last executing test programs: 2.317820896s ago: executing program 2 (id=10): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x64010580, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.104979388s ago: executing program 2 (id=11): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x8205, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x7}}, {@errors_remount}, {@lazytime}, {@data_err_ignore}, {@grpid}, {@block_validity}, {@orlov}]}, 0x1, 0x60a, &(0x7f0000000b00)="$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") 1.707028197s ago: executing program 1 (id=2): timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_newrule={0x1c, 0x20, 0x200, 0x70bd26, 0x25dfdbfe, {0xa, 0x10, 0x20, 0x3, 0xf, 0x0, 0x0, 0x3, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x801) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0)={0x28, 0xa, 0x6a, 0xb3, 0xa, 0x5, 0x0, 0x8, 0x6, 0x6, 0x3, 0x4, 0x7f, 0x10}, 0xe) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) ptrace$getsig(0x4202, r4, 0xfffffffffffffff8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f0000000040), 0x0, 0x0) 1.590312283s ago: executing program 2 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000001000000a380000001a0a05000000000000000000020001000c00054000000000000000020900010073797a30"], 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 1.348851981s ago: executing program 2 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) 1.188192922s ago: executing program 2 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x4000080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000) sendmsg$NFC_CMD_SE_IO(r1, 0x0, 0x20008000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0xc880) syz_genetlink_get_family_id$netlbl_calipso(0x0, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x3}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000700)={@mcast1, 0x8000000, 0x1, 0x2, 0x8, 0x0, 0x2}, 0x20) 855.545373ms ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000940)={[{@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x6b82}}, {@barrier}, {@quota}, {@noquota}, {@quota}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x52b, &(0x7f0000000240)="$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") quotactl$Q_QUOTAON(0x0, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 556.677351ms ago: executing program 1 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 185.147328ms ago: executing program 4 (id=16): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket(0x2b, 0x1, 0x0) listen(r6, 0x0) ppoll(&(0x7f0000000280)=[{r6, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3f, 0x2, 0x0, 0x0, "ce6012e198d4a275f30c7a76ced776bcb73cf581648acaac9095323d45aaeab306611856f61d95a65039b79566cc2195c364a614b8e4c12138a77d4bd62ca783"}}, 0x80}, 0x1, 0x0, 0x0, 0x48485}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x35}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010028bd7000fbdbdf254f000000080003", @ANYRES32=r7, @ANYBLOB='@\x00z'], 0x5c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) 169.083066ms ago: executing program 3 (id=4): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/vmcoreinfo', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4000000000007, 0x4000000000000ffc, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 130.616875ms ago: executing program 0 (id=1): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x84) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)=@newtfilter={0x530, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xc}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x500, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_ACT={0x4ec, 0x3, [@m_simple={0xc0, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x92, 0x6, "1f4dc4156b653954880da34e91643b82bd908ab73b70915e1fdc62df866821bdfa27f6bdf03f4eee6099be31208b36bc020def7c616065b6f5801dff0bb301900e2b96ce195e60075a4572265f2bb8ee83d38f74a69106f6f1de3ab50dc67de32f028ea8874a1f00333f19508c23064d628df91423da19373306ff4bc7232b6af1cfa755fcab5ba01f80088ed5e4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x88, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0x58, 0x6, "43c3ee8d970aac060be9e8d6d95754e6e740bddf151a74d93b09d3f1e3f5164ee5390a97a76f49b761363a765a2e9da7a8e2a517210957f06d917bcf9c73333809ae1b975f56a24ef8df893c9b8e254aee5be5b7"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0x12c, 0x19, 0x0, 0x0, {{0xa}, {0x4}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0xd0, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0xa5, 0x6, "72b907defcd58ece5c4a0021cc8ed3c0d8447416086be30f5da748c9de7a7b1e09e7edf1c3f176f0a75dfddfbc0b9cac4f88d95a0484b89e1c418aa761efae7c4fa3d8bc98846adc2846f262ee430e65034e5f4e4cce29d4f899659c5af10bec5b91eb1ee6844e9000a06b70ed4de84910f05536ca47d24ee637a80c0d68beb7fcb616a8ba6a6df025048da5296d7c7b6d13b0643f2d4634319ddf2e4f1524e815"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x48, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x1c, 0x6, "567e2c71f0931ffb6f91c990e5f1dcb8ff008d086c31e6bf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x78, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7, 0x10000000, 0x1, 0x9}}]}, {0x29, 0x6, "8db165d4c3ffd05860495a41909197b9584827daab99ede7a7191a5ddbd09ee67dbe6190af"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_vlan={0xe4, 0x7, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe35}]}, {0xb0, 0x6, "d5b5f8987e527732576b7fcf9e067b79205da7ed0f9c07e96155ba07d6993ab5debc98a519816e987f3bf96f37a17cd82b771a9cd514a189a0c1de9bdeb69b92be3d885aee373f0076741e6c759f24d6fd5b1099929179d2e127310ae4e1cfa587216c298160914bf4f230dd4b4702efa1b00c97b4668f903c7ab828ebfa494f1b9bd40722632d6c6e84be96dfe35a9de1346f24d90229b31424210d971c29b27493930a778b0774d31a05c6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x530}}, 0x2000c800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 0s ago: executing program 2 (id=17): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 83.595092][ T5609] cgroup: Unknown subsys name 'net' [ 83.734560][ T5609] cgroup: Unknown subsys name 'cpuset' [ 83.744218][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.409779][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.073575][ T29] cfg80211: failed to load regulatory.db [ 87.973555][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.976072][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.982562][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.990121][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.012559][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.020869][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.029127][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.030167][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.038482][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.047444][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.054738][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.069361][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.070196][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.079172][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.086755][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.091737][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.099030][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.105820][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.114138][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.121273][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.128256][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.134420][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.148500][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.149887][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.163372][ T4940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.163896][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.179268][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.189726][ T4940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.190122][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.213822][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.241500][ T5642] Bluetooth: hci0: command tx timeout [ 90.309665][ T5642] Bluetooth: hci1: command tx timeout [ 90.315989][ T4940] Bluetooth: hci2: command tx timeout [ 90.316023][ T5636] Bluetooth: hci3: command tx timeout [ 90.322653][ T5633] Bluetooth: hci4: command tx timeout [ 90.327645][ T5636] Bluetooth: hci5: command tx timeout [ 90.684349][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.692408][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.700449][ T5624] bridge_slave_0: entered allmulticast mode [ 90.708850][ T5624] bridge_slave_0: entered promiscuous mode [ 90.757786][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.765614][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.773974][ T5624] bridge_slave_1: entered allmulticast mode [ 90.781897][ T5624] bridge_slave_1: entered promiscuous mode [ 90.957484][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.966999][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.974864][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.983555][ T5625] bridge_slave_0: entered allmulticast mode [ 90.991706][ T5625] bridge_slave_0: entered promiscuous mode [ 91.043583][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.053470][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.060798][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.068014][ T5625] bridge_slave_1: entered allmulticast mode [ 91.076701][ T5625] bridge_slave_1: entered promiscuous mode [ 91.190516][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.197809][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.205583][ T5627] bridge_slave_0: entered allmulticast mode [ 91.213884][ T5627] bridge_slave_0: entered promiscuous mode [ 91.247529][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.265015][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.272232][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.280669][ T5622] bridge_slave_0: entered allmulticast mode [ 91.289157][ T5622] bridge_slave_0: entered promiscuous mode [ 91.298002][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.305300][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.312723][ T5627] bridge_slave_1: entered allmulticast mode [ 91.320498][ T5627] bridge_slave_1: entered promiscuous mode [ 91.341901][ T5624] team0: Port device team_slave_0 added [ 91.350858][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.372088][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.379325][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.386716][ T5622] bridge_slave_1: entered allmulticast mode [ 91.394431][ T5622] bridge_slave_1: entered promiscuous mode [ 91.430305][ T5624] team0: Port device team_slave_1 added [ 91.488444][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.495816][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.503303][ T5623] bridge_slave_0: entered allmulticast mode [ 91.511499][ T5623] bridge_slave_0: entered promiscuous mode [ 91.544736][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.551921][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.559316][ T5626] bridge_slave_0: entered allmulticast mode [ 91.567383][ T5626] bridge_slave_0: entered promiscuous mode [ 91.591221][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.600892][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.608062][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.615293][ T5623] bridge_slave_1: entered allmulticast mode [ 91.623037][ T5623] bridge_slave_1: entered promiscuous mode [ 91.644731][ T5625] team0: Port device team_slave_0 added [ 91.650511][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.657716][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.665197][ T5626] bridge_slave_1: entered allmulticast mode [ 91.673618][ T5626] bridge_slave_1: entered promiscuous mode [ 91.684063][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.695900][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.720109][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.727208][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.753327][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.767485][ T5625] team0: Port device team_slave_1 added [ 91.788153][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.824263][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.831435][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.857446][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.922769][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.959286][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.984099][ T5627] team0: Port device team_slave_0 added [ 91.993119][ T5627] team0: Port device team_slave_1 added [ 92.001895][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.025106][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.032137][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.058426][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.074744][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.086208][ T5622] team0: Port device team_slave_0 added [ 92.133820][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.140996][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.167246][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.193299][ T5622] team0: Port device team_slave_1 added [ 92.212027][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.219115][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.245412][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.259770][ T5623] team0: Port device team_slave_0 added [ 92.309999][ T5636] Bluetooth: hci0: command tx timeout [ 92.326366][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.333876][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.360450][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.374019][ T5623] team0: Port device team_slave_1 added [ 92.390164][ T5636] Bluetooth: hci5: command tx timeout [ 92.390282][ T52] Bluetooth: hci1: command tx timeout [ 92.396366][ T5642] Bluetooth: hci2: command tx timeout [ 92.401721][ T52] Bluetooth: hci4: command tx timeout [ 92.406949][ T4940] Bluetooth: hci3: command tx timeout [ 92.422035][ T5626] team0: Port device team_slave_0 added [ 92.447625][ T5624] hsr_slave_0: entered promiscuous mode [ 92.454851][ T5624] hsr_slave_1: entered promiscuous mode [ 92.489652][ T5626] team0: Port device team_slave_1 added [ 92.496089][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.503223][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.529511][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.543018][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.550050][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.576450][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.602982][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.610128][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.665161][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.776387][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.783504][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.810130][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.822264][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.829188][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.855375][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.868082][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.875121][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.901121][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.926992][ T5627] hsr_slave_0: entered promiscuous mode [ 92.933651][ T5627] hsr_slave_1: entered promiscuous mode [ 92.939944][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 92.945747][ T5627] Cannot create hsr debugfs directory [ 92.959902][ T5625] hsr_slave_0: entered promiscuous mode [ 92.966356][ T5625] hsr_slave_1: entered promiscuous mode [ 92.973014][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 92.978761][ T5625] Cannot create hsr debugfs directory [ 93.104415][ T5622] hsr_slave_0: entered promiscuous mode [ 93.111137][ T5622] hsr_slave_1: entered promiscuous mode [ 93.117444][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 93.124206][ T5622] Cannot create hsr debugfs directory [ 93.238369][ T5623] hsr_slave_0: entered promiscuous mode [ 93.245194][ T5623] hsr_slave_1: entered promiscuous mode [ 93.251692][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 93.257428][ T5623] Cannot create hsr debugfs directory [ 93.347551][ T5626] hsr_slave_0: entered promiscuous mode [ 93.354550][ T5626] hsr_slave_1: entered promiscuous mode [ 93.361361][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 93.367126][ T5626] Cannot create hsr debugfs directory [ 93.974389][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.988230][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.996649][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.007392][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.015838][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.028154][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.045261][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.055328][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.131205][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.148356][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.157094][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.168129][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.182558][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.193552][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.205265][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.215871][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.320579][ T5622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.334835][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.352059][ T5622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.363769][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.373033][ T5622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.384026][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.390071][ T4940] Bluetooth: hci0: command tx timeout [ 94.402327][ T5622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.413602][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.469851][ T4940] Bluetooth: hci3: command tx timeout [ 94.470319][ T5642] Bluetooth: hci2: command tx timeout [ 94.475329][ T52] Bluetooth: hci4: command tx timeout [ 94.475365][ T52] Bluetooth: hci5: command tx timeout [ 94.475394][ T52] Bluetooth: hci1: command tx timeout [ 94.501451][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.544443][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.565371][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.573843][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.583616][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.592732][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.604134][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.622209][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.635722][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.712059][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.792528][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.800359][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.809073][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.820440][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.828539][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.838917][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.848033][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.858758][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.866992][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.878177][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.932088][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.939254][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.994797][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.067996][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.078567][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.087068][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.098142][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.118511][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.129384][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.140910][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.151256][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.180667][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.240410][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.247596][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.287829][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.308928][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.316141][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.374271][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.412536][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.464101][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.471487][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.507474][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.514724][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.568512][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.634166][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.641352][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.679307][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.734507][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.741722][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.843276][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.945159][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.952386][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.006914][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.014126][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.038764][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.206863][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.297927][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.305144][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.381308][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.388472][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.471432][ T5642] Bluetooth: hci0: command tx timeout [ 96.555314][ T5642] Bluetooth: hci3: command tx timeout [ 96.555360][ T5636] Bluetooth: hci5: command tx timeout [ 96.561433][ T5642] Bluetooth: hci4: command tx timeout [ 96.561470][ T5642] Bluetooth: hci2: command tx timeout [ 96.582205][ T4940] Bluetooth: hci1: command tx timeout [ 96.734337][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.053011][ T5624] veth0_vlan: entered promiscuous mode [ 97.091751][ T5624] veth1_vlan: entered promiscuous mode [ 97.134104][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.323701][ T5624] veth0_macvtap: entered promiscuous mode [ 97.387028][ T5624] veth1_macvtap: entered promiscuous mode [ 97.466687][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.518948][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.564489][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.604924][ T3269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.643723][ T3269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.722593][ T3269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.761349][ T3269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.918222][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.173607][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.217139][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.283882][ T5626] veth0_vlan: entered promiscuous mode [ 98.297393][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.315283][ T5626] veth1_vlan: entered promiscuous mode [ 98.324741][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.338559][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.486085][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.508322][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.559321][ T5626] veth0_macvtap: entered promiscuous mode [ 98.587772][ T5627] veth0_vlan: entered promiscuous mode [ 98.606534][ T5626] veth1_macvtap: entered promiscuous mode [ 98.638839][ T5627] veth1_vlan: entered promiscuous mode [ 98.728285][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.741929][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.823202][ T5623] veth0_vlan: entered promiscuous mode [ 98.862172][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.891892][ T5622] veth0_vlan: entered promiscuous mode [ 98.908087][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.919190][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.931614][ T5625] veth0_vlan: entered promiscuous mode [ 98.983201][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.999078][ T5623] veth1_vlan: entered promiscuous mode [ 99.007952][ T5863] loop2: detected capacity change from 0 to 1024 [ 99.008386][ T5627] veth0_macvtap: entered promiscuous mode [ 99.035374][ T5863] EXT4-fs: Ignoring removed orlov option [ 99.037317][ T5622] veth1_vlan: entered promiscuous mode [ 99.068913][ T5863] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 99.092356][ T5625] veth1_vlan: entered promiscuous mode [ 99.107776][ T5627] veth1_macvtap: entered promiscuous mode [ 99.267952][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.329290][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.342984][ T5623] veth0_macvtap: entered promiscuous mode [ 99.372806][ T5622] veth0_macvtap: entered promiscuous mode [ 99.412970][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.421308][ T5622] veth1_macvtap: entered promiscuous mode [ 99.433073][ T5623] veth1_macvtap: entered promiscuous mode [ 99.434954][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.450767][ T5625] veth0_macvtap: entered promiscuous mode [ 99.461612][ T1224] IPVS: starting estimator thread 0... [ 99.467878][ T5867] IPVS: fo: FWM 3 0x00000003 - no destination available [ 99.494528][ T5625] veth1_macvtap: entered promiscuous mode [ 99.525263][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.551672][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.569856][ T5868] IPVS: using max 22 ests per chain, 52800 per kthread [ 99.595262][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.608647][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.629179][ T3351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.632275][ T5870] loop2: detected capacity change from 0 to 1024 [ 99.637647][ T3351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.655510][ T5870] EXT4-fs: Ignoring removed orlov option [ 99.677390][ T5870] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 99.718150][ T5870] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 99.723400][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.748296][ T5870] EXT4-fs (loop2): orphan cleanup on readonly fs [ 99.761771][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.769104][ T5870] EXT4-fs error (device loop2): ext4_quota_enable:7220: comm syz.2.11: Bad quota inum: 2, type: 0 [ 99.795430][ T5870] loop2: lost filesystem error report for type 5 error -117 [ 99.796212][ T5870] EXT4-fs (loop2): Remounting filesystem read-only [ 99.803688][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 99.804035][ C1] EXT4-fs (loop2): initial error at time 1777964085: ext4_quota_enable:7220 [ 99.804076][ C1] EXT4-fs (loop2): last error at time 1777964085: ext4_quota_enable:7220 [ 99.809108][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.843565][ T5870] EXT4-fs warning (device loop2): ext4_enable_quotas:7265: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 99.856431][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.865948][ T5870] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 99.878805][ T5870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.885770][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.899995][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.992111][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.112444][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.142434][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.157964][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.182521][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 100.190055][ T3269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.204501][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.210898][ T3269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.228478][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.281936][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.299804][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.323016][ T30] audit: type=1326 audit(1777964086.275:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.1.2" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f0619cdd9 code=0x0 [ 100.372315][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.443843][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.461916][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.514042][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.538773][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.574505][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.598912][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.620871][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.745629][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.770327][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.873340][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.901853][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.974152][ T5886] loop4: detected capacity change from 0 to 512 [ 100.992357][ T3351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.994918][ T5886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.015082][ T5886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.036428][ T3351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.092395][ T3351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.114502][ T3351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.117256][ T5886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.184685][ T5886] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.324532][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.358411][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.491025][ T3351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.509079][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.522932][ T3351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.306144][ T5899] [ 102.308514][ T5899] ====================================================== [ 102.315522][ T5899] WARNING: possible circular locking dependency detected [ 102.322529][ T5899] syzkaller #0 Not tainted [ 102.326933][ T5899] ------------------------------------------------------ [ 102.333939][ T5899] syz.3.4/5899 is trying to acquire lock: [ 102.339648][ T5899] ffff88801c6a5210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 102.349892][ T5899] [ 102.349892][ T5899] but task is already holding lock: [ 102.357250][ T5899] ffff8880272b2ef0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 102.368539][ T5899] [ 102.368539][ T5899] which lock already depends on the new lock. [ 102.368539][ T5899] [ 102.378943][ T5899] [ 102.378943][ T5899] the existing dependency chain (in reverse order) is: [ 102.387956][ T5899] [ 102.387956][ T5899] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 102.396603][ T5899] blk_alloc_queue+0x610/0x790 [ 102.401923][ T5899] blk_mq_alloc_queue+0x174/0x290 [ 102.407481][ T5899] __blk_mq_alloc_disk+0x29/0x120 [ 102.413041][ T5899] loop_add+0x498/0xb60 [ 102.417747][ T5899] loop_init+0x1d3/0x200 [ 102.422519][ T5899] do_one_initcall+0x121/0x750 [ 102.427820][ T5899] kernel_init_freeable+0x6ea/0x7b0 [ 102.433550][ T5899] kernel_init+0x1f/0x1e0 [ 102.438399][ T5899] ret_from_fork+0x72b/0xd50 [ 102.443517][ T5899] ret_from_fork_asm+0x1a/0x30 [ 102.448818][ T5899] [ 102.448818][ T5899] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 102.456049][ T5899] fs_reclaim_acquire+0xc4/0x100 [ 102.461537][ T5899] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 102.467457][ T5899] __kernfs_iattrs+0x124/0x3e0 [ 102.472768][ T5899] __kernfs_setattr+0x4d/0x3c0 [ 102.478076][ T5899] kernfs_iop_setattr+0xda/0x130 [ 102.483560][ T5899] notify_change+0xb25/0x1330 [ 102.488778][ T5899] do_truncate+0x1df/0x240 [ 102.493738][ T5899] path_openat+0x2a55/0x31a0 [ 102.498853][ T5899] do_file_open+0x20e/0x430 [ 102.503877][ T5899] do_sys_openat2+0x10d/0x1e0 [ 102.509084][ T5899] __x64_sys_openat+0x12d/0x210 [ 102.514465][ T5899] do_syscall_64+0x10b/0xf80 [ 102.519599][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.526025][ T5899] [ 102.526025][ T5899] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 102.534564][ T5899] __lock_acquire+0x14b8/0x2630 [ 102.539951][ T5899] lock_acquire+0x1b1/0x370 [ 102.544986][ T5899] down_read+0x99/0x450 [ 102.549682][ T5899] kernfs_iop_getattr+0x9c/0xf0 [ 102.555079][ T5899] vfs_getattr_nosec+0x2d4/0x430 [ 102.560542][ T5899] vfs_getattr+0x4a/0x60 [ 102.565308][ T5899] loop_query_min_dio_size.isra.0+0x117/0x250 [ 102.571920][ T5899] lo_ioctl+0x13aa/0x1bc0 [ 102.576792][ T5899] blkdev_ioctl+0x5ad/0x6f0 [ 102.581819][ T5899] __x64_sys_ioctl+0x18e/0x210 [ 102.587126][ T5899] do_syscall_64+0x10b/0xf80 [ 102.592257][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.598676][ T5899] [ 102.598676][ T5899] other info that might help us debug this: [ 102.598676][ T5899] [ 102.608891][ T5899] Chain exists of: [ 102.608891][ T5899] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 102.608891][ T5899] [ 102.623364][ T5899] Possible unsafe locking scenario: [ 102.623364][ T5899] [ 102.630802][ T5899] CPU0 CPU1 [ 102.636153][ T5899] ---- ---- [ 102.641504][ T5899] lock(&q->q_usage_counter(io)#24); [ 102.646891][ T5899] lock(fs_reclaim); [ 102.653395][ T5899] lock(&q->q_usage_counter(io)#24); [ 102.661310][ T5899] rlock(&root->kernfs_iattr_rwsem); [ 102.666686][ T5899] [ 102.666686][ T5899] *** DEADLOCK *** [ 102.666686][ T5899] [ 102.674816][ T5899] 3 locks held by syz.3.4/5899: [ 102.679662][ T5899] #0: ffff8880273ce430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 102.689922][ T5899] #1: ffff8880272b2ef0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 102.701647][ T5899] #2: ffff8880272b2f28 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 102.713542][ T5899] [ 102.713542][ T5899] stack backtrace: [ 102.719423][ T5899] CPU: 0 UID: 0 PID: 5899 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 102.719464][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.719484][ T5899] Call Trace: [ 102.719495][ T5899] [ 102.719508][ T5899] dump_stack_lvl+0x100/0x190 [ 102.719549][ T5899] print_circular_bug.cold+0x178/0x1c7 [ 102.719610][ T5899] check_noncircular+0x146/0x160 [ 102.719655][ T5899] __lock_acquire+0x14b8/0x2630 [ 102.719700][ T5899] ? preempt_schedule_thunk+0x16/0x30 [ 102.719759][ T5899] lock_acquire+0x1b1/0x370 [ 102.719799][ T5899] ? kernfs_iop_getattr+0x9c/0xf0 [ 102.719858][ T5899] ? __pfx___might_resched+0x10/0x10 [ 102.719907][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.719950][ T5899] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 102.719998][ T5899] down_read+0x99/0x450 [ 102.720049][ T5899] ? kernfs_iop_getattr+0x9c/0xf0 [ 102.720104][ T5899] ? rcu_is_watching+0x12/0xc0 [ 102.720156][ T5899] ? __pfx_down_read+0x10/0x10 [ 102.720209][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.720256][ T5899] ? __rcu_read_unlock+0x27f/0x5e0 [ 102.720301][ T5899] kernfs_iop_getattr+0x9c/0xf0 [ 102.720359][ T5899] vfs_getattr_nosec+0x2d4/0x430 [ 102.720396][ T5899] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 102.720455][ T5899] vfs_getattr+0x4a/0x60 [ 102.720491][ T5899] loop_query_min_dio_size.isra.0+0x117/0x250 [ 102.720548][ T5899] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 102.720617][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.720662][ T5899] lo_ioctl+0x13aa/0x1bc0 [ 102.720718][ T5899] ? __pfx_lo_ioctl+0x10/0x10 [ 102.720772][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.720817][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.720859][ T5899] ? blk_get_meta_cap+0xd4/0x6c0 [ 102.720894][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.720938][ T5899] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 102.720973][ T5899] ? tomoyo_path_number_perm+0x28f/0x580 [ 102.721034][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.721081][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.721124][ T5899] ? blkdev_common_ioctl+0x515/0x2b80 [ 102.721165][ T5899] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 102.721208][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.721254][ T5899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.721293][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.721336][ T5899] ? do_vfs_ioctl+0x226/0x13e0 [ 102.721386][ T5899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.721441][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.721484][ T5899] ? find_held_lock+0x2b/0x80 [ 102.721539][ T5899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.721584][ T5899] ? __pfx_lo_ioctl+0x10/0x10 [ 102.721637][ T5899] blkdev_ioctl+0x5ad/0x6f0 [ 102.721673][ T5899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 102.721712][ T5899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 102.721750][ T5899] __x64_sys_ioctl+0x18e/0x210 [ 102.721802][ T5899] do_syscall_64+0x10b/0xf80 [ 102.721848][ T5899] ? irqentry_exit+0x117/0x790 [ 102.721897][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.721932][ T5899] RIP: 0033:0x7fa43f59cdd9 [ 102.721959][ T5899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.721993][ T5899] RSP: 002b:00007fa43d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.722025][ T5899] RAX: ffffffffffffffda RBX: 00007fa43f816090 RCX: 00007fa43f59cdd9 [ 102.722049][ T5899] RDX: 0000000000000006 RSI: 0000000000004c06 RDI: 0000000000000005 [ 102.722070][ T5899] RBP: 00007fa43f632d69 R08: 0000000000000000 R09: 0000000000000000 [ 102.722092][ T5899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.722113][ T5899] R13: 00007fa43f816128 R14: 00007fa43f816090 R15: 00007fff6ba0d948 [ 102.722146][ T5899] [ 103.221412][ T5905] loop2: detected capacity change from 0 to 512 [ 103.242199][ T5905] EXT4-fs (loop2): 1 truncate cleaned up [ 103.248684][ T5905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.271892][ T30] audit: type=1800 audit(1777964089.215:3): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 103.467237][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.