ 52.837564][ T4195] team0: Port device team_slave_0 added [ 52.853127][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.860094][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.886488][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.907719][ T4184] team0: Port device team_slave_1 added [ 52.914831][ T4195] team0: Port device team_slave_1 added [ 52.936649][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.943746][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.969933][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.983788][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.990559][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.009748][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.016868][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.042895][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.058491][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.065565][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.091564][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.130325][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.137666][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.163862][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.178095][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.185421][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.192357][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.200142][ T4192] Cannot create hsr debugfs directory [ 53.226553][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.234044][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.260169][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.305790][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.312591][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.319019][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.326878][ T4183] Cannot create hsr debugfs directory [ 53.370172][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.377194][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.384187][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.391926][ T4184] Cannot create hsr debugfs directory [ 53.432820][ T4195] device hsr_slave_0 entered promiscuous mode [ 53.439590][ T4195] device hsr_slave_1 entered promiscuous mode [ 53.446309][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.454066][ T4195] Cannot create hsr debugfs directory [ 53.492724][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 53.499750][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 53.502010][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 53.512409][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 53.522078][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 53.718265][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.729346][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.739620][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.754947][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.799624][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.810038][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.832175][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.840934][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.899610][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.917239][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.928073][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.942828][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.997304][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.009557][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.030457][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.042825][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.051060][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.059955][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.074833][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.086961][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.096428][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.131707][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.149903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.160756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.190452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.200879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.210455][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.217820][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.227206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.237039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.246263][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.253340][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.261021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.307885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.317983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.327891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.338031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.346641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.355514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.365198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.397838][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.406212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.416175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.441171][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.452666][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.464025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.473618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.486992][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.500339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.509409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.517600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.527342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.536533][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.543626][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.552021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.563026][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.572378][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.607986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.618604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.628176][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.635378][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.644348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.653301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.662027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.670646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.679221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.687995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.706499][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.720900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.729671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.744228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.758540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.767234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.776337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.784888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.793282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.801854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.810634][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.817717][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.826649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.843407][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.864496][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.871672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.880533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.888831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.896752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.929701][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.942831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.959741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.969146][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.976264][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.986557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.995700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.004491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.013526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.022454][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.029535][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.038051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.047309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.055772][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.062833][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.070450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.079543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.088895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.098287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.113992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.124526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.133077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.141318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.149962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.167705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.181107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.194913][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.213848][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.225389][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.242346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.251030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.260908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.269919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.278924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.309203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.320740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.329795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.339877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.348949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.357996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.366612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.375895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.384822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.394597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.403598][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.410649][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.418587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.427423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.436053][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.443143][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.450824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.460149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.477203][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.499741][ T4182] device veth0_vlan entered promiscuous mode [ 55.540947][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.553540][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.566364][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.574315][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 55.575030][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.580414][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 55.588779][ T4247] Bluetooth: hci3: command 0x041b tx timeout [ 55.594972][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 55.605782][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.607466][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 55.620999][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.630228][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.639261][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.647649][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.656948][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.668485][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.676886][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.685047][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.713393][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.726024][ T4182] device veth1_vlan entered promiscuous mode [ 55.740121][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.752153][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.760645][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.788958][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.802418][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.813054][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.822024][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.830536][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.840932][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.849630][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.865463][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.889662][ T4182] device veth0_macvtap entered promiscuous mode [ 55.907851][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.936958][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.955776][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.986110][ T4182] device veth1_macvtap entered promiscuous mode [ 56.017178][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.029160][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.038557][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.057855][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.092544][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.101149][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.110464][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.119361][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.128442][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.137996][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.156716][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.169582][ T4183] device veth0_vlan entered promiscuous mode [ 56.178300][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.186482][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.196522][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.204160][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.211564][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.219899][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.227584][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.236507][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.249794][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.260365][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.269794][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.280191][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.289309][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.304094][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.322336][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.330615][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.348390][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.356676][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.368753][ T4192] device veth0_vlan entered promiscuous mode [ 56.379022][ T4183] device veth1_vlan entered promiscuous mode [ 56.414893][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.426340][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.435267][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.444257][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.459459][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.468462][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.480374][ T4192] device veth1_vlan entered promiscuous mode [ 56.526111][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.536126][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.547457][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.556326][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.585706][ T4183] device veth0_macvtap entered promiscuous mode [ 56.600829][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.611017][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.620863][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.629562][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.638648][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.647588][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.656615][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.664561][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.672610][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.687107][ T4183] device veth1_macvtap entered promiscuous mode [ 56.697922][ T4195] device veth0_vlan entered promiscuous mode [ 56.712472][ T4184] device veth0_vlan entered promiscuous mode [ 56.727648][ T3057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.737150][ T3057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.747302][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.759235][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.771589][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.780737][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.789027][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.796845][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.805769][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.815403][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.824181][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.838614][ T4192] device veth0_macvtap entered promiscuous mode [ 56.865461][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.876597][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.889969][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.900638][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.909828][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.918926][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.928074][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.940862][ T4195] device veth1_vlan entered promiscuous mode [ 56.949786][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.957918][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.966606][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.975337][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.987897][ T4184] device veth1_vlan entered promiscuous mode [ 56.991936][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.002938][ T4192] device veth1_macvtap entered promiscuous mode [ 57.007418][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.064573][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.077045][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.085875][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.106698][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.126127][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.136539][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.147380][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.158718][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.176171][ T4195] device veth0_macvtap entered promiscuous mode [ 57.184354][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.193323][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.201963][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.210594][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.220940][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.231578][ T4184] device veth0_macvtap entered promiscuous mode [ 57.243954][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.258173][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.272897][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.284156][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.295362][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.307307][ T4195] device veth1_macvtap entered promiscuous mode [ 57.326928][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.336272][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.345108][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.354413][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.366007][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.380295][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.410394][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.439098][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.466835][ T4184] device veth1_macvtap entered promiscuous mode [ 57.482191][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.490186][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.539602][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.549440][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.569662][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.582751][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.590715][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.599586][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.630402][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.642141][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.651943][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 57.652078][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 57.652149][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 57.652214][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 57.652280][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 57.659317][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.670186][ T4300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 57.677344][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.714339][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.737677][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.748646][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.760948][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.771572][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.781473][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.792362][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.802515][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.813881][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.825999][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.836537][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.845413][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.854723][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.863614][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.872712][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.895210][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.913818][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.929740][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.940257][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.950373][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.961007][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.974215][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.986361][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.997245][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.007448][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.018805][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.028743][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.040457][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.050623][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.068637][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.079657][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.090153][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.099745][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.109885][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.119359][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.153140][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.155144][ T4304] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 58.166776][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.177213][ T4304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9'. [ 58.177816][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.195978][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.215086][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.233325][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.246150][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.256636][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.557245][ T416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.604114][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 58.649656][ T416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.013611][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 59.116009][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 59.125464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 59.211697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.305712][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.311600][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.354022][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.368334][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.418645][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.438407][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.471671][ T416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.489949][ T4324] netlink: 'syz.3.14': attribute type 4 has an invalid length. [ 59.501164][ T416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.562729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.574008][ T416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.631985][ T416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.673043][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.699830][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.703412][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.732243][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 59.742406][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 59.783708][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 59.829491][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 59.885443][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 59.894555][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.928309][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 60.013728][ T4333] device vlan2 entered promiscuous mode [ 60.039321][ T4333] device batadv0 entered promiscuous mode [ 60.113210][ T4335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16'. [ 60.204833][ T4339] loop0: detected capacity change from 0 to 128 [ 60.344899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 60.354302][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.400250][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 60.409850][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 60.419218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 60.429151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 61.364909][ T4355] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.379464][ T4355] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.469827][ T4362] Zero length message leads to an empty skb [ 61.509950][ T25] audit: type=1326 audit(1757963392.945:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4353 comm="syz.1.21" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff07bafbba9 code=0x0 [ 63.323097][ T4397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37'. [ 63.357585][ T4399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.38'. [ 63.420106][ T4405] sg_write: data in/out 75715714/1670 bytes for SCSI command 0x19-- guessing data in; [ 63.420106][ T4405] program syz.0.41 not setting count and/or reply_len properly [ 63.507499][ T4411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.42'. [ 63.559873][ T4412] syz.0.43[4412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.559967][ T4412] syz.0.43[4412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.663058][ T4416] loop1: detected capacity change from 0 to 1024 [ 63.766900][ T4416] ======================================================= [ 63.766900][ T4416] WARNING: The mand mount option has been deprecated and [ 63.766900][ T4416] and is ignored by this kernel. Remove the mand [ 63.766900][ T4416] option from the mount to silence this warning. [ 63.766900][ T4416] ======================================================= [ 63.816342][ T4416] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.892999][ T4416] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,nojournal_checksum,barrier=0x0000000000010002,dioread_lock,data_err=ignore,mb_optimize_scan=0x0000000000000000,dioread_nolock,nobarrier,abort,nogrpid,norecovery,errors=remount-ro,. Quota mode: none. [ 64.033130][ T25] audit: type=1800 audit(1757963395.465:3): pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.46" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 64.073941][ T4415] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.46: bg 0: block 494: padding at end of block bitmap is not set [ 64.146791][ T4415] EXT4-fs (loop1): Remounting filesystem read-only [ 64.525711][ T25] audit: type=1326 audit(1757963395.965:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a2efeba9 code=0x7ffc0000 [ 64.627851][ T25] audit: type=1326 audit(1757963395.965:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f71a2efeba9 code=0x7ffc0000 [ 64.718782][ T25] audit: type=1326 audit(1757963395.965:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a2efeba9 code=0x7ffc0000 [ 65.175012][ T25] audit: type=1326 audit(1757963396.095:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4436 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a2efeba9 code=0x7ffc0000 [ 65.412073][ T7] Bluetooth: hci0: command 0x0c20 tx timeout [ 65.648436][ T4455] loop0: detected capacity change from 0 to 2048 [ 65.746588][ T4455] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 65.892341][ T25] audit: type=1326 audit(1757963397.335:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a903ba9 code=0x7ffc0000 [ 65.993841][ T25] audit: type=1326 audit(1757963397.355:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fce3a903ba9 code=0x7ffc0000 [ 65.997160][ T4473] netlink: 96 bytes leftover after parsing attributes in process `syz.3.63'. [ 66.128935][ T25] audit: type=1326 audit(1757963397.355:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a903ba9 code=0x7ffc0000 [ 66.182228][ T4477] loop4: detected capacity change from 0 to 764 [ 66.242889][ T25] audit: type=1326 audit(1757963397.355:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4465 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a903ba9 code=0x7ffc0000 [ 66.300631][ T4477] rock: directory entry would overflow storage [ 66.347540][ T4477] rock: sig=0x5245, size=8, remaining=5 [ 66.556971][ T4483] loop2: detected capacity change from 0 to 1024 [ 66.563741][ T25] kauditd_printk_skb: 20 callbacks suppressed [ 66.563754][ T25] audit: type=1326 audit(1757963398.005:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 66.654042][ T25] audit: type=1326 audit(1757963398.005:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4479 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 66.793271][ T4483] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.832363][ T4483] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.68: Allocating blocks 385-513 which overlap fs metadata [ 66.843111][ T4498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.71'. [ 66.972937][ T4483] EXT4-fs (loop2): pa ffff888072c712a0: logic 16, phys. 129, len 24 [ 66.981347][ T4483] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 67.152982][ T25] audit: type=1326 audit(1757963398.595:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 67.215744][ T25] audit: type=1326 audit(1757963398.625:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 67.262656][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 67.271625][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 67.279516][ T25] audit: type=1326 audit(1757963398.695:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 67.392108][ T4514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 67.435532][ T4516] loop3: detected capacity change from 0 to 512 [ 67.460427][ T25] audit: type=1326 audit(1757963398.695:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 67.571927][ T25] audit: type=1326 audit(1757963398.755:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 67.594909][ T25] audit: type=1326 audit(1757963398.755:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 67.617607][ T25] audit: type=1326 audit(1757963398.755:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4506 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 67.686770][ T4516] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.739723][ T4516] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.78: bad orphan inode 13 [ 67.864223][ T4530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.82'. [ 67.866776][ T4516] ext4_test_bit(bit=12, block=18) = 1 [ 67.980570][ T4516] is_bad_inode(inode)=0 [ 68.083649][ T4516] NEXT_ORPHAN(inode)=2130706432 [ 68.170181][ T4516] max_ino=32 [ 68.229037][ T4516] i_nlink=1 [ 68.303411][ T4516] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.543718][ T4535] loop0: detected capacity change from 0 to 512 [ 68.764950][ T4537] loop1: detected capacity change from 0 to 4096 [ 68.776273][ T25] audit: type=1326 audit(1757963400.215:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4539 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3a903ba9 code=0x7ffc0000 [ 68.816418][ T4537] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 68.921641][ T4535] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.953916][ T4537] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 69.002136][ T4535] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.142948][ T4551] loop4: detected capacity change from 0 to 2048 [ 69.179787][ T4534] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.84: bg 0: block 328: padding at end of block bitmap is not set [ 69.760752][ T4551] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.226471][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 70.353846][ T4572] loop2: detected capacity change from 0 to 256 [ 70.401959][ T4578] syz.3.100[4578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.402080][ T4578] syz.3.100[4578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.550874][ T4584] TCP: TCP_TX_DELAY enabled [ 70.736709][ T4594] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 70.743589][ T4594] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.784310][ T4594] vhci_hcd vhci_hcd.0: Device attached [ 70.843562][ T4595] vhci_hcd: connection closed [ 70.845037][ T154] vhci_hcd: stop threads [ 70.901477][ T154] vhci_hcd: release socket [ 70.912695][ T154] vhci_hcd: disconnect device [ 71.117384][ T4624] loop0: detected capacity change from 0 to 512 [ 71.150315][ T4624] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.183729][ T4624] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.219036][ T4619] loop4: detected capacity change from 0 to 8192 [ 71.265655][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.272333][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.327298][ T4624] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.118: invalid indirect mapped block 4294967295 (level 0) [ 71.330725][ T4630] loop2: detected capacity change from 0 to 1024 [ 71.379145][ T4624] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.118: invalid indirect mapped block 4294967295 (level 1) [ 71.452517][ T4630] EXT4-fs (loop2): Unrecognized mount option "subj_user=/})--*]'" or missing value [ 71.478287][ T4624] EXT4-fs (loop0): 1 orphan inode deleted [ 71.581583][ T4624] EXT4-fs (loop0): 1 truncate cleaned up [ 71.620132][ T4624] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.782426][ T25] kauditd_printk_skb: 16 callbacks suppressed [ 71.782438][ T25] audit: type=1326 audit(1757963403.225:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb497a41ba9 code=0x7ffc0000 [ 71.859267][ T4643] loop4: detected capacity change from 0 to 1024 [ 71.889176][ T25] audit: type=1326 audit(1757963403.255:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb497a41ba9 code=0x7ffc0000 [ 72.003162][ T25] audit: type=1326 audit(1757963403.255:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb497a41ba9 code=0x7ffc0000 [ 72.005666][ T4643] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.097579][ T25] audit: type=1326 audit(1757963403.255:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fb497a41ba9 code=0x7ffc0000 [ 72.162073][ T4651] device wireguard0 entered promiscuous mode [ 72.176298][ T4643] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,nojournal_checksum,barrier=0x0000000000010002,dioread_lock,data_err=ignore,mb_optimize_scan=0x0000000000000000,dioread_nolock,nobarrier,abort,nogrpid,norecovery,errors=remount-ro,. Quota mode: none. [ 72.281811][ T25] audit: type=1326 audit(1757965981.269:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb497a41ba9 code=0x7ffc0000 [ 72.318868][ T4641] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.127: bg 0: block 494: padding at end of block bitmap is not set [ 72.376729][ T4641] EXT4-fs (loop4): Remounting filesystem read-only [ 72.395200][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 72.465210][ T25] audit: type=1800 audit(1757965981.759:63): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.127" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 72.501490][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 72.668235][ T4671] loop3: detected capacity change from 0 to 512 [ 72.727870][ T4674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 72.769733][ T4674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.140'. [ 73.110216][ T4671] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.187164][ T4671] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.138: bad orphan inode 13 [ 73.264655][ T4671] ext4_test_bit(bit=12, block=18) = 1 [ 73.270136][ T4671] is_bad_inode(inode)=0 [ 73.281795][ T4671] NEXT_ORPHAN(inode)=2130706432 [ 73.286758][ T4671] max_ino=32 [ 73.289953][ T4671] i_nlink=1 [ 73.322159][ T4671] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.356174][ T4671] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 73.397477][ T25] audit: type=1326 audit(1757965982.839:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb497a41ba9 code=0x7ffc0000 [ 73.439106][ T4682] loop2: detected capacity change from 0 to 512 [ 73.485706][ T4671] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.138: bg 0: block 248: padding at end of block bitmap is not set [ 73.511916][ T25] audit: type=1326 audit(1757965982.869:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb497a41ba9 code=0x7ffc0000 [ 73.538584][ T25] audit: type=1326 audit(1757965982.869:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4681 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb497a41ba9 code=0x7ffc0000 [ 73.561519][ T4671] Quota error (device loop3): write_blk: dquota write failed [ 73.576895][ T4671] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.138: Failed to acquire dquot type 1 [ 73.658034][ T4671] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.781247][ T4682] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 73.862879][ T4682] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.865087][ T4671] syz.3.138 (4671) used greatest stack depth: 20904 bytes left [ 73.903961][ T4682] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.143: iget: bad i_size value: 2533274857506816 [ 73.969904][ T4699] device ipvlan2 entered promiscuous mode [ 73.986246][ T4699] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 74.212713][ T4706] netlink: 14 bytes leftover after parsing attributes in process `syz.3.149'. [ 74.280996][ T4708] syzkaller0: refused to change device tx_queue_len [ 74.334918][ T4706] loop3: detected capacity change from 0 to 2048 [ 74.532497][ T4706] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #2: comm syz.3.149: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 74.585812][ T4706] EXT4-fs (loop3): get root inode failed [ 74.593317][ T4706] EXT4-fs (loop3): mount failed [ 74.729092][ T4728] loop2: detected capacity change from 0 to 512 [ 76.199559][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 76.221034][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 76.250335][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 76.337224][ T4761] netlink: 60 bytes leftover after parsing attributes in process `syz.3.172'. [ 76.374336][ T1108] cfg80211: failed to load regulatory.db [ 76.434858][ T4761] netlink: 60 bytes leftover after parsing attributes in process `syz.3.172'. [ 76.508903][ T4761] netlink: 60 bytes leftover after parsing attributes in process `syz.3.172'. [ 76.825171][ T25] kauditd_printk_skb: 63 callbacks suppressed [ 76.825189][ T25] audit: type=1326 audit(1757965986.269:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a2efeba9 code=0x7ffc0000 [ 76.863970][ T25] audit: type=1326 audit(1757965986.269:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4783 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71a2efeba9 code=0x7ffc0000 [ 76.964387][ T4794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'. [ 77.092641][ T4799] loop0: detected capacity change from 0 to 2048 [ 77.188606][ T4799] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.206782][ T4807] loop1: detected capacity change from 0 to 512 [ 77.308205][ T25] audit: type=1326 audit(1757965986.749:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 77.321272][ T4807] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.386197][ T25] audit: type=1326 audit(1757965986.779:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 77.442866][ T4807] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.470386][ T25] audit: type=1326 audit(1757965986.779:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 77.497509][ T25] audit: type=1326 audit(1757965986.779:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 77.509226][ T4807] [ 77.520807][ T25] audit: type=1326 audit(1757965986.779:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 77.521983][ T4807] ====================================================== [ 77.521989][ T4807] WARNING: possible circular locking dependency detected [ 77.522008][ T4807] syzkaller #0 Not tainted [ 77.522016][ T4807] ------------------------------------------------------ [ 77.522022][ T4807] syz.1.191/4807 is trying to acquire lock: [ 77.522029][ T4807] ffff888072c86428 ( [ 77.544351][ T25] audit: type=1326 audit(1757965986.779:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 77.551146][ T4807] &dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 77.551197][ T4807] [ 77.551197][ T4807] but task is already holding lock: [ 77.551201][ T4807] ffff88805f926628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 77.551235][ T4807] [ 77.551235][ T4807] which lock already depends on the new lock. [ 77.551235][ T4807] [ 77.551239][ T4807] [ 77.551239][ T4807] the existing dependency chain (in reverse order) is: [ 77.551243][ T4807] [ 77.551243][ T4807] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 77.551266][ T4807] down_read+0x44/0x2e0 [ 77.551282][ T4807] ext4_map_blocks+0x32f/0x1b30 [ 77.551293][ T4807] ext4_getblk+0x16d/0x630 [ 77.551304][ T4807] ext4_bread+0x26/0x180 [ 77.551315][ T4807] ext4_quota_write+0x230/0x570 [ 77.551330][ T4807] get_free_dqblk+0x387/0x7d0 [ 77.551344][ T4807] do_insert_tree+0x214/0x1970 [ 77.551359][ T4807] do_insert_tree+0x5b1/0x1970 [ 77.551374][ T4807] do_insert_tree+0x5b1/0x1970 [ 77.551389][ T4807] do_insert_tree+0x5b1/0x1970 [ 77.551404][ T4807] qtree_write_dquot+0x361/0x4b0 [ 77.551419][ T4807] v2_write_dquot+0x108/0x190 [ 77.551440][ T4807] dquot_acquire+0x2d5/0x520 [ 77.551454][ T4807] ext4_acquire_dquot+0x2d9/0x4a0 [ 77.551469][ T4807] dqget+0x778/0xeb0 [ 77.551482][ T4807] __dquot_initialize+0x328/0xcb0 [ 77.551497][ T4807] add_dquot_ref+0x2b4/0x380 [ 77.551511][ T4807] dquot_load_quota_sb+0x875/0xac0 [ 77.551526][ T4807] dquot_load_quota_inode+0x2d8/0x5d0 [ 77.551540][ T4807] ext4_enable_quotas+0x4ab/0xb50 [ 77.551553][ T4807] ext4_remount+0x1a10/0x2690 [ 77.551567][ T4807] reconfigure_super+0x219/0x880 [ 77.551583][ T4807] vfs_fsconfig_locked+0x18d/0x3f0 [ 77.551599][ T4807] __se_sys_fsconfig+0x61b/0x750 [ 77.551614][ T4807] do_syscall_64+0x4c/0xa0 [ 77.551628][ T4807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.551643][ T4807] [ 77.551643][ T4807] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 77.799156][ T4807] down_read+0x44/0x2e0 [ 77.803820][ T4807] v2_read_dquot+0x4a/0x110 [ 77.808827][ T4807] dquot_acquire+0x152/0x520 [ 77.813914][ T4807] ext4_acquire_dquot+0x2d9/0x4a0 [ 77.819435][ T4807] dqget+0x778/0xeb0 [ 77.823833][ T4807] __dquot_initialize+0x3b6/0xcb0 [ 77.829353][ T4807] ext4_mkdir+0x16c/0xc50 [ 77.834178][ T4807] vfs_mkdir+0x387/0x570 [ 77.838921][ T4807] do_mkdirat+0x1d7/0x5a0 [ 77.843747][ T4807] __x64_sys_mkdirat+0x85/0x90 [ 77.849009][ T4807] do_syscall_64+0x4c/0xa0 [ 77.853923][ T4807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.860400][ T4807] [ 77.860400][ T4807] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 77.868020][ T4807] __lock_acquire+0x2c33/0x7c60 [ 77.873371][ T4807] lock_acquire+0x197/0x3f0 [ 77.878372][ T4807] __mutex_lock_common+0x1eb/0x2390 [ 77.884066][ T4807] mutex_lock_nested+0x17/0x20 [ 77.889329][ T4807] dquot_commit+0x5a/0x410 [ 77.894242][ T4807] ext4_write_dquot+0x1f0/0x360 [ 77.899861][ T4807] mark_all_dquot_dirty+0xf9/0x400 [ 77.905489][ T4807] __dquot_alloc_space+0x5d0/0xe20 [ 77.911120][ T4807] ext4_mb_new_blocks+0xf68/0x4940 [ 77.916737][ T4807] ext4_ext_map_blocks+0x146f/0x64e0 [ 77.922531][ T4807] ext4_map_blocks+0x981/0x1b30 [ 77.927881][ T4807] ext4_getblk+0x16d/0x630 [ 77.932794][ T4807] ext4_bread+0x26/0x180 [ 77.937981][ T4807] ext4_append+0x2c3/0x560 [ 77.942912][ T4807] ext4_add_entry+0xa34/0xf70 [ 77.948096][ T4807] ext4_mkdir+0x4da/0xc50 [ 77.952953][ T4807] vfs_mkdir+0x387/0x570 [ 77.957696][ T4807] do_mkdirat+0x1d7/0x5a0 [ 77.962613][ T4807] __x64_sys_mkdir+0x6a/0x80 [ 77.967950][ T4807] do_syscall_64+0x4c/0xa0 [ 77.972900][ T4807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.979300][ T4807] [ 77.979300][ T4807] other info that might help us debug this: [ 77.979300][ T4807] [ 77.989506][ T4807] Chain exists of: [ 77.989506][ T4807] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 77.989506][ T4807] [ 78.003130][ T4807] Possible unsafe locking scenario: [ 78.003130][ T4807] [ 78.010559][ T4807] CPU0 CPU1 [ 78.015899][ T4807] ---- ---- [ 78.021252][ T4807] lock(&ei->i_data_sem/2); [ 78.025821][ T4807] lock(&s->s_dquot.dqio_sem); [ 78.033167][ T4807] lock(&ei->i_data_sem/2); [ 78.040254][ T4807] lock(&dquot->dq_lock); [ 78.044646][ T4807] [ 78.044646][ T4807] *** DEADLOCK *** [ 78.044646][ T4807] [ 78.052762][ T4807] 4 locks held by syz.1.191/4807: [ 78.057763][ T4807] #0: ffff88807a7fc460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 78.066878][ T4807] #1: ffff88805f9267a0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 78.077466][ T4807] #2: ffff88805f926628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 78.087359][ T4807] #3: ffffffff8c23ee98 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 78.096392][ T4807] [ 78.096392][ T4807] stack backtrace: [ 78.102280][ T4807] CPU: 0 PID: 4807 Comm: syz.1.191 Not tainted syzkaller #0 [ 78.109552][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.119599][ T4807] Call Trace: [ 78.122861][ T4807] [ 78.125805][ T4807] dump_stack_lvl+0x168/0x230 [ 78.130484][ T4807] ? load_image+0x3b0/0x3b0 [ 78.134983][ T4807] ? show_regs_print_info+0x20/0x20 [ 78.140174][ T4807] ? print_circular_bug+0x12b/0x1a0 [ 78.145353][ T4807] check_noncircular+0x274/0x310 [ 78.150280][ T4807] ? add_chain_block+0x940/0x940 [ 78.155199][ T4807] ? lockdep_lock+0xdc/0x1e0 [ 78.159784][ T4807] ? lockdep_unlock+0x134/0x2d0 [ 78.164632][ T4807] ? mark_lock+0x94/0x320 [ 78.168945][ T4807] __lock_acquire+0x2c33/0x7c60 [ 78.173780][ T4807] ? hlock_conflict+0x59/0x1f0 [ 78.178529][ T4807] ? check_noncircular+0x16f/0x310 [ 78.183620][ T4807] ? add_chain_block+0x940/0x940 [ 78.188542][ T4807] ? lockdep_lock+0xdc/0x1e0 [ 78.193115][ T4807] ? verify_lock_unused+0x140/0x140 [ 78.198292][ T4807] ? lockdep_unlock+0x134/0x2d0 [ 78.203124][ T4807] ? lockdep_lock+0x1e0/0x1e0 [ 78.207779][ T4807] ? check_noncircular+0x16f/0x310 [ 78.212869][ T4807] ? mark_lock+0x94/0x320 [ 78.217181][ T4807] ? __lock_acquire+0x289d/0x7c60 [ 78.222190][ T4807] lock_acquire+0x197/0x3f0 [ 78.226676][ T4807] ? dquot_commit+0x5a/0x410 [ 78.231253][ T4807] ? __might_sleep+0xf0/0xf0 [ 78.235830][ T4807] ? read_lock_is_recursive+0x10/0x10 [ 78.241185][ T4807] ? __lock_acquire+0x289d/0x7c60 [ 78.246187][ T4807] ? dquot_commit+0x5a/0x410 [ 78.250756][ T4807] __mutex_lock_common+0x1eb/0x2390 [ 78.255957][ T4807] ? dquot_commit+0x5a/0x410 [ 78.260531][ T4807] ? __might_sleep+0xf0/0xf0 [ 78.265100][ T4807] ? mutex_lock_io_nested+0x60/0x60 [ 78.270287][ T4807] mutex_lock_nested+0x17/0x20 [ 78.275029][ T4807] dquot_commit+0x5a/0x410 [ 78.279423][ T4807] ? __ext4_journal_start_sb+0x1bd/0x360 [ 78.285038][ T4807] ext4_write_dquot+0x1f0/0x360 [ 78.289872][ T4807] mark_all_dquot_dirty+0xf9/0x400 [ 78.294961][ T4807] __dquot_alloc_space+0x5d0/0xe20 [ 78.300056][ T4807] ext4_mb_new_blocks+0xf68/0x4940 [ 78.305149][ T4807] ? _raw_write_unlock+0x24/0x40 [ 78.310071][ T4807] ? memcpy+0x3c/0x60 [ 78.314032][ T4807] ? ext4_mb_pa_callback+0xd0/0xd0 [ 78.319123][ T4807] ? ext4_ext_check_overlap+0x401/0x560 [ 78.324647][ T4807] ? ext4_ext_find_goal+0xed/0x1d0 [ 78.329745][ T4807] ext4_ext_map_blocks+0x146f/0x64e0 [ 78.335020][ T4807] ? ext4_ext_release+0x10/0x10 [ 78.339851][ T4807] ? rwsem_write_trylock+0x12f/0x1b0 [ 78.345127][ T4807] ? ext4_es_lookup_extent+0x408/0xa10 [ 78.350567][ T4807] ext4_map_blocks+0x981/0x1b30 [ 78.355397][ T4807] ? ext4_map_blocks+0x55d/0x1b30 [ 78.360400][ T4807] ? ext4_issue_zeroout+0x250/0x250 [ 78.365577][ T4807] ? ext4_map_blocks+0x6a2/0x1b30 [ 78.370584][ T4807] ext4_getblk+0x16d/0x630 [ 78.374987][ T4807] ? ext4_get_block_unwritten+0x30/0x30 [ 78.380519][ T4807] ext4_bread+0x26/0x180 [ 78.384738][ T4807] ext4_append+0x2c3/0x560 [ 78.389133][ T4807] ? ext4_init_new_dir+0x940/0x940 [ 78.394226][ T4807] ? memset+0x1e/0x40 [ 78.398185][ T4807] ? ext4_fname_setup_ci_filename+0x66/0x490 [ 78.404147][ T4807] ext4_add_entry+0xa34/0xf70 [ 78.408812][ T4807] ? ext4_inc_count+0x1b0/0x1b0 [ 78.413645][ T4807] ext4_mkdir+0x4da/0xc50 [ 78.417955][ T4807] ? ext4_symlink+0xcc0/0xcc0 [ 78.422607][ T4807] ? inode_permission+0xef/0x480 [ 78.427519][ T4807] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 78.432520][ T4807] ? security_inode_mkdir+0xb3/0x100 [ 78.437786][ T4807] vfs_mkdir+0x387/0x570 [ 78.442011][ T4807] do_mkdirat+0x1d7/0x5a0 [ 78.446316][ T4807] ? vfs_mkdir+0x570/0x570 [ 78.450714][ T4807] ? getname_flags+0x1fe/0x500 [ 78.455455][ T4807] __x64_sys_mkdir+0x6a/0x80 [ 78.460023][ T4807] do_syscall_64+0x4c/0xa0 [ 78.464417][ T4807] ? clear_bhb_loop+0x30/0x80 [ 78.469078][ T4807] ? clear_bhb_loop+0x30/0x80 [ 78.473734][ T4807] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.479615][ T4807] RIP: 0033:0x7ff07bafbba9 [ 78.484011][ T4807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.503598][ T4807] RSP: 002b:00007ff079d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 78.511994][ T4807] RAX: ffffffffffffffda RBX: 00007ff07bd42fa0 RCX: 00007ff07bafbba9 [ 78.519945][ T4807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 78.527920][ T4807] RBP: 00007ff07bb7ee19 R08: 0000000000000000 R09: 0000000000000000 [ 78.535875][ T4807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.543822][ T4807] R13: 00007ff07bd43038 R14: 00007ff07bd42fa0 R15: 00007ffc740833a8 [ 78.551777][ T4807] [ 78.562822][ T25] audit: type=1326 audit(1757965986.789:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 78.616513][ T4822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.195'. [ 78.636082][ T4822] netem: change failed [ 78.649320][ T25] audit: type=1326 audit(1757965986.789:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6aaef8eba9 code=0x7ffc0000 [ 78.677849][ T4807] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.191: corrupted inode contents [ 78.692940][ T4807] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #2: comm syz.1.191: mark_inode_dirty error [ 78.705253][ T4807] EXT4-fs error (device loop1): ext4_do_update_inode:5204: inode #2: comm syz.1.191: corrupted inode contents [ 78.718047][ T4807] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.191: mark_inode_dirty error