last executing test programs: 14.333049063s ago: executing program 1 (id=272): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x1) 13.269875727s ago: executing program 1 (id=285): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 13.184783265s ago: executing program 1 (id=286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) shutdown(r0, 0x0) 12.987268932s ago: executing program 1 (id=291): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f00000005c0)="4e325626ec00005bcfd50ecd7aec5e798b4331cddc7efce08d75") 7.541958478s ago: executing program 2 (id=358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x108}, 0x1d) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$setstatus(r1, 0x4, 0x42800) write$P9_RREADDIR(r1, &(0x7f0000000280)={0xb, 0x29, 0x1, {0x184}}, 0xb) 7.40307791s ago: executing program 2 (id=359): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) rt_tgsigqueueinfo(0x0, 0x0, 0xe, 0x0) 7.312857778s ago: executing program 2 (id=360): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4044810, &(0x7f0000000280)={0x11, 0x88a8, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) 7.29314902s ago: executing program 2 (id=361): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00030700000026bd7000fbdbdf2505001a"], 0x38}}, 0x20000000) 7.245388935s ago: executing program 2 (id=362): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, [0x9, 0x0, 0x3, 0x7fffffff, 0x9, 0x7, 0x2, 0x1, 0x10001, 0x3, 0x6, 0x5, 0x6, 0x5, 0xa5d7]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000600)={r3, @in6={{0xa, 0x4e21, 0x800, @rand_addr=' \x01\x00', 0x5}}, 0x0, 0x8}, &(0x7f0000000300)=0x90) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x8000000000000001, 0x6, r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) kcmp(r0, r0, 0x5, r4, r2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.28480513s ago: executing program 2 (id=363): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) 3.284918918s ago: executing program 4 (id=382): r0 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x20004080, &(0x7f00000000c0)={0xa, 0xfffc, 0x27b6a97, @private2, 0x9}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 3.25960945s ago: executing program 3 (id=383): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf251d00000008000300", @ANYRES32=r2, @ANYBLOB="24002f800c000b00000000000000000008000100"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4044080) 3.14460874s ago: executing program 0 (id=386): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) 3.109867233s ago: executing program 3 (id=387): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x809a1ff6090d930f, 0x7, 0x2, 0x6, 0x2, @empty, @private2={0xfc, 0x2, '\x00', 0x20}, 0x1, 0x700, 0xffffffff, 0x200}}) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 3.024277271s ago: executing program 3 (id=388): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x3, @empty, 0xffffffff}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xe3]}}, 0x5c) 3.023703851s ago: executing program 3 (id=389): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) 2.992042733s ago: executing program 3 (id=390): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r2, 0x2}, 0xc) 2.957871037s ago: executing program 3 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x2b1e}, 0x0) 2.820667569s ago: executing program 0 (id=392): r0 = socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x2010, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r4, &(0x7f0000000580)=""/174, 0xae) fsmount(0xffffffffffffffff, 0x0, 0x72) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 1.003423501s ago: executing program 0 (id=393): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, 0x0, 0x0) 977.901713ms ago: executing program 4 (id=394): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0xffff, 0x0, 0x0, 0x401]}}]}}]}, 0x8c}}, 0x0) 796.765129ms ago: executing program 4 (id=395): syz_clone(0x8000000, &(0x7f0000000480)="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", 0x1c1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000640), 0x0}, 0x20) 770.802352ms ago: executing program 0 (id=396): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x186}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992", 0xad}, {&(0x7f0000000140)="985e44efeabe001cabcf3d8673c3a254a9a2d3187950cb347b70a27cb566ec4e49f5084e2c245023cfd8259e2efaf6dee305ca987ec87c1bc4fc49fc3b8646adbde9ec691b0f01f353ed1274a2dd799a0f20af36628ab32fd0936dde49f973d182ff21a67b38a66f82274c9e8c98592b98b90f88330be0cfe168cc00caa212308653ee86182c563d5a041c562c84f886799218fd54e7e9353e1b1cbc9be56f", 0x9f}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="f77d2b5dc0f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022d60f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacb", 0x62}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 651.988582ms ago: executing program 1 (id=397): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 472.673488ms ago: executing program 4 (id=398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x24000840) syz_emit_ethernet(0xe89, &(0x7f00000006c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xe7b, 0x0, 0x0, 0x2, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0x1, 0x0, "82c0a45bc2de32fe77329d7281348df6e6aecebd020d22461f9a22698ea2fc63e1ff0e89c7ecbb9822d5cf4377c7da108fd80e89382c244d2e6950e2fbe6f48f37a98a3c4da1c86d6a96a3f5412745ad16e5e0cc058cc745b0c110ea07ecf0b89e72ad3d1682f174224a995f96da0049ff6c66e508802a236ffdf2cf61e3a1d8c6678f6583c710aaf0944bb38ed95350709c6db12361818e6fefd90781cdc17c0277564b69cc5a06fa350f11bf1f0587d2944912be236eb0f43414d0e589a7e4aeb766a2bcff52127e8c0f4088f883ad2e6b70b7b09e373b00cb26c703bcae042453c0d74fef9982ed0f58ab776efa71e5d61d7c737fc79dcacde1610e09b5c76fc0d37b2f1ee9f66e75641b3d3da9d3ca658771d20da7bac3d99d734325474e362b0fe1e831a13908ca918324876b4b8b78282971c208c6d472354833acfcf2aeec62fa26b520f27cda6c4f9e4a017269beee25bb27280e19fa0020c5052d707c53f5e42ffc094c71a2ee6eb4f8c3aa8dc6484ddda6f9fe94752a530293c640a925ec0745002d947ae95dcb3efe11a5370281ad92466a0f3529f14cf147e24446cc261c3dde2eb94068f0e06640cd6f3ee4d357b6e073c2b4d3af12ff517337a7666d9454376b0ba25613a7d9c887bc832ad999467daf96e736d7dd0f6fac14706bd2154c6e8b747ee4353c94c4c207c157f79368482e1b4e3d70aacfd0e3c2924277bcf86b28d0d8bed4841d7d79bbe082da0900f638cb5b6ed74c0473c6a6de28d29db6afd93ed18d0dbb592b2eb2b6dfd18f3069d88aec1d1f8a9b745e522efcedd732a1239002695dbf447e1569b02aa4576f70fd4e8aeb62a6eb132684320d1ab103ee25a040b66c815552fc141f4b11f8f2524228e7930b7d10b05ca5aa9b500f3a983e1bd363b9a21bdda45618b8af2433694e5cfdcbcb59b1328e484fc23ece4e5bb4d5a5d81e337337f5f82a27992ca90524df7b5052f8cc57f86be2ec21e9d9a754950d4e3345edff9a73a40d4b75147e5ada099425758a7aa04d24138f5c605728a02a33e966b663c01cb0de1df576cefdfa6457ecb70a5640c57f18a2605fc34f28505d4f2fcad457b656dc5536e0671c1d04ec8fb90ec4622872472496085209b7576bae5f458821f5114edf833ceeebda09f8541178072f530676b7217ecaebc69944c897f995e544284c796156fa3fee5de4cb6cc8f946852a83a5d47659666bc3ef079fe495e7f0e9b97fecbeaba9e979dd2ab0a69ca133402e2cf929948b4af278172f057cfbe71ed2c5c1d1435f138e09acec4e17d052437ab2d6da535bcb366a1a6aa3b3a4f8073de7faf57769cdd0a5f9e439a1a7714b1f0cc928b25295816abf07f0900185322a3aff90d3a5e90b37a135d9b33f4399901491764212d5c4665f63749b20d84fa5c022a3cb665dc91c7fdbae99a806e9d7fb5bd4a5883d63543852f7d7c67fa9526f5941d38503fbff704e813e0cff1cc470a96d4b73be73189369829581e6534ce06a14b7e8f0ed2e48becff19c9261e3632bf1c76369be3f34e9d53b0ff1aafd092069ade53a040aef9868dc5878869f0972cc7fca18ac3269e8e942b42707058ca5cbae24c2d99b3c0c13ab3bc518bb57369c98e97b76879983dcd54f581211bd5d63021e77671202b2a463ce2ae40baaf863f5d3617cebc8f06b6481807ce8d22246d7a2e6b69810067dc937d60521eeeae91b17a9843d264e3635b5c7bc5c17fe1c6adb39298ce8d0b74c36ab2182397498cfee794cc4dabd137d0a58fb49b547fac59f10a08fbf119502e36f9a8d730f7e57a10b35e750f312a391d22d8303a460f885038eb64c05a9f043a86bcb3c4900966892522f455e4e1bb1b00c683a8528c8267c52988d1ee323e2a5f9e3a941c23c571323d695ff218f0e4d717ed9dafaeec2c7c1aaf73e3f16008e0a4d5e69e3b8d53698533ab96cbf92ae54dbd5e9dae89ccf043cec77ad4c6a276e2b9c95f8d4657b2d88fb819435a04c13f83f93248772f373ca98128b0b2855cfc9333c284fc8b8bc30aafc488aa8f7765e6c01f2a2e33145475791e9b1e9ab0422bc487bac4265d5be38f59b64ba2190850dad9592049087aeeecdead868f5f5e9564192a8b5ceb140bbee4cb334547ee7440bb7f7e27c82f9b029d4e4cf4dd3ae1f8f9b5690d67abbfa63c43afaeaad82886986e72572b02ecc8995ba15dcf2394d2b57b28d066e4dbd3d95ab7675d2a6cacd1ca67f73caf4651e128d5f4a4121f9b1c73a9debe2b2fc01ba04fc314bb9054c0d28992130a3b24498c996f8246cd9ae7f822c261cf9fcee160595aae179a7a03c69bcd13509a2bbf778beae73c58543354da70fe898a56e0c2f32bd734e96b04de0c453aa7646ca7331c801307623305b87f13032a8b36e4d9afdd352d9e99ce90e89ccc3acc812d8a0022e977fd03980bdba9063ae3040d49ed8f0b190c887f7a06f1c0012ca4ca0d729d3dde7bba9457e0e7a172132caa339307b07b347b944b1201de1b4f25f521bdd196028dfa7008b585f674be91b8d55654c35a5d165673d3d476e8bc1772dfc11000b9c6c71849d91a9b0d77d03be4a81d2390937699532ecb692571d7489cb5798f80c1a629c0b20cc37a5b1789b1ce65b93f669f476674a3d7ba2c492049d7496bfbec883a3af34cf098096c5e8299bc37b27113aa60486badc69fea6df59ae01751ec2a736a5fc0e007b67f0d7a929cb16ae4bad0b5cc9faa775b78991eed52ba11c9058eda5f4e82a4076675a827f397f0a511d1f1e4fb2db29e7f3844e290721b142cd55bf442220fd6535d16b4f570a6c68aa221c8dbfcc4f26de8d3ec5461b4d25c05b5d1c9da4fb935f8140243ccb1c7bdf31b8718145b033bed6cb8fff443aef6f090c6adc4d8bb03aeafa125377cd29d24ae4bc9ea7bfddd3cd7601696ff2ed4c12a9a31305a7805ddbe81da18619490204882d19589ea467db274077bb8f4bca114b019ef74e456a27be20d57f3d17d2597f87a2c5e8ce865d6b6ab90ab386044b063dc5f9750688ccff88221947274e6bc921e5fed50a2b80fd068efdc85368ed340bf40899a6945255cf80a73febdf4eb519c6026699797e36f36aec105f13e8a847acaca477718d8d2020e4a6699e8087c6258bdc840e30f07aa4a659b8d09f4c446babd718fdf919f80b81c8517f3612907a2bc2b95dae901ac21c8fb09ef7c92b755871be320dbffc3995b2fe73a120b0c613ebc607914a4254b3ee4cd66722e8a429f81e8159d49fe2d82ed7d87d93d92d89169d89dbec28a9d24806a98f0475204dd700b171a566b3f9377ae4ed82c6a425d0f4213405bbfb8941c38f811202453a8b6947a10ca2482a02498f7b3168e253e9ae978504d780fe5ee4185db2dfefedae045bdbc2b89f5edb19ed42884eac50bbec3485de0094be86b9abebfc72d1bc7bd8c87601cf40973532e99bd9eb9e4c250e305fa9edc88dc1a287ea6e82516bb4df3595649287615504d67a33e6c24e70367c0f0224dfdead2a0c4db456cfa522a26c38ccb4f6ccb7935fd5260620d4aa7ef757a71b6e2944708725322191f592b39006d75c3171673dbbfac0c3d3eb10fb5021e2eb9d56260aeb189609da07895321891084c25f040c6cf4b6d4c3ce10eca2d082dcc0931bfb2d97c2b5fa2aef4c6ff42a4332163bf329c61cc4427073b58df036ec82001ff8d641091f6ba0b92f7662584286170421f448f39447f56e493f13300ce6821972539ce50eb66d0324989198584e4d28312efd195086aeca82d1d1dd2b27924c282c97e59b5353d018c81ca38086ae0888be341916cb6f61e3b4efb7788bd0e3ff43349d78e3ed928f35ee807f6d06a494fb07721147393a3a3ca0001e9c3be75a4fddb7f8df3855f9037b97243e2706fc96d66e9955a4af4e226a3f5ab1bf1f208094e11b0eb97b3ed04c2728c2ae1424be3d3ef924f78e0c31c7fa424841d07a2664416c7077628189de4102d044bfc48b73debb94b68c98841203b42a1b17d5acb83922809be60ee5bcc98e5d89e59b3140283ce0bde34cfa000eed60c2c6d9eaf2f1921db42ea6c34dec708234fe9299f7f2cf335666c0c0c0a4adf57464db88173197be4013f0a314b212e5155af1efe6761397cc0b8cff85ba422b9754d2c033723a9e5eaf7cf3773890255f0d3115ae5d89c02448f24dcdd79e09c7719809d0375e5157d9a984c091ffa38e19737b749c7fcbcc9b2a153ac6007ecceabdf1aee662fef63e9516fe58a07d7854d49cd72b63499a24897fe17b2ce3c4e1b2e793484056d07d78c4243a7ff2e6f108bc5a807f6734c8ab9e7a3af0b584509c0f2dbf8f65d8d6c3a2965982a39e46a7f5594b04bbe1aede908b0320e17d6fcc113fcaae60b759f8d150c6fa80e1ae77abd2bf59f62a1ade668dd737b7a2f96dc06461b93173707453d25c3f5ec80082d3abb6c47d2daf7fc7a5388ac6a83eeaab2f00ccd7bdaa8849d044660cfa81d0d03fecf565ce2db5c126f073a601108889b29b703d86197a8129c9ed58678a7d98ddf8b5aa11133c6c2a63bb914557e3731ecdc92a7953be54a5105db50ee866e0fc657f53c0a019bcb5cd7882bc006c0f618352edcef134bbad93154ea6fd19bb0bfe6c11c9780f67f32a8032c9a0806c82737fb71ab3eda5226101daeb4c9fe600a914b0b7b431687b9dc54fd6e6343c59d2636cfac4fd9a1efaa7f65a184ca4823e07c99f121364a2b4f6bd8af89584ac522a3c11dbb15a28b04148e87905a280d91f5310057b6311ab78b99f022f0b8cedce137269eb2b8db599e6ccc6b7aafe5d85b1c07fa23b4e14a4812f4326e71518273ce0af385d08a809cf856cc95d89ea958363552e9a4d856e8124cf2e8909616c904cdd12728ab44efc8b9c42c8b1ee7c2e21d3147a8f1629b01f40757089701669d9b8d789589ae5ef90d7f0db65ee0020913a147ef95305d21ae9717d119423c067b0442d6fc8b28ddcaef05385741a1ff85bf1ba76efbeaca278be4d2e459dcac0456b86a0844fdf3ffbb52eca0b33a3ff0c00bb7dc06bc94b8456701e5ffa6b896138f2fa7a4054694961a9d9d89d300824d938601f7873e1170afa8ae43dfd08342812bd42316e115f946db0109bc5619a5a93d5559405299a6198ebc030f0d089c99f9d909e5faaa8be898c0b5502db1d0865657d6b"}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[], 0xf8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x80000000}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440001800150900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 472.393698ms ago: executing program 0 (id=399): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 328.893801ms ago: executing program 4 (id=400): socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd_index=0x4, 0x1, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 201.545992ms ago: executing program 4 (id=401): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x7, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000006c0), 0x0}, 0x20) 212.631µs ago: executing program 0 (id=402): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x9b}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xf5, 0xf0, 0x14, 0x8ab, 0x2, 0x0, 0x80000001, 0x19a, 0x38, 0x8008b, 0x6, 0x5, 0x20, 0x0, 0x5, 0x1, 0x20}}, 0x38) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 0s ago: executing program 1 (id=403): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 55.873429][ T4171] cgroup: Unknown subsys name 'net' [ 56.027950][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.450817][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.866558][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 58.895120][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.945322][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 59.000056][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 59.071332][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.079579][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.088029][ T4197] device bridge_slave_0 entered promiscuous mode [ 59.124736][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.131810][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.140510][ T4197] device bridge_slave_1 entered promiscuous mode [ 59.148595][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.157853][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.165156][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.173591][ T4191] device bridge_slave_0 entered promiscuous mode [ 59.187290][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.195705][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.203679][ T4191] device bridge_slave_1 entered promiscuous mode [ 59.230299][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.237571][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.246099][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.260394][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.267625][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.276063][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.306665][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.319353][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.330445][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.348358][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.399332][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.417466][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.438521][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.448251][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.456591][ T4195] device bridge_slave_0 entered promiscuous mode [ 59.466567][ T4197] team0: Port device team_slave_0 added [ 59.481940][ T4191] team0: Port device team_slave_0 added [ 59.500804][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.508409][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.517071][ T4195] device bridge_slave_1 entered promiscuous mode [ 59.525762][ T4197] team0: Port device team_slave_1 added [ 59.550519][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.557944][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.566395][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.575353][ T4191] team0: Port device team_slave_1 added [ 59.581297][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.588944][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.597040][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.619260][ T4185] team0: Port device team_slave_0 added [ 59.633818][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.663973][ T4185] team0: Port device team_slave_1 added [ 59.671292][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.682369][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.692229][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.699218][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.725212][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.739093][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.746289][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.772443][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.784583][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.791545][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.817789][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.837956][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.862996][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.870013][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.896472][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.921078][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.928322][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.954595][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.973307][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.980283][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.008621][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.038797][ T4195] team0: Port device team_slave_0 added [ 60.046602][ T4195] team0: Port device team_slave_1 added [ 60.067022][ T4186] team0: Port device team_slave_0 added [ 60.096697][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.103749][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.111875][ T4186] team0: Port device team_slave_1 added [ 60.133140][ T4191] device hsr_slave_0 entered promiscuous mode [ 60.140010][ T4191] device hsr_slave_1 entered promiscuous mode [ 60.146743][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.154663][ T4191] Cannot create hsr debugfs directory [ 60.184752][ T4197] device hsr_slave_0 entered promiscuous mode [ 60.191382][ T4197] device hsr_slave_1 entered promiscuous mode [ 60.198813][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.206847][ T4197] Cannot create hsr debugfs directory [ 60.220224][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.227921][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.254236][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.278732][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.285976][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.312134][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.324235][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.331223][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.357497][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.385711][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.393097][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.419660][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.548660][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.555433][ T3577] Bluetooth: hci3: command 0x0409 tx timeout [ 60.561617][ T3577] Bluetooth: hci1: command 0x0409 tx timeout [ 60.569049][ T3577] Bluetooth: hci0: command 0x0409 tx timeout [ 60.575738][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.582446][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.590066][ T4186] Cannot create hsr debugfs directory [ 60.598941][ T4195] device hsr_slave_0 entered promiscuous mode [ 60.606137][ T4195] device hsr_slave_1 entered promiscuous mode [ 60.612796][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.620359][ T4195] Cannot create hsr debugfs directory [ 60.625989][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 60.632457][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 60.867427][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.887842][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.897375][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.909663][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.920015][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.936617][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.946196][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.963849][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.034591][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.077545][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.087202][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.096369][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.112208][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.121518][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.134812][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.144491][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.200045][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.209868][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.227462][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.236878][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.273660][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.291268][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.304608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.316387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.348497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.359920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.369578][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.376826][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.386140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.398686][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.407349][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.414441][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.423351][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.448598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.458302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.476416][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.508430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.518669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.527574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.536589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.544858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.566425][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.586670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.595879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.606905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.615767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.636057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.645013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.654490][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.661568][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.675471][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.686979][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.706979][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.716111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.727739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.736363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.745141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.754647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.763643][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.770918][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.779032][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.790662][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.808270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.817536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.828796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.846253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.856133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.864539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.884017][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.898928][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.910528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.918950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.930395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.941978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.961578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.970991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.984782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.994910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.003769][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.010846][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.020936][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.030258][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.039052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.059416][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.070767][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.094131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.111191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.121534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.137174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.147101][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.154235][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.163185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.171598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.180431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.189970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.199623][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.206734][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.215033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.223894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.232477][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.239546][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.247742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.256704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.265175][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.272261][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.280074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.289611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.297549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.308150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.317608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.326477][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.336399][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.343519][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.352628][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.366638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.375874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.385559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.402010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.426969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.441243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.451264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.467707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.479571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.488571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.497781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.506706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.515825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.525803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.536623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.567094][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.576716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.589221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.599906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.608020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.615937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.623636][ T4238] Bluetooth: hci0: command 0x041b tx timeout [ 62.629853][ T4238] Bluetooth: hci1: command 0x041b tx timeout [ 62.629870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.645716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.652882][ T4238] Bluetooth: hci3: command 0x041b tx timeout [ 62.657104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.668610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.678818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.702592][ T4238] Bluetooth: hci4: command 0x041b tx timeout [ 62.713799][ T4238] Bluetooth: hci2: command 0x041b tx timeout [ 62.717096][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.736247][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.751866][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.761157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.770139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.778945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.788447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.797299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.806068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.814899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.823571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.832663][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.879764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.892351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.906069][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.940589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.968540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.997592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.013110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.029827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.039213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.060768][ T4191] device veth0_vlan entered promiscuous mode [ 63.085598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.116317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.157944][ T4191] device veth1_vlan entered promiscuous mode [ 63.167624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.180716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.210282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.226045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.237710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.249227][ T4197] device veth0_vlan entered promiscuous mode [ 63.279253][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.288663][ T4197] device veth1_vlan entered promiscuous mode [ 63.297175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.305645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.314942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.323307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.336739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.345996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.358887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.366911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.395903][ T4191] device veth0_macvtap entered promiscuous mode [ 63.409048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.417494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.427100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.437021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.444629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.453704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.475700][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.484823][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.497154][ T4197] device veth0_macvtap entered promiscuous mode [ 63.507841][ T4191] device veth1_macvtap entered promiscuous mode [ 63.516559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.525171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.534285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.544965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.554057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.563382][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.571384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.579654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.590224][ T4195] device veth0_vlan entered promiscuous mode [ 63.618735][ T4197] device veth1_macvtap entered promiscuous mode [ 63.637116][ T4195] device veth1_vlan entered promiscuous mode [ 63.676332][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.688099][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.703573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.711954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.726864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.737072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.751410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.762305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.771077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.786495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.795677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.812005][ T4186] device veth0_vlan entered promiscuous mode [ 63.820746][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.833468][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.845612][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.855838][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.865429][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.874781][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.884439][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.912638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.931965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.944202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.958077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.971968][ T4186] device veth1_vlan entered promiscuous mode [ 63.984959][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.997513][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.009252][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.025262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.033584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.041345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.049882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.060082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.070098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.079038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.106215][ T4195] device veth0_macvtap entered promiscuous mode [ 64.115454][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.125866][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.134919][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.145280][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.189288][ T4195] device veth1_macvtap entered promiscuous mode [ 64.198033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.206756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.233320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.277862][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.293346][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.311635][ T4185] device veth0_vlan entered promiscuous mode [ 64.334566][ T4186] device veth0_macvtap entered promiscuous mode [ 64.351959][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.361035][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.370561][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.379740][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.387893][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.407188][ T4186] device veth1_macvtap entered promiscuous mode [ 64.437287][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.451972][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.462697][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.473724][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.487169][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.503789][ T4185] device veth1_vlan entered promiscuous mode [ 64.531103][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.539391][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.549315][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.559210][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.568200][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.578180][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.589136][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.599355][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.612428][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.624474][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.656671][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.666300][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.682449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.687798][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.698375][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.706403][ T4239] Bluetooth: hci3: command 0x040f tx timeout [ 64.713109][ T4239] Bluetooth: hci1: command 0x040f tx timeout [ 64.718546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.721437][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 64.734655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.743615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.754593][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.763545][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.772833][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.781545][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.790749][ T4239] Bluetooth: hci2: command 0x040f tx timeout [ 64.796930][ T4239] Bluetooth: hci4: command 0x040f tx timeout [ 64.813017][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.824108][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.834461][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.845470][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.856298][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.867354][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.879190][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.908343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.918372][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.928704][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.938651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.951194][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.963932][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.974035][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.984727][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.994925][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.005577][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.017173][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.038295][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.049650][ T4185] device veth0_macvtap entered promiscuous mode [ 65.056974][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.068518][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.076921][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.086530][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.095506][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.124349][ T4185] device veth1_macvtap entered promiscuous mode [ 65.137163][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.147583][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.157292][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.167444][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.200276][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.220097][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.237046][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.254207][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.272286][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.289726][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.299946][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.315620][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.326432][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.337023][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.351113][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.360059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.369644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.379240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.406280][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.435155][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.452153][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.472769][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.486945][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.497784][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.515433][ T4292] loop3: detected capacity change from 0 to 512 [ 65.523422][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.534549][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.546157][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.563977][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.574612][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.590011][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.600964][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.631777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.654360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.694973][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.716639][ T4292] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 65.735665][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.747890][ T4297] loop1: detected capacity change from 0 to 256 [ 65.757830][ T4292] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.798694][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.806564][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.820733][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.870292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.880337][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.894623][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.936124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.978657][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.007672][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.025592][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.052702][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.061335][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.123985][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.719687][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.109470][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 67.115746][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 67.121839][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 67.128491][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 67.173537][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 67.192426][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.243426][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.347742][ T4316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.630881][ T4288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.691127][ T4288] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.747841][ T4319] loop1: detected capacity change from 0 to 8192 [ 67.784267][ T4319] ======================================================= [ 67.784267][ T4319] WARNING: The mand mount option has been deprecated and [ 67.784267][ T4319] and is ignored by this kernel. Remove the mand [ 67.784267][ T4319] option from the mount to silence this warning. [ 67.784267][ T4319] ======================================================= [ 67.821966][ T4325] loop2: detected capacity change from 0 to 4096 [ 68.629692][ T4310] loop0: detected capacity change from 0 to 512 [ 69.012070][ C0] sched: RT throttling activated [ 69.182020][ T4325] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.308573][ T4319] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 69.378409][ T4319] FAT-fs (loop1): Filesystem has been set read-only [ 69.455809][ T4333] capability: warning: `syz.2.10' uses deprecated v2 capabilities in a way that may be insecure [ 69.642108][ T4336] tipc: Started in network mode [ 69.681104][ T4336] tipc: Node identity 4, cluster identity 4711 [ 69.693068][ T4336] tipc: Node number set to 4 [ 69.794320][ T4323] hid-generic 0000:0000:0000.0001: pid 4323 passed too large report [ 69.975991][ T4339] device syzkaller0 entered promiscuous mode [ 70.254210][ T4341] loop2: detected capacity change from 0 to 128 [ 70.321178][ T4343] loop1: detected capacity change from 0 to 2048 [ 70.344979][ T4341] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 70.416660][ T4346] loop3: detected capacity change from 0 to 1024 [ 70.512408][ T4346] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8000e019, mo2=0000] [ 70.530636][ T4341] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 70.545137][ T4341] FAT-fs (loop2): Filesystem has been set read-only [ 70.561148][ T4341] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 70.573674][ T4343] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 70.623311][ T4346] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.15: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.657988][ T4354] loop4: detected capacity change from 0 to 1024 [ 70.698046][ T4346] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 70.733223][ T4354] EXT4-fs (loop4): Ignoring removed oldalloc option [ 70.757252][ T4346] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.15: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.798669][ T4346] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 70.809352][ T4354] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,sysvgroups,noquota,barrier,auto_da_alloc,nodioread_nolock,auto_da_alloc,resgid=0x0000000000000000,oldalloc,,errors=continue. Quota mode: none. [ 70.842447][ T4354] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.902297][ T4346] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.15: Failed to acquire dquot type 0 [ 70.961858][ T4354] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 3: comm syz.4.17: lblock 3 mapped to illegal pblock 3 (length 3) [ 70.985519][ T4346] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 71.028674][ T4354] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 71.032248][ T4346] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.15: mark_inode_dirty error [ 71.090606][ T4354] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.090606][ T4354] [ 71.107798][ T4365] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 71.146445][ T4366] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: block 3: comm syz.4.17: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.163835][ T4346] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 71.190537][ T4346] EXT4-fs (loop3): 1 orphan inode deleted [ 71.200878][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.207542][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.213285][ T4365] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 71.234993][ T4271] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.248614][ T4346] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,nombcache,auto_da_alloc,nodiscard,debug,data_err=ignore,,errors=continue. Quota mode: none. [ 71.299064][ T4271] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 71.321067][ T26] audit: type=1326 audit(1771365929.701:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb298e9629 code=0x7ffc0000 [ 71.349103][ T4354] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: block 3: comm syz.4.17: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.386052][ T4271] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 71.411189][ T26] audit: type=1326 audit(1771365929.701:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb298e9629 code=0x7ffc0000 [ 71.435756][ T4365] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.435756][ T4365] [ 71.452780][ T4354] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: block 3: comm syz.4.17: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.503625][ T26] audit: type=1326 audit(1771365929.781:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ffb298e9629 code=0x7ffc0000 [ 71.534371][ T1364] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm kworker/u4:4: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.568762][ T1364] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 71.584864][ T4354] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #15: block 3: comm syz.4.17: lblock 3 mapped to illegal pblock 3 (length 1) [ 71.592508][ T1364] EXT4-fs error (device loop3): ext4_write_dquot:6214: comm kworker/u4:4: Failed to commit dquot type 0 [ 71.602146][ T4365] EXT4-fs (loop1): Total free blocks count 0 [ 71.617954][ T26] audit: type=1326 audit(1771365929.781:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb298e9629 code=0x7ffc0000 [ 71.653460][ T1364] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 71.665537][ T4373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.688540][ T26] audit: type=1326 audit(1771365929.781:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb298e9629 code=0x7ffc0000 [ 71.722142][ T1364] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.736771][ T1364] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 0 [ 71.763953][ T4312] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 71.811335][ T4197] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 71.818718][ T4365] EXT4-fs (loop1): Free/Dirty block details [ 71.854001][ T4312] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 71.886378][ T4197] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 71.890888][ T4312] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.890888][ T4312] [ 71.906948][ T4365] EXT4-fs (loop1): free_blocks=2415919504 [ 71.934532][ T4197] EXT4-fs error (device loop3): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 71.957040][ T4365] EXT4-fs (loop1): dirty_blocks=3744 [ 72.018268][ T4365] EXT4-fs (loop1): Block reservation details [ 72.115938][ T4380] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 72.123037][ T4365] EXT4-fs (loop1): i_reserved_data_blocks=248 [ 72.390734][ T4391] loop3: detected capacity change from 0 to 1024 [ 72.473637][ T4397] syz.4.32 uses obsolete (PF_INET,SOCK_PACKET) [ 72.515739][ T4391] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 72.737047][ T154] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 72.756608][ T154] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.756608][ T154] [ 73.483423][ T4414] loop4: detected capacity change from 0 to 512 [ 73.751770][ T4424] loop3: detected capacity change from 0 to 512 [ 73.842996][ T4422] loop4: detected capacity change from 0 to 1024 [ 73.940977][ T4424] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.013356][ T4422] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 74.120716][ T4432] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.175460][ T4424] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.187856][ T4422] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.318847][ T4424] EXT4-fs (loop3): 1 truncate cleaned up [ 74.318914][ T4424] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.315829][ T4457] loop2: detected capacity change from 0 to 512 [ 75.413707][ T4457] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 75.500177][ T4457] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 75.652500][ T4457] EXT4-fs (loop2): 1 truncate cleaned up [ 75.658246][ T4457] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 75.820871][ T4478] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 76.091924][ T4457] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.50: Logical block already allocated [ 76.280525][ T4467] netlink: 'syz.0.56': attribute type 15 has an invalid length. [ 76.430330][ T4457] EXT4-fs (loop2): Remounting filesystem read-only [ 76.680576][ T4483] loop4: detected capacity change from 0 to 512 [ 76.886896][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.029787][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.052638][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.403907][ T4508] xt_hashlimit: size too large, truncated to 1048576 [ 77.869387][ T4489] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 78.388339][ T4522] loop0: detected capacity change from 0 to 128 [ 78.474913][ T4522] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.640954][ T4312] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.783201][ T4531] loop0: detected capacity change from 0 to 512 [ 78.828482][ T4531] EXT4-fs (loop0): Ignoring removed orlov option [ 78.835700][ T4534] device syzkaller0 entered promiscuous mode [ 78.853259][ T4536] loop2: detected capacity change from 0 to 512 [ 78.861533][ T4531] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 78.884758][ T4537] loop3: detected capacity change from 0 to 256 [ 78.910554][ T4531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 78.972559][ T4536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.058738][ T4537] FAT-fs (loop3): Directory bread(block 64) failed [ 79.093596][ T4531] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.78: corrupted in-inode xattr [ 79.105535][ T4537] FAT-fs (loop3): Directory bread(block 65) failed [ 79.115722][ T4536] EXT4-fs (loop2): 1 truncate cleaned up [ 79.142010][ T4536] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nombcache,nodiscard,,errors=continue. Quota mode: none. [ 79.168514][ T4537] FAT-fs (loop3): Directory bread(block 66) failed [ 79.177216][ T4531] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.78: couldn't read orphan inode 15 (err -117) [ 79.202190][ T4531] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,debug,noblock_validity,noload,nombcache,orlov,min_batch_time=0x0000000000000002,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 79.224560][ T4537] FAT-fs (loop3): Directory bread(block 67) failed [ 79.231272][ T4537] FAT-fs (loop3): Directory bread(block 68) failed [ 79.322131][ T4537] FAT-fs (loop3): Directory bread(block 69) failed [ 79.328768][ T4537] FAT-fs (loop3): Directory bread(block 70) failed [ 79.354522][ T4536] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.81: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 79.364251][ T4537] FAT-fs (loop3): Directory bread(block 71) failed [ 79.413026][ T4537] FAT-fs (loop3): Directory bread(block 72) failed [ 79.419628][ T4537] FAT-fs (loop3): Directory bread(block 73) failed [ 79.758931][ T4195] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 80.927393][ T4561] loop2: detected capacity change from 0 to 256 [ 81.131008][ T4561] FAT-fs (loop2): Directory bread(block 1285) failed [ 81.238541][ T4561] FAT-fs (loop2): Directory bread(block 1285) failed [ 81.252276][ T4561] FAT-fs (loop2): Directory bread(block 1285) failed [ 81.259049][ T4561] FAT-fs (loop2): Directory bread(block 1285) failed [ 81.435306][ T1108] cfg80211: failed to load regulatory.db [ 81.454655][ T26] kauditd_printk_skb: 125 callbacks suppressed [ 81.454667][ T26] audit: type=1326 audit(1771365939.841:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be1f1629 code=0x7ffc0000 [ 81.638187][ T26] audit: type=1326 audit(1771365939.871:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be1f1629 code=0x7ffc0000 [ 81.708928][ T4579] loop2: detected capacity change from 0 to 512 [ 81.762144][ T26] audit: type=1326 audit(1771365939.871:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be1f1629 code=0x7ffc0000 [ 81.879502][ T26] audit: type=1326 audit(1771365939.871:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f89be1f1629 code=0x7ffc0000 [ 81.972503][ T4579] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.050521][ T4579] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.077019][ T26] audit: type=1326 audit(1771365939.871:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be1f1629 code=0x7ffc0000 [ 82.158538][ T4579] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 82.222133][ T26] audit: type=1326 audit(1771365939.871:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be1f1629 code=0x7ffc0000 [ 82.245714][ T4579] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 82.266129][ T4579] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.95: Failed to acquire dquot type 0 [ 82.380101][ T26] audit: type=1326 audit(1771365939.871:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89be1f1629 code=0x7ffc0000 [ 82.404730][ T26] audit: type=1326 audit(1771365939.871:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4569 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f89be1f1629 code=0x7ffc0000 [ 82.409654][ T4590] loop3: detected capacity change from 0 to 2048 [ 83.339277][ T4590] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.810654][ T4615] loop0: detected capacity change from 0 to 512 [ 84.078218][ T4615] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.111997][ T4615] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.239108][ T4625] overlayfs: overlapping lowerdir path [ 85.463066][ T4645] loop2: detected capacity change from 0 to 128 [ 85.538116][ T4645] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 85.577674][ T4649] capability: warning: `syz.0.122' uses 32-bit capabilities (legacy support in use) [ 85.598240][ T4645] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 85.642292][ T4645] FAT-fs (loop2): Filesystem has been set read-only [ 86.036811][ T4660] overlayfs: overlapping lowerdir path [ 87.276595][ T4673] loop3: detected capacity change from 0 to 4096 [ 87.383852][ T4673] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 88.006382][ T4682] chnl_net:caif_netlink_parms(): no params data found [ 88.327360][ T4712] overlayfs: overlapping lowerdir path [ 89.150420][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.157715][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.166815][ T4682] device bridge_slave_0 entered promiscuous mode [ 89.178247][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.185779][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.194310][ T4682] device bridge_slave_1 entered promiscuous mode [ 89.261466][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'. [ 89.330500][ T4682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.342325][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 89.396153][ T4726] loop1: detected capacity change from 0 to 4096 [ 89.405098][ T4682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.501150][ T4682] team0: Port device team_slave_0 added [ 89.519817][ T4731] loop3: detected capacity change from 0 to 512 [ 89.522471][ T4726] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.551118][ T4682] team0: Port device team_slave_1 added [ 89.567418][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 89.567431][ T26] audit: type=1800 audit(1771365947.951:147): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 89.616140][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.623250][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.652989][ T4682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.666929][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.677427][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.719623][ T4682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.724549][ T4731] EXT4-fs (loop3): 1 truncate cleaned up [ 89.766241][ T4682] device hsr_slave_0 entered promiscuous mode [ 89.773210][ T4731] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 89.793685][ T4682] device hsr_slave_1 entered promiscuous mode [ 89.844554][ T4682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.872570][ T4682] Cannot create hsr debugfs directory [ 89.915134][ T4731] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.151: bg 0: block 465: padding at end of block bitmap is not set [ 89.994707][ T4731] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 90.075979][ T4731] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.075979][ T4731] [ 90.166240][ T4731] EXT4-fs (loop3): Total free blocks count 0 [ 90.188804][ T4731] EXT4-fs (loop3): Free/Dirty block details [ 90.197008][ T4739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.153'. [ 90.206612][ T4731] EXT4-fs (loop3): free_blocks=0 [ 90.233455][ T4731] EXT4-fs (loop3): dirty_blocks=8 [ 90.257546][ T4731] EXT4-fs (loop3): Block reservation details [ 90.310602][ T4731] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 90.320930][ T4682] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.421295][ T4682] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.537112][ T4682] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.770477][ T4682] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.811221][ T4745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 91.005005][ T4754] loop1: detected capacity change from 0 to 128 [ 91.030178][ T4757] Zero length message leads to an empty skb [ 91.056273][ T4755] device syzkaller1 entered promiscuous mode [ 91.079323][ T4755] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 91.094707][ T4682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.136456][ T4682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.159535][ T4754] FAT-fs (loop1): Directory bread(block 32) failed [ 91.165093][ T4682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.194297][ T4754] FAT-fs (loop1): Directory bread(block 33) failed [ 91.210631][ T4754] FAT-fs (loop1): Directory bread(block 34) failed [ 91.219416][ T4754] FAT-fs (loop1): Directory bread(block 35) failed [ 91.228025][ T4754] FAT-fs (loop1): Directory bread(block 36) failed [ 91.251313][ T4754] FAT-fs (loop1): Directory bread(block 37) failed [ 91.258379][ T4754] FAT-fs (loop1): Directory bread(block 38) failed [ 91.265703][ T4754] FAT-fs (loop1): Directory bread(block 39) failed [ 91.272915][ T4754] FAT-fs (loop1): Directory bread(block 40) failed [ 91.279549][ T4754] FAT-fs (loop1): Directory bread(block 41) failed [ 91.345288][ T4682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.422215][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 91.956067][ T4682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.999861][ T4780] loop3: detected capacity change from 0 to 128 [ 92.039091][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.057138][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.167255][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.191223][ T4682] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.224685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.240015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.278702][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.285960][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.315064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.368116][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.400735][ T26] audit: type=1326 audit(1771365950.781:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124f887629 code=0x7ffc0000 [ 92.428538][ T4764] chnl_net:caif_netlink_parms(): no params data found [ 92.428699][ T4517] attempt to access beyond end of device [ 92.428699][ T4517] loop3: rw=1, want=1041, limit=128 [ 92.448511][ T26] audit: type=1326 audit(1771365950.811:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124f887629 code=0x7ffc0000 [ 92.472948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.495173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.511056][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.518180][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.533606][ T26] audit: type=1326 audit(1771365950.831:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f124f847ece code=0x7ffc0000 [ 92.564978][ T26] audit: type=1326 audit(1771365950.831:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f124f888957 code=0x7ffc0000 [ 92.629255][ T26] audit: type=1326 audit(1771365950.831:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f124f887629 code=0x7ffc0000 [ 92.667460][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.672250][ T26] audit: type=1326 audit(1771365950.831:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f124f888957 code=0x7ffc0000 [ 92.725614][ T4793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'. [ 92.736060][ T26] audit: type=1326 audit(1771365950.831:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f124f847ece code=0x7ffc0000 [ 92.760804][ T4793] device bridge1 entered promiscuous mode [ 92.768370][ T4795] loop3: detected capacity change from 0 to 1024 [ 92.803114][ T4795] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.816370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.817191][ T26] audit: type=1326 audit(1771365950.831:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124f887629 code=0x7ffc0000 [ 92.891378][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.907454][ T26] audit: type=1326 audit(1771365950.831:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124f887629 code=0x7ffc0000 [ 92.933719][ T4795] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 92.993197][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.016053][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.025716][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.041404][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.063262][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.072721][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.081779][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.092147][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.100797][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.110065][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.121950][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.125421][ T4800] loop1: detected capacity change from 0 to 764 [ 93.149846][ T4795] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.175: missing EA_INODE flag [ 93.167834][ T4795] EXT4-fs (loop3): Remounting filesystem read-only [ 93.185945][ T4795] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.175: error while reading EA inode 11 err=-117 [ 93.209997][ T4795] EXT4-fs (loop3): Remounting filesystem read-only [ 93.217800][ T4795] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.312862][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.349254][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.421049][ T4764] device bridge_slave_0 entered promiscuous mode [ 93.462185][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.479705][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.502889][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 93.534618][ T4764] device bridge_slave_1 entered promiscuous mode [ 93.662292][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 93.788751][ T4764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.837874][ T4764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.025615][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.066355][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.097445][ T4682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.119847][ T4764] team0: Port device team_slave_0 added [ 94.169307][ T4186] syz-executor (4186) used greatest stack depth: 20528 bytes left [ 94.246888][ T4764] team0: Port device team_slave_1 added [ 94.329686][ T4830] device syzkaller0 entered promiscuous mode [ 94.363956][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.370954][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.438963][ T4764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.643082][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.660377][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.711383][ T4764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.916685][ T4764] device hsr_slave_0 entered promiscuous mode [ 94.932437][ T4764] device hsr_slave_1 entered promiscuous mode [ 94.940685][ T4764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.948762][ T4764] Cannot create hsr debugfs directory [ 95.112396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.121287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.220258][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.231235][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.259939][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.275240][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.318713][ T4880] loop3: detected capacity change from 0 to 128 [ 95.332620][ T4682] device veth0_vlan entered promiscuous mode [ 95.392875][ T4682] device veth1_vlan entered promiscuous mode [ 95.486224][ T4862] chnl_net:caif_netlink_parms(): no params data found [ 95.582382][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 95.624168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.642683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.651012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.673591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.742155][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 95.795465][ T4682] device veth0_macvtap entered promiscuous mode [ 95.810157][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.820430][ T4896] device syzkaller0 entered promiscuous mode [ 95.871174][ T4682] device veth1_macvtap entered promiscuous mode [ 95.988380][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.020441][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.038192][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.049917][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.082166][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.118922][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.162355][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.191088][ T4926] loop3: detected capacity change from 0 to 512 [ 96.248910][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.271681][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.290771][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.311659][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.340208][ T4933] netlink: 52 bytes leftover after parsing attributes in process `syz.1.201'. [ 96.367121][ T4926] FAT-fs (loop3): bogus logical sector size 0 [ 96.378224][ T4926] FAT-fs (loop3): Can't find a valid FAT filesystem [ 96.401113][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.410427][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.578373][ T4939] loop3: detected capacity change from 0 to 2048 [ 96.602969][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.619681][ T4941] syz.1.205 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 96.620687][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.651399][ T4862] device bridge_slave_0 entered promiscuous mode [ 96.677100][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.699187][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.711143][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.721957][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.732161][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.743662][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.755684][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.766445][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.777433][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.786855][ T1335] Bluetooth: hci1: command 0x0409 tx timeout [ 96.795128][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.807222][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.847134][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.871853][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.889200][ T4939] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback. [ 96.937113][ T4862] device bridge_slave_1 entered promiscuous mode [ 96.948276][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.958005][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.967174][ T4939] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.984635][ T4682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.034532][ T4682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.043463][ T4682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052241][ T4682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.216022][ T4862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.278687][ T4862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.318711][ T4764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.359068][ T4517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.372775][ T4965] loop1: detected capacity change from 0 to 128 [ 97.386118][ T4517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.406578][ T4764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.484670][ T4764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.504624][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.530743][ T4862] team0: Port device team_slave_0 added [ 97.562942][ T4764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.599135][ T1364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.611260][ T4862] team0: Port device team_slave_1 added [ 97.617350][ T1364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.653189][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.796283][ T144] device hsr_slave_0 left promiscuous mode [ 97.821450][ T144] device hsr_slave_1 left promiscuous mode [ 97.832428][ T1335] Bluetooth: hci3: command 0x040f tx timeout [ 97.867360][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.882280][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.899850][ T4987] loop1: detected capacity change from 0 to 512 [ 97.928082][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.942499][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.951855][ T4990] loop3: detected capacity change from 0 to 1024 [ 97.959150][ T144] device bridge_slave_1 left promiscuous mode [ 97.966856][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.024251][ T4987] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 98.043804][ T144] device bridge_slave_0 left promiscuous mode [ 98.050317][ T4990] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.060893][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.080239][ T4987] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.207142][ T144] device hsr_slave_0 left promiscuous mode [ 98.217044][ T144] device hsr_slave_1 left promiscuous mode [ 98.228497][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.237240][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.245303][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.254083][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.262402][ T144] device bridge_slave_1 left promiscuous mode [ 98.277724][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.287419][ T144] device bridge_slave_0 left promiscuous mode [ 98.295002][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.321173][ T144] device veth1_macvtap left promiscuous mode [ 98.352234][ T144] device veth0_macvtap left promiscuous mode [ 98.358378][ T144] device veth1_vlan left promiscuous mode [ 98.377798][ T144] device veth0_vlan left promiscuous mode [ 98.424990][ T144] device veth1_macvtap left promiscuous mode [ 98.431247][ T144] device veth0_macvtap left promiscuous mode [ 98.437817][ T144] device veth1_vlan left promiscuous mode [ 98.444059][ T144] device veth0_vlan left promiscuous mode [ 98.811014][ T144] team0 (unregistering): Port device team_slave_1 removed [ 98.829330][ T144] team0 (unregistering): Port device team_slave_0 removed [ 98.862235][ T1335] Bluetooth: hci1: command 0x041b tx timeout [ 98.871116][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.888982][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.989027][ T144] bond0 (unregistering): Released all slaves [ 99.189087][ T144] team0 (unregistering): Port device team_slave_1 removed [ 99.211977][ T144] team0 (unregistering): Port device team_slave_0 removed [ 99.227143][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.245157][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.319338][ T144] bond0 (unregistering): Released all slaves [ 99.902359][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 100.063034][ T4998] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.071415][ T4998] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.804632][ T4998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.870636][ T4998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.991008][ T1335] Bluetooth: hci1: command 0x040f tx timeout [ 101.562440][ T4998] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.571367][ T4998] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.580378][ T4998] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.598152][ T4998] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.807410][ T5006] device syzkaller0 entered promiscuous mode [ 101.829733][ T4998] syz.1.217 (4998) used greatest stack depth: 20088 bytes left [ 101.871083][ T4862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.882614][ T4862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.945886][ T4862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.117502][ T4862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.132534][ T4862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.159613][ T5048] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.179820][ T4862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.350334][ T4764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.364950][ T4862] device hsr_slave_0 entered promiscuous mode [ 102.372909][ T4862] device hsr_slave_1 entered promiscuous mode [ 102.391776][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.400366][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.421492][ T4764] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.516216][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.546923][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.591305][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.598520][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.616087][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.678162][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.708812][ T5056] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 102.830741][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.837928][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.354142][ T4764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.389162][ T4764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.442805][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 103.453633][ T5054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 103.488245][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.531880][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.565690][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.630716][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.648499][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.667101][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.686467][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.709673][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.728763][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.752982][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.771712][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.863690][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.872785][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.968022][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 103.968037][ T26] audit: type=1326 audit(1771365962.351:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.1.232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f124f887629 code=0x0 [ 104.038292][ T4862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.079320][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.092407][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.132560][ T4764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.159639][ T4862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.229995][ T4862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.295745][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.309537][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.337339][ T4862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.354036][ T4764] device veth0_vlan entered promiscuous mode [ 104.361812][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.374449][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.389129][ T4557] Bluetooth: hci5: Frame reassembly failed (-84) [ 104.395598][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.403790][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.441124][ T4764] device veth1_vlan entered promiscuous mode [ 104.497094][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.507462][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.569145][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.580838][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.595217][ T4764] device veth0_macvtap entered promiscuous mode [ 104.604750][ T4862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.620920][ T4764] device veth1_macvtap entered promiscuous mode [ 104.636749][ T4862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.660102][ T4862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.679787][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.690734][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.701576][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.712777][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.723870][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.739097][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.759396][ T4764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.770407][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.820999][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.832204][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.843532][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.853802][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.866023][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.893438][ T4764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.900775][ T4862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.939928][ T5089] loop1: detected capacity change from 0 to 512 [ 104.958978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.974457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.993363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.011818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.021059][ T5089] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 105.037296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.046484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.055163][ T5089] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.123992][ T4764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.136794][ T5089] EXT4-fs (loop1): Cannot change journaled quota options when quota turned on [ 105.149328][ T4764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.169542][ T4764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.189807][ T4764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.381029][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.392783][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.408614][ T1364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.628666][ T4862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.719747][ T5101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 106.219006][ T4577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.372834][ T4577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.471416][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 106.477611][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 106.480647][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.535194][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.552698][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.637722][ T4862] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.729039][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.738372][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.772700][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.779821][ T4557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.812813][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.838953][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.872907][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.899259][ T4557] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.906404][ T4557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.923690][ T5109] netlink: 68 bytes leftover after parsing attributes in process `syz.2.239'. [ 106.968457][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.996717][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.055404][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.104428][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.123222][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.144767][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.154429][ T5115] loop1: detected capacity change from 0 to 128 [ 107.183362][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.192752][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.230075][ T4862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.244362][ T26] audit: type=1804 audit(1771365965.631:164): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.243" name="/newroot/70/file0/bus" dev="loop1" ino=1048605 res=1 errno=0 [ 107.285740][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.310608][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.322164][ T26] audit: type=1804 audit(1771365965.651:165): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.243" name="/newroot/70/file0/bus" dev="loop1" ino=1048605 res=1 errno=0 [ 107.352196][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.383104][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.427415][ T26] audit: type=1804 audit(1771365965.651:166): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.243" name="/newroot/70/file0/bus" dev="loop1" ino=1048605 res=1 errno=0 [ 107.857948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.866810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.901084][ T4862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.027232][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.063099][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.116631][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.137327][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.167158][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.179167][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.209150][ T4862] device veth0_vlan entered promiscuous mode [ 108.228774][ T4862] device veth1_vlan entered promiscuous mode [ 108.404596][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.418647][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.429206][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.443941][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.455002][ T5145] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.487423][ T4862] device veth0_macvtap entered promiscuous mode [ 108.503459][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.513759][ T4862] device veth1_macvtap entered promiscuous mode [ 108.544543][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 108.559166][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.569869][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 108.593665][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.616222][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.645062][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.655966][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.667344][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.677402][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.688091][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.700227][ T4862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.714905][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.729966][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.740687][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.752253][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.764405][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.775771][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.786201][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.797191][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.807348][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.818211][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.832509][ T4862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.843925][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.856693][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.875168][ T4862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.888760][ T4862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.898211][ T4862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.907285][ T4862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.227761][ T5150] loop3: detected capacity change from 0 to 512 [ 109.277641][ T5150] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 109.287661][ T5152] loop2: detected capacity change from 0 to 4096 [ 109.298873][ T5150] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 109.350198][ T5152] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 109.362771][ T5150] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,jqfmt=vfsv1,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 109.390069][ T5150] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.660400][ T5162] loop3: detected capacity change from 0 to 512 [ 109.709497][ T5162] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.761196][ T5162] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 109.770223][ T5162] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.787913][ T5162] EXT4-fs error (device loop3): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 109.831258][ T5167] loop2: detected capacity change from 0 to 512 [ 109.846170][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 109.860419][ T5162] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.256: corrupted inode contents [ 109.879238][ T5167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.884441][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 109.903806][ T5162] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #12: comm syz.3.256: mark_inode_dirty error [ 109.917407][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 109.936676][ T5167] EXT4-fs (loop2): 1 truncate cleaned up [ 109.938460][ T5162] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.256: corrupted inode contents [ 109.943102][ T5167] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.985297][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 110.008417][ T5162] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.256: mark_inode_dirty error [ 110.034485][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 110.044165][ T5162] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.256: corrupted inode contents [ 110.073355][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 110.090240][ T5162] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 110.130745][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 110.137888][ T5162] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.256: corrupted inode contents [ 110.154501][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 110.167783][ T5162] EXT4-fs error (device loop3): ext4_truncate:4279: inode #12: comm syz.3.256: mark_inode_dirty error [ 110.182731][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 110.189272][ T5162] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 110.199845][ T5162] EXT4-fs (loop3): Remounting filesystem read-only [ 110.207302][ T5162] EXT4-fs (loop3): 1 truncate cleaned up [ 110.217654][ T5162] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 110.426174][ T144] device hsr_slave_0 left promiscuous mode [ 110.437294][ T144] device hsr_slave_1 left promiscuous mode [ 110.447435][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.457122][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.468392][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.478088][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.486188][ T144] device bridge_slave_1 left promiscuous mode [ 110.493224][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.503522][ T144] device bridge_slave_0 left promiscuous mode [ 110.509826][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.522185][ T144] device veth1_macvtap left promiscuous mode [ 110.528574][ T144] device veth0_macvtap left promiscuous mode [ 110.537659][ T144] device veth1_vlan left promiscuous mode [ 110.544340][ T144] device veth0_vlan left promiscuous mode [ 110.622834][ T4288] Bluetooth: hci5: command 0x1009 tx timeout [ 110.750630][ T144] team0 (unregistering): Port device team_slave_1 removed [ 110.767481][ T144] team0 (unregistering): Port device team_slave_0 removed [ 110.780497][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.798063][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.876632][ T144] bond0 (unregistering): Released all slaves [ 111.222140][ T5137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.277395][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.334527][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.368646][ T5189] loop2: detected capacity change from 0 to 128 [ 111.372732][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.418138][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.427939][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.444549][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.605788][ T5196] loop0: detected capacity change from 0 to 512 [ 111.726313][ T5196] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 111.787349][ T5196] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.908397][ T5196] EXT4-fs (loop0): shut down requested (0) [ 112.033495][ T5218] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.190122][ T5220] loop3: detected capacity change from 0 to 1024 [ 112.266674][ T5220] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,nolazytime,jqfmt=vfsv0,noauto_da_alloc,,errors=continue. Quota mode: none. [ 112.579254][ T5236] loop3: detected capacity change from 0 to 512 [ 112.689819][ T5236] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 112.723691][ T5236] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.769964][ T5236] EXT4-fs error (device loop3): ext4_get_first_dir_block:3597: inode #12: comm syz.3.282: Attempting to read directory block (0) that is past i_size (3) [ 112.852886][ T5236] EXT4-fs (loop3): Remounting filesystem read-only [ 113.158539][ T5255] x_tables: duplicate underflow at hook 2 [ 113.247515][ T154] Bluetooth: hci6: Frame reassembly failed (-84) [ 113.288396][ T5261] netlink: 'syz.3.292': attribute type 27 has an invalid length. [ 113.326625][ T5261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.354931][ T5261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.373216][ T5261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.382712][ T5261] device bridge_slave_0 left promiscuous mode [ 113.390454][ T5261] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.420101][ T5261] device bridge_slave_1 left promiscuous mode [ 113.451395][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.492685][ T5261] bond0: (slave bond_slave_0): Releasing backup interface [ 113.550354][ T5261] bond0: (slave bond_slave_1): Releasing backup interface [ 113.646125][ T5261] team0: Port device team_slave_0 removed [ 113.712569][ T5261] team0: Port device team_slave_1 removed [ 113.740208][ T5261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.757499][ T5261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.769944][ T5261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.782882][ T5261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.974395][ T5276] netlink: 'syz.3.296': attribute type 9 has an invalid length. [ 113.990406][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 114.214599][ T5286] loop2: detected capacity change from 0 to 512 [ 114.261251][ T5286] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 114.278328][ T5286] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.628973][ T5292] loop2: detected capacity change from 0 to 512 [ 114.691135][ T5292] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.704594][ T5292] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.744424][ T5292] process 'syz.2.303' launched './file1' with NULL argv: empty string added [ 115.218516][ T5319] loop3: detected capacity change from 0 to 1024 [ 115.245433][ T5324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.262298][ T21] Bluetooth: hci6: command 0x1003 tx timeout [ 115.278925][ T4192] Bluetooth: hci6: sending frame failed (-49) [ 115.311275][ T5319] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 115.354389][ T5319] System zones: 0-1, 3-36 [ 115.361752][ T5319] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.315: bad orphan inode 134217728 [ 115.379483][ T5327] loop2: detected capacity change from 0 to 128 [ 115.398947][ T5319] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 115.564399][ T5333] loop4: detected capacity change from 0 to 1024 [ 115.631415][ T5333] EXT4-fs (loop4): inline encryption not supported [ 115.648398][ T5333] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.709935][ T5333] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,debug_want_extra_isize=0x000000000000005c,grpquota,noblock_validity,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 115.756426][ T5342] device syzkaller1 entered promiscuous mode [ 115.976409][ T5349] loop3: detected capacity change from 0 to 128 [ 116.044501][ T5349] FAT-fs (loop3): Directory bread(block 32) failed [ 116.057687][ T5349] FAT-fs (loop3): Directory bread(block 33) failed [ 116.067247][ T5349] FAT-fs (loop3): Directory bread(block 34) failed [ 116.082180][ T5349] FAT-fs (loop3): Directory bread(block 35) failed [ 116.129438][ T5349] FAT-fs (loop3): Directory bread(block 36) failed [ 116.147126][ T5349] FAT-fs (loop3): Directory bread(block 37) failed [ 116.154940][ T5349] FAT-fs (loop3): Directory bread(block 38) failed [ 116.161663][ T5349] FAT-fs (loop3): Directory bread(block 39) failed [ 116.178419][ T5349] FAT-fs (loop3): Directory bread(block 40) failed [ 116.191456][ T5349] FAT-fs (loop3): Directory bread(block 41) failed [ 116.203747][ T5359] device ip6erspan0 entered promiscuous mode [ 116.245747][ T5360] device syzkaller1 entered promiscuous mode [ 116.401916][ T26] audit: type=1326 audit(1771365974.781:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbe417629 code=0x7ffc0000 [ 116.489939][ T26] audit: type=1326 audit(1771365974.781:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbe417629 code=0x7ffc0000 [ 116.532727][ T26] audit: type=1326 audit(1771365974.841:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7effbe417629 code=0x7ffc0000 [ 116.618781][ T26] audit: type=1326 audit(1771365974.841:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbe417629 code=0x7ffc0000 [ 116.686782][ T26] audit: type=1326 audit(1771365974.841:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effbe417629 code=0x7ffc0000 [ 116.712620][ T5377] set_capacity_and_notify: 1 callbacks suppressed [ 116.712636][ T5377] loop3: detected capacity change from 0 to 512 [ 116.770896][ T5380] loop0: detected capacity change from 0 to 128 [ 116.810660][ T5377] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 116.830489][ T5386] loop2: detected capacity change from 0 to 128 [ 116.834137][ T5377] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.866465][ T5380] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,bsdgroups,,errors=continue. Quota mode: none. [ 116.884477][ T5380] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.347573][ T4288] Bluetooth: hci6: command 0x1001 tx timeout [ 117.359276][ T4192] Bluetooth: hci6: sending frame failed (-49) [ 117.791109][ T5403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.059364][ T5403] loop2: detected capacity change from 0 to 8192 [ 118.198226][ T4305] loop2: p1 p2 p3 [ 118.235512][ T4305] loop2: partition table partially beyond EOD, truncated [ 118.255174][ T4305] loop2: p1 size 4719617 extends beyond EOD, truncated [ 118.289717][ T4305] loop2: p3 start 117772289 is beyond EOD, truncated [ 118.319401][ T5403] loop2: p1 p2 p3 [ 118.323244][ T5403] loop2: partition table partially beyond EOD, truncated [ 118.330702][ T5403] loop2: p1 size 4719617 extends beyond EOD, truncated [ 118.339321][ T5403] loop2: p3 start 117772289 is beyond EOD, truncated [ 118.569114][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 118.570596][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 118.607488][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 118.634889][ T4305] udevd[4305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 119.075213][ T5437] IPVS: fo: FWM 3 0x00000003 - no destination available [ 119.082975][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 119.809235][ T13] Bluetooth: hci6: command 0x1009 tx timeout [ 119.878729][ T4577] Bluetooth: hci5: Frame reassembly failed (-84) [ 120.480618][ T5377] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.490050][ T5377] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.499741][ T5377] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.509040][ T5377] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.637459][ T5406] device syzkaller0 entered promiscuous mode [ 120.858891][ T5446] loop4: detected capacity change from 0 to 128 [ 121.091540][ T5460] loop3: detected capacity change from 0 to 512 [ 121.194723][ T5460] EXT4-fs (loop3): Ignoring removed oldalloc option [ 121.211088][ T5460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.247917][ T5460] EXT4-fs (loop3): 1 truncate cleaned up [ 121.277138][ T5460] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none. [ 121.315780][ T26] audit: type=1800 audit(1771365979.701:172): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.370" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 121.376341][ T5473] loop4: detected capacity change from 0 to 1024 [ 121.434545][ T5473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.489160][ T26] audit: type=1800 audit(1771365979.871:173): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.373" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 121.497431][ T5473] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.373: Allocating blocks 385-513 which overlap fs metadata [ 121.566362][ T5473] EXT4-fs (loop4): pa ffff8880741bf7e0: logic 16, phys. 129, len 24 [ 121.574859][ T5473] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 121.584989][ T26] audit: type=1800 audit(1771365979.951:174): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.373" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 121.902399][ T23] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.912155][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 121.918245][ T146] Bluetooth: hci5: sending frame failed (-49) [ 122.118616][ T5507] hub 8-0:1.0: USB hub found [ 122.125478][ T5507] hub 8-0:1.0: 1 port detected [ 123.011611][ T5522] loop0: detected capacity change from 0 to 512 [ 123.078496][ T5522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.110362][ T5522] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.801183][ T5540] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.111671][ T4261] Bluetooth: hci5: command 0x1001 tx timeout [ 125.128019][ T146] Bluetooth: hci5: sending frame failed (-49) [ 125.227316][ T5542] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.744523][ T5555] loop0: detected capacity change from 0 to 128 [ 125.887828][ T5555] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.915287][ T5555] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.026807][ T5560] loop4: detected capacity change from 0 to 512 [ 126.185285][ T5560] EXT4-fs (loop4): Ignoring removed nobh option [ 126.271403][ T5560] [ 126.273799][ T5560] ====================================================== [ 126.280833][ T5560] WARNING: possible circular locking dependency detected [ 126.287906][ T5560] syzkaller #0 Not tainted [ 126.292339][ T5560] ------------------------------------------------------ [ 126.299369][ T5560] syz.4.401/5560 is trying to acquire lock: [ 126.305285][ T5560] ffff888058ecebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 126.315423][ T5560] [ 126.315423][ T5560] but task is already holding lock: [ 126.322920][ T5560] ffff88805e424690 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 126.332790][ T5560] [ 126.332790][ T5560] which lock already depends on the new lock. [ 126.332790][ T5560] [ 126.343206][ T5560] [ 126.343206][ T5560] the existing dependency chain (in reverse order) is: [ 126.352235][ T5560] [ 126.352235][ T5560] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 126.359817][ T5560] down_write+0x38/0x60 [ 126.364525][ T5560] ext4_destroy_inline_data+0x24/0xe0 [ 126.370441][ T5560] ext4_writepages+0x670/0x2df0 [ 126.375852][ T5560] do_writepages+0x476/0x6e0 [ 126.380998][ T5560] filemap_fdatawrite_wbc+0x1eb/0x240 [ 126.386919][ T5560] filemap_flush+0xd4/0x130 [ 126.391970][ T5560] ext4_convert_inline_data+0x18b/0x5f0 [ 126.398053][ T5560] ext4_page_mkwrite+0x1df/0x1250 [ 126.403620][ T5560] do_page_mkwrite+0x168/0x3c0 [ 126.408929][ T5560] wp_page_shared+0x16b/0x6d0 [ 126.414158][ T5560] handle_mm_fault+0x1f06/0x4410 [ 126.419655][ T5560] do_user_addr_fault+0x489/0xc80 [ 126.425243][ T5560] exc_page_fault+0x60/0x100 [ 126.430383][ T5560] asm_exc_page_fault+0x22/0x30 [ 126.435781][ T5560] __put_user_nocheck_4+0x3/0x11 [ 126.441270][ T5560] __sys_socketpair+0xb4/0x540 [ 126.446577][ T5560] __x64_sys_socketpair+0x97/0xb0 [ 126.452145][ T5560] do_syscall_64+0x4c/0xa0 [ 126.457105][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.463543][ T5560] [ 126.463543][ T5560] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 126.472010][ T5560] __lock_acquire+0x2c42/0x7d10 [ 126.477416][ T5560] lock_acquire+0x19e/0x400 [ 126.482471][ T5560] percpu_down_read+0x46/0x1b0 [ 126.487790][ T5560] ext4_writepages+0x20f/0x2df0 [ 126.493188][ T5560] do_writepages+0x476/0x6e0 [ 126.498332][ T5560] __writeback_single_inode+0x153/0xda0 [ 126.504427][ T5560] writeback_single_inode+0x3cb/0x8e0 [ 126.510368][ T5560] write_inode_now+0x23b/0x2c0 [ 126.515685][ T5560] iput+0x5ab/0x8a0 [ 126.520062][ T5560] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 126.525989][ T5560] ext4_xattr_block_set+0x4fd/0x2d20 [ 126.531826][ T5560] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 126.538180][ T5560] __ext4_expand_extra_isize+0x301/0x3e0 [ 126.544370][ T5560] __ext4_mark_inode_dirty+0x469/0x700 [ 126.550378][ T5560] ext4_evict_inode+0xa8d/0x1090 [ 126.555866][ T5560] evict+0x4c9/0x8d0 [ 126.560316][ T5560] ext4_orphan_cleanup+0xad2/0x1320 [ 126.566053][ T5560] ext4_fill_super+0x8e25/0x95a0 [ 126.571542][ T5560] mount_bdev+0x287/0x3c0 [ 126.576426][ T5560] legacy_get_tree+0xe6/0x180 [ 126.581656][ T5560] vfs_get_tree+0x88/0x270 [ 126.586654][ T5560] do_new_mount+0x24a/0xa40 [ 126.591707][ T5560] __se_sys_mount+0x2e3/0x3d0 [ 126.596929][ T5560] do_syscall_64+0x4c/0xa0 [ 126.601891][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.608331][ T5560] [ 126.608331][ T5560] other info that might help us debug this: [ 126.608331][ T5560] [ 126.618592][ T5560] Possible unsafe locking scenario: [ 126.618592][ T5560] [ 126.626068][ T5560] CPU0 CPU1 [ 126.631456][ T5560] ---- ---- [ 126.636837][ T5560] lock(&ei->xattr_sem); [ 126.641193][ T5560] lock(&sbi->s_writepages_rwsem); [ 126.648964][ T5560] lock(&ei->xattr_sem); [ 126.655922][ T5560] lock(&sbi->s_writepages_rwsem); [ 126.661143][ T5560] [ 126.661143][ T5560] *** DEADLOCK *** [ 126.661143][ T5560] [ 126.669305][ T5560] 3 locks held by syz.4.401/5560: [ 126.674355][ T5560] #0: ffff88802b9800e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 126.684517][ T5560] #1: ffff88802b980650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 126.694057][ T5560] #2: ffff88805e424690 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 126.704394][ T5560] [ 126.704394][ T5560] stack backtrace: [ 126.710327][ T5560] CPU: 1 PID: 5560 Comm: syz.4.401 Not tainted syzkaller #0 [ 126.717647][ T5560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.727741][ T5560] Call Trace: [ 126.731070][ T5560] [ 126.734026][ T5560] dump_stack_lvl+0x188/0x250 [ 126.738736][ T5560] ? load_image+0x400/0x400 [ 126.743269][ T5560] ? show_regs_print_info+0x20/0x20 [ 126.748509][ T5560] ? print_circular_bug+0x12b/0x1a0 [ 126.753739][ T5560] check_noncircular+0x296/0x330 [ 126.758712][ T5560] ? look_up_lock_class+0x71/0x110 [ 126.763974][ T5560] ? add_chain_block+0x940/0x940 [ 126.768947][ T5560] ? lockdep_lock+0xf1/0x1f0 [ 126.773572][ T5560] ? mark_lock+0x94/0x320 [ 126.777931][ T5560] ? mark_lock+0x94/0x320 [ 126.782286][ T5560] __lock_acquire+0x2c42/0x7d10 [ 126.787195][ T5560] ? finish_task_switch+0x1e4/0x640 [ 126.792426][ T5560] ? verify_lock_unused+0x140/0x140 [ 126.797648][ T5560] ? mark_lock+0x94/0x320 [ 126.802005][ T5560] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 126.808013][ T5560] ? lock_chain_count+0x20/0x20 [ 126.812888][ T5560] ? __queue_work+0x9e2/0xd50 [ 126.817592][ T5560] lock_acquire+0x19e/0x400 [ 126.822120][ T5560] ? ext4_writepages+0x20f/0x2df0 [ 126.827169][ T5560] ? __might_sleep+0xf0/0xf0 [ 126.831782][ T5560] ? read_lock_is_recursive+0x10/0x10 [ 126.837181][ T5560] ? mark_lock+0x94/0x320 [ 126.841551][ T5560] ? __lock_acquire+0x13bc/0x7d10 [ 126.846624][ T5560] percpu_down_read+0x46/0x1b0 [ 126.851428][ T5560] ? ext4_writepages+0x20f/0x2df0 [ 126.856485][ T5560] ext4_writepages+0x20f/0x2df0 [ 126.861374][ T5560] ? rcu_is_watching+0x11/0xa0 [ 126.866176][ T5560] ? lock_release+0xb5/0x8a0 [ 126.870835][ T5560] ? rcu_lock_release+0x5/0x20 [ 126.875629][ T5560] ? verify_lock_unused+0x140/0x140 [ 126.880857][ T5560] ? mark_lock+0x94/0x320 [ 126.885206][ T5560] ? ext4_readpage+0x2e0/0x2e0 [ 126.890007][ T5560] ? __lock_acquire+0x13bc/0x7d10 [ 126.895067][ T5560] ? 0xffffffffa002a000 [ 126.899265][ T5560] ? __lock_acquire+0x7d10/0x7d10 [ 126.904329][ T5560] ? do_raw_spin_lock+0x128/0x2f0 [ 126.909387][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 126.914617][ T5560] ? ext4_readpage+0x2e0/0x2e0 [ 126.919409][ T5560] do_writepages+0x476/0x6e0 [ 126.924024][ T5560] ? __writepage+0x130/0x130 [ 126.928642][ T5560] ? writeback_single_inode+0x3c0/0x8e0 [ 126.934189][ T5560] ? __lock_acquire+0x7d10/0x7d10 [ 126.939217][ T5560] ? do_raw_spin_lock+0x128/0x2f0 [ 126.944300][ T5560] __writeback_single_inode+0x153/0xda0 [ 126.949888][ T5560] writeback_single_inode+0x3cb/0x8e0 [ 126.955310][ T5560] ? write_inode_now+0x2c0/0x2c0 [ 126.960301][ T5560] write_inode_now+0x23b/0x2c0 [ 126.965104][ T5560] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 126.970609][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 126.975846][ T5560] iput+0x5ab/0x8a0 [ 126.979693][ T5560] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 126.985111][ T5560] ? ext4_xattr_ibody_set+0x330/0x330 [ 126.990515][ T5560] ? __ext4_journal_get_write_access+0x2ea/0x6e0 [ 126.996866][ T5560] ? __might_sleep+0xf0/0xf0 [ 127.001482][ T5560] ? ext4_xattr_block_set+0xc2/0x2d20 [ 127.006871][ T5560] ext4_xattr_block_set+0x4fd/0x2d20 [ 127.012184][ T5560] ? ext4_get_inode_loc+0x120/0x120 [ 127.017403][ T5560] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 127.023138][ T5560] ? ext4_xattr_block_find+0x500/0x500 [ 127.028612][ T5560] ? ext4_xattr_block_find+0x433/0x500 [ 127.034091][ T5560] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 127.039930][ T5560] __ext4_expand_extra_isize+0x301/0x3e0 [ 127.045583][ T5560] __ext4_mark_inode_dirty+0x469/0x700 [ 127.051062][ T5560] ext4_evict_inode+0xa8d/0x1090 [ 127.056014][ T5560] ? _raw_spin_unlock+0x24/0x40 [ 127.060881][ T5560] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.066788][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 127.071998][ T5560] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.077904][ T5560] evict+0x4c9/0x8d0 [ 127.081819][ T5560] ? proc_nr_inodes+0x320/0x320 [ 127.086769][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 127.091979][ T5560] ? _raw_spin_unlock+0x24/0x40 [ 127.096842][ T5560] ? iput+0x706/0x8a0 [ 127.100838][ T5560] ext4_orphan_cleanup+0xad2/0x1320 [ 127.106052][ T5560] ? ext4_orphan_del+0xbf0/0xbf0 [ 127.111003][ T5560] ? errseq_check_and_advance+0x62/0x120 [ 127.116647][ T5560] ext4_fill_super+0x8e25/0x95a0 [ 127.121607][ T5560] ? ext4_mount+0x40/0x40 [ 127.125953][ T5560] ? set_blocksize+0x1f3/0x370 [ 127.130729][ T5560] ? sb_set_blocksize+0xa5/0xe0 [ 127.135618][ T5560] mount_bdev+0x287/0x3c0 [ 127.139964][ T5560] ? ext4_mount+0x40/0x40 [ 127.144304][ T5560] legacy_get_tree+0xe6/0x180 [ 127.148992][ T5560] ? ext4_errno_to_code+0x160/0x160 [ 127.154204][ T5560] vfs_get_tree+0x88/0x270 [ 127.158645][ T5560] do_new_mount+0x24a/0xa40 [ 127.163163][ T5560] __se_sys_mount+0x2e3/0x3d0 [ 127.167858][ T5560] ? __x64_sys_mount+0xc0/0xc0 [ 127.172633][ T5560] ? lockdep_hardirqs_on+0x94/0x140 [ 127.177841][ T5560] ? __x64_sys_mount+0x1c/0xc0 [ 127.182621][ T5560] do_syscall_64+0x4c/0xa0 [ 127.187048][ T5560] ? clear_bhb_loop+0x30/0x80 [ 127.191741][ T5560] ? clear_bhb_loop+0x30/0x80 [ 127.196433][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.202348][ T5560] RIP: 0033:0x7f18afbb08ca [ 127.206781][ T5560] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.226405][ T5560] RSP: 002b:00007f18ade08e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.234830][ T5560] RAX: ffffffffffffffda RBX: 00007f18ade08ee0 RCX: 00007f18afbb08ca [ 127.242819][ T5560] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f18ade08ea0 [ 127.250803][ T5560] RBP: 0000200000000180 R08: 00007f18ade08ee0 R09: 0000000000800718 [ 127.258784][ T5560] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 127.266766][ T5560] R13: 00007f18ade08ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 127.274761][ T5560] [ 127.282464][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 127.313833][ T5560] ------------[ cut here ]------------ [ 127.319493][ T5560] EA inode 11 i_nlink=1026 [ 127.319753][ T5560] WARNING: CPU: 0 PID: 5560 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 127.334562][ T5560] Modules linked in: [ 127.338577][ T5560] CPU: 0 PID: 5560 Comm: syz.4.401 Not tainted syzkaller #0 [ 127.346077][ T5560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.356386][ T5560] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 127.363151][ T5560] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 da e6 a1 ff 49 8b 37 48 c7 c7 00 9b 3d 8a 89 da e8 09 e2 94 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 53 d1 9f 07 [ 127.391429][ T5560] RSP: 0018:ffffc90002dff160 EFLAGS: 00010246 [ 127.410489][ T5560] RAX: d603777644100e00 RBX: 0000000000000402 RCX: 0000000000080000 [ 127.449274][ T5560] RDX: ffffc9000d8ba000 RSI: 000000000007ffff RDI: 0000000000080000 [ 127.468846][ T5560] RBP: ffffc90002dff250 R08: ffffc90002dfec87 R09: 1ffff920005bfd90 [ 127.476980][ T5560] R10: dffffc0000000000 R11: fffff520005bfd91 R12: ffff888060def048 [ 127.485026][ T5560] R13: 1ffff1100c1bde48 R14: dffffc0000000000 R15: ffff888060def088 [ 127.493097][ T5560] FS: 00007f18ade096c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 127.502873][ T5560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.509506][ T5560] CR2: 00007f89bc429ff8 CR3: 0000000061c40000 CR4: 00000000003506e0 [ 127.517634][ T5560] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.531768][ T5560] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.546076][ T5560] Call Trace: [ 127.549495][ T5560] [ 127.552852][ T5560] ? ext4_xattr_block_csum+0x560/0x560 [ 127.558442][ T5560] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 127.560746][ T5570] loop0: detected capacity change from 0 to 512 [ 127.564946][ T5560] ? bit_wait+0xc0/0xc0 [ 127.622299][ T5560] ext4_xattr_set_entry+0xed9/0x3ea0 [ 127.645043][ T5571] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.700254][ T5560] ? __sync_dirty_buffer+0x32d/0x370 [ 127.750202][ T5560] ? __ext4_handle_dirty_metadata+0x39d/0x800 [ 127.954912][ T5560] ? ext4_xattr_block_set+0xda0/0x2d20 [ 127.967902][ T5570] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 127.986158][ T5560] ? ext4_xattr_ibody_set+0x330/0x330 [ 127.999607][ T5560] ? ext4_get_inode_loc+0x120/0x120 [ 128.008052][ T5570] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.026085][ T5560] ext4_xattr_ibody_set+0x112/0x330 [ 128.040182][ T5560] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 128.060400][ T5560] __ext4_expand_extra_isize+0x301/0x3e0 [ 128.080416][ T5560] __ext4_mark_inode_dirty+0x469/0x700 [ 128.094740][ T5560] ext4_evict_inode+0xa8d/0x1090 [ 128.103802][ T5560] ? _raw_spin_unlock+0x24/0x40 [ 128.108731][ T5560] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 128.115373][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 128.120691][ T5560] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 128.127247][ T5560] evict+0x4c9/0x8d0 [ 128.131207][ T5560] ? proc_nr_inodes+0x320/0x320 [ 128.136295][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 128.141539][ T5560] ? _raw_spin_unlock+0x24/0x40 [ 128.153955][ T5560] ? iput+0x706/0x8a0 [ 128.158153][ T5560] ext4_orphan_cleanup+0xad2/0x1320 [ 128.163644][ T5560] ? ext4_orphan_del+0xbf0/0xbf0 [ 128.168673][ T5560] ? errseq_check_and_advance+0x62/0x120 [ 128.174499][ T5560] ext4_fill_super+0x8e25/0x95a0 [ 128.179504][ T5560] ? ext4_mount+0x40/0x40 [ 128.184316][ T5560] ? set_blocksize+0x1f3/0x370 [ 128.189094][ T5560] ? sb_set_blocksize+0xa5/0xe0 [ 128.193992][ T5560] mount_bdev+0x287/0x3c0 [ 128.198360][ T5560] ? ext4_mount+0x40/0x40 [ 128.202775][ T5560] legacy_get_tree+0xe6/0x180 [ 128.207482][ T5560] ? ext4_errno_to_code+0x160/0x160 [ 128.213840][ T5560] vfs_get_tree+0x88/0x270 [ 128.218585][ T5560] do_new_mount+0x24a/0xa40 [ 128.223199][ T5560] __se_sys_mount+0x2e3/0x3d0 [ 128.227904][ T5560] ? __x64_sys_mount+0xc0/0xc0 [ 128.238217][ T5560] ? lockdep_hardirqs_on+0x94/0x140 [ 128.243537][ T5560] ? __x64_sys_mount+0x1c/0xc0 [ 128.248344][ T5560] do_syscall_64+0x4c/0xa0 [ 128.252837][ T5560] ? clear_bhb_loop+0x30/0x80 [ 128.257568][ T5560] ? clear_bhb_loop+0x30/0x80 [ 128.262328][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.268261][ T5560] RIP: 0033:0x7f18afbb08ca [ 128.272747][ T5560] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.292439][ T5560] RSP: 002b:00007f18ade08e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.300901][ T5560] RAX: ffffffffffffffda RBX: 00007f18ade08ee0 RCX: 00007f18afbb08ca [ 128.311499][ T5560] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f18ade08ea0 [ 128.320413][ T5560] RBP: 0000200000000180 R08: 00007f18ade08ee0 R09: 0000000000800718 [ 128.328649][ T5560] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 128.336726][ T5560] R13: 00007f18ade08ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 128.344819][ T5560] [ 128.347866][ T5560] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.355162][ T5560] CPU: 1 PID: 5560 Comm: syz.4.401 Not tainted syzkaller #0 [ 128.362465][ T5560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.372538][ T5560] Call Trace: [ 128.375846][ T5560] [ 128.378778][ T5560] dump_stack_lvl+0x188/0x250 [ 128.383461][ T5560] ? show_regs_print_info+0x20/0x20 [ 128.388667][ T5560] ? load_image+0x400/0x400 [ 128.393189][ T5560] panic+0x2e5/0x810 [ 128.397091][ T5560] ? bpf_jit_dump+0xd0/0xd0 [ 128.401603][ T5560] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 128.407597][ T5560] __warn+0x248/0x2b0 [ 128.411616][ T5560] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 128.417626][ T5560] report_bug+0x1b7/0x2e0 [ 128.421963][ T5560] handle_bug+0x3a/0x70 [ 128.426163][ T5560] exc_invalid_op+0x16/0x40 [ 128.430674][ T5560] asm_exc_invalid_op+0x16/0x20 [ 128.435528][ T5560] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 128.442133][ T5560] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 da e6 a1 ff 49 8b 37 48 c7 c7 00 9b 3d 8a 89 da e8 09 e2 94 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 53 d1 9f 07 [ 128.461758][ T5560] RSP: 0018:ffffc90002dff160 EFLAGS: 00010246 [ 128.467826][ T5560] RAX: d603777644100e00 RBX: 0000000000000402 RCX: 0000000000080000 [ 128.475796][ T5560] RDX: ffffc9000d8ba000 RSI: 000000000007ffff RDI: 0000000000080000 [ 128.483772][ T5560] RBP: ffffc90002dff250 R08: ffffc90002dfec87 R09: 1ffff920005bfd90 [ 128.491832][ T5560] R10: dffffc0000000000 R11: fffff520005bfd91 R12: ffff888060def048 [ 128.499819][ T5560] R13: 1ffff1100c1bde48 R14: dffffc0000000000 R15: ffff888060def088 [ 128.507832][ T5560] ? ext4_xattr_block_csum+0x560/0x560 [ 128.513330][ T5560] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 128.518883][ T5560] ? bit_wait+0xc0/0xc0 [ 128.523063][ T5560] ext4_xattr_set_entry+0xed9/0x3ea0 [ 128.528397][ T5560] ? __sync_dirty_buffer+0x32d/0x370 [ 128.533702][ T5560] ? __ext4_handle_dirty_metadata+0x39d/0x800 [ 128.539772][ T5560] ? ext4_xattr_block_set+0xda0/0x2d20 [ 128.545234][ T5560] ? ext4_xattr_ibody_set+0x330/0x330 [ 128.550617][ T5560] ? ext4_get_inode_loc+0x120/0x120 [ 128.555848][ T5560] ext4_xattr_ibody_set+0x112/0x330 [ 128.561076][ T5560] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 128.567020][ T5560] __ext4_expand_extra_isize+0x301/0x3e0 [ 128.572677][ T5560] __ext4_mark_inode_dirty+0x469/0x700 [ 128.578141][ T5560] ext4_evict_inode+0xa8d/0x1090 [ 128.583085][ T5560] ? _raw_spin_unlock+0x24/0x40 [ 128.587948][ T5560] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 128.593874][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 128.599094][ T5560] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 128.604995][ T5560] evict+0x4c9/0x8d0 [ 128.608927][ T5560] ? proc_nr_inodes+0x320/0x320 [ 128.613815][ T5560] ? do_raw_spin_unlock+0x11d/0x230 [ 128.619130][ T5560] ? _raw_spin_unlock+0x24/0x40 [ 128.623992][ T5560] ? iput+0x706/0x8a0 [ 128.627981][ T5560] ext4_orphan_cleanup+0xad2/0x1320 [ 128.633188][ T5560] ? ext4_orphan_del+0xbf0/0xbf0 [ 128.638216][ T5560] ? errseq_check_and_advance+0x62/0x120 [ 128.643852][ T5560] ext4_fill_super+0x8e25/0x95a0 [ 128.648802][ T5560] ? ext4_mount+0x40/0x40 [ 128.653142][ T5560] ? set_blocksize+0x1f3/0x370 [ 128.657948][ T5560] ? sb_set_blocksize+0xa5/0xe0 [ 128.662820][ T5560] mount_bdev+0x287/0x3c0 [ 128.667269][ T5560] ? ext4_mount+0x40/0x40 [ 128.671604][ T5560] legacy_get_tree+0xe6/0x180 [ 128.676378][ T5560] ? ext4_errno_to_code+0x160/0x160 [ 128.681581][ T5560] vfs_get_tree+0x88/0x270 [ 128.686004][ T5560] do_new_mount+0x24a/0xa40 [ 128.690514][ T5560] __se_sys_mount+0x2e3/0x3d0 [ 128.695199][ T5560] ? __x64_sys_mount+0xc0/0xc0 [ 128.699966][ T5560] ? lockdep_hardirqs_on+0x94/0x140 [ 128.705174][ T5560] ? __x64_sys_mount+0x1c/0xc0 [ 128.709967][ T5560] do_syscall_64+0x4c/0xa0 [ 128.714384][ T5560] ? clear_bhb_loop+0x30/0x80 [ 128.719059][ T5560] ? clear_bhb_loop+0x30/0x80 [ 128.723738][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.729631][ T5560] RIP: 0033:0x7f18afbb08ca [ 128.734050][ T5560] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.753795][ T5560] RSP: 002b:00007f18ade08e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.762391][ T5560] RAX: ffffffffffffffda RBX: 00007f18ade08ee0 RCX: 00007f18afbb08ca [ 128.770377][ T5560] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f18ade08ea0 [ 128.778351][ T5560] RBP: 0000200000000180 R08: 00007f18ade08ee0 R09: 0000000000800718 [ 128.786338][ T5560] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 128.794324][ T5560] R13: 00007f18ade08ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 128.802356][ T5560] [ 128.805704][ T5560] Kernel Offset: disabled [ 128.810050][ T5560] Rebooting in 86400 seconds..