last executing test programs: 4.147056862s ago: executing program 1 (id=152): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 3.964714102s ago: executing program 1 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) 3.871365836s ago: executing program 1 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x80) 3.673772877s ago: executing program 1 (id=159): socket$key(0xf, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x4291}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x28, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x8004) 2.886626398s ago: executing program 0 (id=160): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffff8, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2, @multicast1}, 0x10) write$binfmt_elf64(r0, 0x0, 0x440) 2.812818932s ago: executing program 0 (id=161): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000290000003b0000002f0000000000000018"], 0x30}, 0x40440c0) 2.636404882s ago: executing program 0 (id=164): r0 = epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) 2.426485063s ago: executing program 0 (id=167): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) getresgid(&(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)) 2.387843324s ago: executing program 0 (id=169): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.33106995s ago: executing program 4 (id=171): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101203, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 1.178458578s ago: executing program 4 (id=172): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) read$hiddev(r1, &(0x7f0000000000)=""/177, 0xb1) 1.162946729s ago: executing program 4 (id=173): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0xb0, 0x0, 0x170, 0x170, 0xb0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth1_to_team\x00', {0xff}}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xb0}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 1.102762032s ago: executing program 4 (id=174): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setreuid(0xee01, 0xffffffffffffffff) ioprio_set$uid(0x3, 0xee01, 0x2000) 864.060195ms ago: executing program 4 (id=175): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r0, 0x0, 0x40, 0x0, 0x0, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x65, 0x0, 0xfc, 0x0, 0x0, @empty, @remote, {[@rr={0x7, 0xb, 0xaf, [@loopback, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xce, 0x1, 0x7, [{@loopback, 0x5}]}]}}}}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r2, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 641.513026ms ago: executing program 0 (id=176): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="6103010001697d096598692d2d2dcd"], 0xa) 554.919821ms ago: executing program 2 (id=177): r0 = epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) 478.496795ms ago: executing program 2 (id=178): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f00000018c0)='./cgroup/file0\x00', 0x400, &(0x7f0000000340)={[{@map_acorn}, {@nocompress}, {@hide}]}, 0x1, 0x569, &(0x7f0000001300)="$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") chdir(&(0x7f0000000000)='./cgroup\x00') 478.272725ms ago: executing program 3 (id=179): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x36, 0x36, 0x32, 0x35, 0x30, 0x33, 0x38, 0x32, 0x37, 0x36, 0x65, 0x56, 0x38, 0x37, 0x39]}, &(0x7f0000000200)={0x0, "0acc9475f9ecaa60ea21b72932b22f573b38d25b4136f58602a694a03f9d9c64fc62ad6ab01909f43e674174a468c70fac717d3fdb3b7673972bbf1c235055f5", 0x18}, 0x48, r0) keyctl$search(0xa, r1, &(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000700)={'syz', 0x2}, r1) 458.828536ms ago: executing program 3 (id=180): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d2", 0x9}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d14"], 0x10}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 428.964577ms ago: executing program 3 (id=181): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x8, 0x2c, 0x0, @local, @mcast2, {[], @ndisc_rs}}}}, 0x3e) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 306.479424ms ago: executing program 2 (id=182): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 306.250084ms ago: executing program 3 (id=183): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r1 = socket$inet6(0xa, 0x805, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000080)=0x81, 0x4) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 257.293506ms ago: executing program 2 (id=184): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000290000003b0000002f0000000000000018000000000000002900000004"], 0x30}, 0x40440c0) 229.199028ms ago: executing program 3 (id=185): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061990400000000000100000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xffffffffffffff13, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 166.468701ms ago: executing program 2 (id=186): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000300)=[@ioring_restriction_register_op={0x0, 0x26}], 0x1) 156.274852ms ago: executing program 2 (id=187): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x10, 0x5, 0x5, 0x50, @dev={0xfe, 0x80, '\x00', 0x3f}, @empty, 0x7, 0x10, 0xf, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@can_delroute={0x8c, 0x19, 0x8, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x7}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x1, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "f0166b14c8ca17f9"}, 0x7}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "3d90ea752d6a7675"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r6}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "363179a203b0da36"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0xfffffffffffffffa, 0xfffffffffffffff8, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x8, 0x2, 0xfffffffffffffff9, 0x9}}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_SRC_IF={0x8, 0x9, r7}]}, 0x8c}}, 0x40400c0) r8 = socket(0xa, 0x3, 0x87) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000480)={@private2, 0x18, r10}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 132.457293ms ago: executing program 1 (id=188): r0 = epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) 70.293286ms ago: executing program 3 (id=189): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000180)=ANY=[], 0x1, 0x5c3, &(0x7f0000000080)="$eJzs3MFv29YZAPDHxK4NBwuGFWjSNEDZtIfsEFeSFwdGBywaTdtsJVEg5cI5DcXiZMHsblg2YMmly6VDgQ077bz1utOO+6d62T/ggaJkSLJTJ1kbJcDvB1h8FD/yfY+g+UmEyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhCjZbDSaUehkvd29+OmSzSLvHs8thNnl4+39Z2oyZXHiNUQhRNVfWF4Ol+u3Lr95HLo8fL0WLtWzl+o3lsPjC2/98KM3F85VKy5G0YksXraHjx7/+rODg/3fPcc6R0dHX1Sj+R7Temm2015W5lm3vZ3GWZnHG+vrjQ93tsp4K+uk5Z1ykHbjpEjbg7yIrye3Qwgba3G6eiff7W1vtjtpfD35cdzc2Lh1o9VorMcfr/bTdlHmvQ8/Xi2TnazTyXrbw5hq8Y3Wu+FWdSB+kg3iQdruxvG9Bwf7a2clWQU1nyWodVZQq9FqNZutVnP95sbNW43G8uhwPX5joTEjzK6yMP+DlpfujdGBMpwZn+Te+M5O4vCCjpK/zTsFAAAA4HsWDa+xR8Pr8peHra2skzamYo6iuaUHAAAAfAeGX+0vjS4AhHA5RCe//wMAAACvt3+OG6feYxeiKJT9pWh8q0p/74PosB1CWDrewPnZLQ62rkQXRxsZTtYXRnNJejV6uw56exz9zWhy7+n3+v07VHlERbEYPTlOILQPq55/9FwJhL+EK3XMlbv19O54ST3ala2sk64meeejZmi3L54bpHuDP3z+4I8hFMXR+a963YtRuPfgYH/1l785uFvlUt/N+ORw9AuJEz+UmM5lKUzk8vvj+x5HI749vecXhxdiqlF/1euu1P02Jsd/rl793HOM/8vwTh3zzko9XZke/3LVZ3P1lNFPZtHs730wPgCeceQzWVytY65eHx5Y718fLVmcyKJ1Vhat4b54Uu//F9oXx1m8P5XF5L5YOyuLtf8zC4B5uTdbhU7U/xN19wXOct9S3ateqhJ+WnWf+njxqzN7+TK8V8e8d2VhVJHOhzBzRm+cdUZvTJ7Rv6W6hXB6Fv8K1/7x9xB2w7Vx8NNqbNXvX6eqanT4dbXC1yf7/VM9Kf97f+dC1Vg6/G146+GjxzceHH52f//+/uet1tp64yeNxs1WWBwOYzRRewA4RVp8E60M/hwVRdb/RXNjo9ke7KRxkSefxEW2uZ3GWW+QFslOu7edxv0iH+RJ3qkan2abaRmXu/1+XlWSvIj7eZntDZ/8Eo8e/VKm3XZvkCVlv5O2yzRO8t6gnQzizaxM4v7uzztZuZMW8VZexGU/TbKtLGkPsrwXl/lukaSrcVym6URgtpkefRFCVjV7cb+oPkzciT/NO7vdNN5Mq2rZH+RRqDY47ivrbeVFd7jZ1XnvbAB4RTwMoyfYHT/K7uHPxosenVh0aiMsnxEz5yECADNmq/TSvBMCAAAAAAAAAAAAAABOmLxd76ejR/o8221/r2zj9oXTFr07/8QmGyGEhVcgjdeicf4VSGN53juhbiyO/m1fdDtRCOHs4B9UMfM8KwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6f4XAAD//6FOjkE=") quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x82d7) 8.73456ms ago: executing program 4 (id=190): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000100)=ANY=[@ANYBLOB="757466382c73686f776173736f632c696f636861727365743d69736f383835392d322c636865636b3d72656c617865642c6f76657272696465726f636b7065726d2c63727566742c6d61703d6f66662c6e6f726f636b2c6d61703d61636f726e2c6d61703d6f66662c636865636b3d72656c617865642c6d61703d6f66662c696f636861727365743d64656661756c742c6d6f64653d3078303030303030303030303030303166662c00122b283f78031c611daf7f0bf36a5c73e646912be408e7a81c99d07535d0fafeda084c3f6f8a0495c3d0ab05005e15a482afaff7a92f6c342f7316073712"], 0x4, 0xa07, &(0x7f0000001f80)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) dup(0xffffffffffffffff) 0s ago: executing program 1 (id=191): syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x80000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 54.312748][ T4172] cgroup: Unknown subsys name 'net' [ 54.460853][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.965954][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.352320][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 57.394205][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 57.486491][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 57.521860][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.529286][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.537757][ T4185] device bridge_slave_0 entered promiscuous mode [ 57.550670][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 57.574931][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.582250][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.590547][ T4185] device bridge_slave_1 entered promiscuous mode [ 57.624862][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.648525][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 57.658496][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.673551][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.681070][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.689472][ T4187] device bridge_slave_0 entered promiscuous mode [ 57.725227][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.732448][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.740453][ T4187] device bridge_slave_1 entered promiscuous mode [ 57.790546][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.802838][ T4185] team0: Port device team_slave_0 added [ 57.809449][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.816814][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.824555][ T4190] device bridge_slave_0 entered promiscuous mode [ 57.833727][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.841087][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.849338][ T4190] device bridge_slave_1 entered promiscuous mode [ 57.865547][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.881752][ T4185] team0: Port device team_slave_1 added [ 57.925119][ T4187] team0: Port device team_slave_0 added [ 57.933001][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.949959][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.957335][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.964991][ T4192] device bridge_slave_0 entered promiscuous mode [ 57.976964][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.987405][ T4187] team0: Port device team_slave_1 added [ 57.998913][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.006098][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.032258][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.043867][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.051203][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.059027][ T4192] device bridge_slave_1 entered promiscuous mode [ 58.097491][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.104466][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.130886][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.149614][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.171991][ T4190] team0: Port device team_slave_0 added [ 58.180293][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.190141][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.197703][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.206669][ T4188] device bridge_slave_0 entered promiscuous mode [ 58.214135][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.221715][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.247778][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.260073][ T4190] team0: Port device team_slave_1 added [ 58.285503][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.292573][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.300694][ T4188] device bridge_slave_1 entered promiscuous mode [ 58.308656][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.315720][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.341669][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.395272][ T4192] team0: Port device team_slave_0 added [ 58.403188][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.425872][ T4185] device hsr_slave_0 entered promiscuous mode [ 58.432514][ T4185] device hsr_slave_1 entered promiscuous mode [ 58.439580][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.446690][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.479277][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.492670][ T4192] team0: Port device team_slave_1 added [ 58.511643][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.529661][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.536891][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.563222][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.588336][ T4187] device hsr_slave_0 entered promiscuous mode [ 58.595657][ T4187] device hsr_slave_1 entered promiscuous mode [ 58.602351][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.610253][ T4187] Cannot create hsr debugfs directory [ 58.639973][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.647150][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.673663][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.686177][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.693132][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.719315][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.747431][ T4188] team0: Port device team_slave_0 added [ 58.774650][ T4188] team0: Port device team_slave_1 added [ 58.799761][ T4190] device hsr_slave_0 entered promiscuous mode [ 58.806958][ T4190] device hsr_slave_1 entered promiscuous mode [ 58.813497][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.821181][ T4190] Cannot create hsr debugfs directory [ 58.862781][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.869792][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.896882][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.938136][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.945119][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.971146][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.998816][ T4192] device hsr_slave_0 entered promiscuous mode [ 59.007820][ T4192] device hsr_slave_1 entered promiscuous mode [ 59.014438][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.022054][ T4192] Cannot create hsr debugfs directory [ 59.100413][ T4198] Bluetooth: hci4: command 0x0409 tx timeout [ 59.105523][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 59.118064][ T4198] Bluetooth: hci2: command 0x0409 tx timeout [ 59.121189][ T4188] device hsr_slave_0 entered promiscuous mode [ 59.124168][ T4198] Bluetooth: hci3: command 0x0409 tx timeout [ 59.137031][ T4198] Bluetooth: hci0: command 0x0409 tx timeout [ 59.139002][ T4188] device hsr_slave_1 entered promiscuous mode [ 59.150002][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.157781][ T4188] Cannot create hsr debugfs directory [ 59.344834][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.368250][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.377775][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.391245][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.401665][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.419731][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.442097][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.464432][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.477820][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.489071][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.512507][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.524969][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.609732][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.637004][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.646267][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.657318][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.672218][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.698601][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.708584][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.735206][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.745656][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.754350][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.763920][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.771173][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.794823][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.813330][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.822508][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.831748][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.840670][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.847947][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.856572][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.876698][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.889360][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.901588][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.914860][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.925245][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.934233][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.964736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.974303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.983264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.992446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.001196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.013840][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.043631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.052361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.062223][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.070231][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.079543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.088384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.097151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.105526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.114148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.126974][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.137168][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.145761][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.152824][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.169957][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.181801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.190410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.211363][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.222325][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.234730][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.243543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.254001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.264334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.273341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.283081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.292010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.318971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.327686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.341792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.352452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.363854][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.370987][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.392621][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.403605][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.430242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.440983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.454388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.472134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.482844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.493677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.503299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.511988][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.519182][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.528099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.543362][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.570138][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.608865][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.618560][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.629348][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.641465][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.650444][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.658360][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.665981][ T2997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.683720][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.714475][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.728425][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.742484][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.754136][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.765975][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.782337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.791544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.803878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.813124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.833382][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.845071][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.863442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.873951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.883731][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.890867][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.900542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.908688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.917155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.927647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.937182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.944600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.952600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.971743][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.983760][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.028172][ T4187] device veth0_vlan entered promiscuous mode [ 61.050318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.067357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.076179][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.083219][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.092696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.101804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.110346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.118659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.127967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.140762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.149661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.158562][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.165689][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.180719][ T4174] Bluetooth: hci0: command 0x041b tx timeout [ 61.186281][ T2313] Bluetooth: hci3: command 0x041b tx timeout [ 61.188578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.192743][ T2313] Bluetooth: hci2: command 0x041b tx timeout [ 61.205136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.214377][ T2313] Bluetooth: hci4: command 0x041b tx timeout [ 61.215195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.221391][ T2313] Bluetooth: hci1: command 0x041b tx timeout [ 61.251414][ T4187] device veth1_vlan entered promiscuous mode [ 61.268847][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.289615][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.298782][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.307147][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.316340][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.325069][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.333979][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.343267][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.352065][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.361595][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.370461][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.379575][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.389402][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.396515][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.404083][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.412763][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.421493][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.430332][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.450836][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.469194][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.489453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.503556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.519049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.527874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.538959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.547127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.563328][ T4187] device veth0_macvtap entered promiscuous mode [ 61.580677][ T4192] device veth0_vlan entered promiscuous mode [ 61.590596][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.601060][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.611297][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.623944][ T4187] device veth1_macvtap entered promiscuous mode [ 61.642314][ T4192] device veth1_vlan entered promiscuous mode [ 61.651860][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.667803][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.682472][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.692987][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.708028][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.754648][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.774085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.783656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.792773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.801339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.810651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.819559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.830343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.838991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.867012][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.875269][ T4192] device veth0_macvtap entered promiscuous mode [ 61.890727][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.901500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.916794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.932605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.943505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.955021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.966452][ T4192] device veth1_macvtap entered promiscuous mode [ 61.984222][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.994072][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.009914][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.020189][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.058725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.067654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.078744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.088332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.096918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.105142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.113193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.133444][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.151911][ T4185] device veth0_vlan entered promiscuous mode [ 62.162426][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.172376][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.182199][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.194765][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.206535][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.236470][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.245115][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.260748][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.272617][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.287213][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.314282][ T4185] device veth1_vlan entered promiscuous mode [ 62.321968][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.330985][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.340027][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.348848][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.359045][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.385507][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.395197][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.406345][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.415060][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.445381][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.453442][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.464054][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.472113][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.480948][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.497148][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.518313][ T4185] device veth0_macvtap entered promiscuous mode [ 62.527355][ T4190] device veth0_vlan entered promiscuous mode [ 62.534714][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.544095][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.553541][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.562468][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.571002][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.611531][ T4190] device veth1_vlan entered promiscuous mode [ 62.635878][ T4185] device veth1_macvtap entered promiscuous mode [ 62.668872][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.677976][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.702696][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.714502][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.728774][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.739538][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.751761][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.760037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.770016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.779856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.789112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.797798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.825022][ T4190] device veth0_macvtap entered promiscuous mode [ 62.835660][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.846258][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.858055][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.868651][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.880797][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.895815][ T4188] device veth0_vlan entered promiscuous mode [ 62.904773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.916365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.924641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.933660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.943091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.952006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.961067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.969554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.977791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.990577][ T4190] device veth1_macvtap entered promiscuous mode [ 62.999903][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.008796][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.018281][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.027278][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.050653][ T4188] device veth1_vlan entered promiscuous mode [ 63.082766][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.102623][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.129154][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.140993][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.151320][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.162433][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.172299][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.183216][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.194935][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.212257][ T4188] device veth0_macvtap entered promiscuous mode [ 63.221177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.230103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.238565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.247002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.254778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.263532][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 63.269830][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 63.271132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.276154][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 63.290500][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 63.291421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.296796][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 63.310201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.321490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.325619][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.339038][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.350004][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.367262][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.377373][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.388139][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.398400][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.409170][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.421807][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.434006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.441833][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.443653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.455727][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.460090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.474445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.497631][ T4188] device veth1_macvtap entered promiscuous mode [ 63.514451][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.524606][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.533788][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.543268][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.594933][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.620925][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.631401][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.641996][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.651999][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.665418][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.675241][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.686297][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.698317][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.708280][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.717792][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.728190][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.799478][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.809292][ T4262] loop3: detected capacity change from 0 to 512 [ 63.815237][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.826938][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.837500][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.847529][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.858491][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.868888][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.879862][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.892984][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.936251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.944987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.003260][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.020974][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.033875][ T4262] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 64.055384][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.062906][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.111774][ T4262] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.123892][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.162758][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.221279][ T4264] loop0: detected capacity change from 0 to 32768 [ 64.222128][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.276466][ T4264] ======================================================= [ 64.276466][ T4264] WARNING: The mand mount option has been deprecated and [ 64.276466][ T4264] and is ignored by this kernel. Remove the mand [ 64.276466][ T4264] option from the mount to silence this warning. [ 64.276466][ T4264] ======================================================= [ 64.368616][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.404827][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.423864][ T4264] JBD2: Ignoring recovery information on journal [ 64.446982][ T4264] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 64.458769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.477323][ T4264] JBD2: bad block at offset 32 [ 64.478987][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.507447][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.521231][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.521237][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.539289][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.553717][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.593863][ T4264] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 64.612461][ T4275] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 64.761675][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.778797][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.840367][ T4277] device veth3 entered promiscuous mode [ 64.918549][ T4264] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 64.947022][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.952710][ T4264] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 64.954876][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.958353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.986084][ T4264] OCFS2: File system is now read-only. [ 65.000922][ T4264] (syz.0.1,4264,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 65.003148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.025459][ T4264] (syz.0.1,4264,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 65.060674][ T4264] (syz.0.1,4264,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 65.077700][ T4264] (syz.0.1,4264,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 65.089241][ T4264] (syz.0.1,4264,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 65.103466][ T4264] (syz.0.1,4264,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 65.120022][ T4264] (syz.0.1,4264,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 65.151194][ T4264] (syz.0.1,4264,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 65.162985][ T4264] (syz.0.1,4264,0):ocfs2_mknod:298 ERROR: status = -5 [ 65.177604][ T4264] (syz.0.1,4264,0):ocfs2_mknod:502 ERROR: status = -5 [ 65.200844][ T4264] (syz.0.1,4264,0):ocfs2_create:676 ERROR: status = -5 [ 65.371366][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 65.378735][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 65.393319][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 65.404651][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 65.411176][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 65.463934][ T4192] ocfs2: Unmounting device (7,0) on (node local) [ 66.015584][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.023896][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.583698][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.625623][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.986809][ T4280] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.997275][ T4280] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.006353][ T4280] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.015248][ T4280] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.201755][ T4280] syz.4.5 (4280) used greatest stack depth: 19792 bytes left [ 67.298369][ T4312] loop4: detected capacity change from 0 to 736 [ 67.576600][ T4320] loop2: detected capacity change from 0 to 2048 [ 67.755665][ T4320] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 67.813882][ T4328] loop1: detected capacity change from 0 to 512 [ 67.836611][ T4325] loop4: detected capacity change from 0 to 512 [ 67.857008][ T4320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.106627][ T4328] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.18: inode has both inline data and extents flags [ 68.341842][ T4325] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 68.677957][ T4325] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.777683][ T4328] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.18: couldn't read orphan inode 15 (err -117) [ 68.826112][ T26] audit: type=1800 audit(1776872619.635:2): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 68.846526][ T4328] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 68.931178][ T4338] loop3: detected capacity change from 0 to 512 [ 68.999295][ T4328] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 69.056701][ T4340] loop0: detected capacity change from 0 to 512 [ 69.102095][ T4338] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a32,acl,,errors=continue. Quota mode: writeback. [ 69.144785][ T4338] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.164420][ T4344] loop2: detected capacity change from 0 to 512 [ 69.171378][ T4340] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 69.282846][ T4340] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.20: corrupted inode contents [ 69.368696][ T4344] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 69.444864][ T4340] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 69.467202][ T4344] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.467916][ T4357] loop1: detected capacity change from 0 to 1024 [ 69.498419][ T4340] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.20: corrupted inode contents [ 69.557301][ T4357] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,min_batch_time=0x0000000000000400,nodioread_nolock,acl,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 69.595920][ T4340] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.20: mark_inode_dirty error [ 69.616626][ T4340] EXT4-fs (loop0): 1 orphan inode deleted [ 69.622407][ T4340] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,journal_dev=0x00000000000000ff,bsddf,usrjquota=,resuid=0x000000000000ee01,journal_dev=0x000000000000000f,nomblk_io_submit,,errors=continue. Quota mode: none. [ 69.638540][ T4338] ODEBUG: Out of memory. ODEBUG disabled [ 69.677221][ T4357] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.021119][ T4375] loop4: detected capacity change from 0 to 512 [ 70.198357][ T4375] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.26: iget: bad i_size value: 38620345925642 [ 70.223638][ T4377] loop0: detected capacity change from 0 to 4096 [ 70.274421][ T4375] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.26: couldn't read orphan inode 15 (err -117) [ 70.341946][ T4375] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.408200][ T4377] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 70.612438][ T4390] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.26: bg 0: block 5: invalid block bitmap [ 70.650597][ T4392] loop3: detected capacity change from 0 to 64 [ 70.741725][ T4389] loop2: detected capacity change from 0 to 4096 [ 70.768568][ T4392] hfs: unable to open catalog tree [ 70.774525][ T4392] hfs: can't find a HFS filesystem on dev loop3 [ 70.783041][ T4390] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 432 with error 28 [ 70.820442][ T4357] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.23: lblock 0 mapped to illegal pblock 0 (length 6) [ 70.869036][ T4390] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.869036][ T4390] [ 70.911044][ T4389] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 70.953705][ T4390] EXT4-fs (loop4): Total free blocks count 0 [ 70.968287][ T1224] ntfs3: loop0: ino=1b, Internal error [ 70.982447][ T4390] EXT4-fs (loop4): Free/Dirty block details [ 70.988701][ T1224] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 71.003477][ T4357] EXT4-fs (loop1): Remounting filesystem read-only [ 71.012914][ T4390] EXT4-fs (loop4): free_blocks=0 [ 71.053579][ T4390] EXT4-fs (loop4): dirty_blocks=436 [ 71.079819][ T4389] ntfs3: loop2: failed to convert "0000" to iso8859-7 [ 71.101418][ T4390] EXT4-fs (loop4): Block reservation details [ 71.117357][ T4390] EXT4-fs (loop4): i_reserved_data_blocks=436 [ 71.146720][ T4389] ntfs3: loop2: failed to convert name for inode 1e. [ 71.338338][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.347067][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.577969][ T4418] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 71.647826][ T4418] device syzkaller0 entered promiscuous mode [ 71.658633][ T4422] loop3: detected capacity change from 0 to 256 [ 71.681083][ T4418] tipc: Started in network mode [ 71.711791][ T4418] tipc: Node identity f2053a0fc2bc, cluster identity 4711 [ 71.719451][ T4418] tipc: Enabled bearer , priority 0 [ 71.736005][ T4422] exfat: Deprecated parameter 'utf8' [ 71.741716][ T4422] exfat: Deprecated parameter 'utf8' [ 71.769233][ T4422] exfat: Deprecated parameter 'namecase' [ 71.774964][ T4422] exfat: Deprecated parameter 'utf8' [ 71.795357][ T4420] tipc: Resetting bearer [ 71.825551][ T4422] exfat: Deprecated parameter 'namecase' [ 71.841258][ T4415] tipc: Resetting bearer [ 71.890890][ T4415] tipc: Disabling bearer [ 71.913304][ T4422] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 72.038084][ T4428] loop0: detected capacity change from 0 to 512 [ 72.195996][ T4428] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 73.238744][ T4443] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.273524][ T4443] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.326782][ T4446] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.47: inode has both inline data and extents flags [ 73.361756][ T4443] EXT4-fs (loop2): 1 truncate cleaned up [ 73.362974][ T4446] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.47: couldn't read orphan inode 15 (err -117) [ 73.385580][ T4443] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000003,debug_want_extra_isize=0x0000000000000068,lazytime,discard,lazytime,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 73.419102][ T26] audit: type=1326 audit(1776872624.245:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef3928819 code=0x7ffc0000 [ 73.458893][ T4412] XFS (loop1): Mounting V5 Filesystem [ 73.521704][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.545974][ T26] audit: type=1326 audit(1776872624.275:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6ef38e4c6c code=0x7ffc0000 [ 73.570242][ T26] audit: type=1326 audit(1776872624.275:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6ef38e4cce code=0x7ffc0000 [ 73.592748][ T26] audit: type=1326 audit(1776872624.275:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ef39284ab code=0x7ffc0000 [ 73.616609][ T26] audit: type=1326 audit(1776872624.275:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6ef3928819 code=0x7ffc0000 [ 73.657316][ T4412] XFS (loop1): Ending clean mount [ 73.675710][ T26] audit: type=1326 audit(1776872624.275:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef3928819 code=0x7ffc0000 [ 73.698220][ T26] audit: type=1326 audit(1776872624.325:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef3928819 code=0x7ffc0000 [ 73.735796][ T26] audit: type=1326 audit(1776872624.325:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef3928819 code=0x7ffc0000 [ 73.832715][ T26] audit: type=1326 audit(1776872624.325:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6ef3928819 code=0x7ffc0000 [ 73.842400][ T4473] qfq: no options [ 73.911685][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.032433][ T4190] XFS (loop1): Unmounting Filesystem [ 74.430481][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 74.430498][ T26] audit: type=1326 audit(1776872625.255:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a23d819 code=0x7ffc0000 [ 74.545346][ T26] audit: type=1326 audit(1776872625.255:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a23d819 code=0x7ffc0000 [ 74.631650][ T26] audit: type=1326 audit(1776872625.305:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff41a23d819 code=0x7ffc0000 [ 74.732378][ T26] audit: type=1326 audit(1776872625.305:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a23d819 code=0x7ffc0000 [ 74.795782][ T4511] set_capacity_and_notify: 3 callbacks suppressed [ 74.795798][ T4511] loop3: detected capacity change from 0 to 1764 [ 74.823456][ T26] audit: type=1326 audit(1776872625.305:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.1.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41a23d819 code=0x7ffc0000 [ 75.016264][ T4525] team0: No ports can be present during mode change [ 75.097643][ T4529] loop4: detected capacity change from 0 to 164 [ 75.736971][ T4548] loop4: detected capacity change from 0 to 512 [ 75.801481][ T4548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.882343][ T4554] process 'syz.3.91' launched './file1' with NULL argv: empty string added [ 75.947494][ T4548] EXT4-fs (loop4): 1 truncate cleaned up [ 75.970851][ T4559] loop0: detected capacity change from 0 to 512 [ 75.977209][ T4554] netlink: 'syz.3.91': attribute type 13 has an invalid length. [ 75.979388][ T4548] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 76.004762][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 76.043786][ T4548] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.89: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 76.075186][ T4548] EXT4-fs (loop4): Remounting filesystem read-only [ 76.143303][ T4559] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 76.193044][ T4548] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 76.214674][ T4559] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.230460][ T4564] loop2: detected capacity change from 0 to 512 [ 76.254752][ T4548] EXT4-fs (loop4): Remounting filesystem read-only [ 76.272904][ T4548] EXT4-fs warning (device loop4): ext4_rename_delete:3792: inode #2: comm syz.4.89: Deleting old file: nlink 5, error=-117 [ 76.273224][ T4564] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 76.390707][ T4564] EXT4-fs (loop2): 1 truncate cleaned up [ 76.425397][ T4564] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noload,lazytime,noload,resgid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none. [ 76.454145][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 76.524213][ T4569] ksmbd: Unknown IPC event: 0, ignore. [ 76.594937][ T4577] loop1: detected capacity change from 0 to 512 [ 76.661022][ T4577] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.700001][ T4577] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.100: bad orphan inode 131083 [ 76.737463][ T4577] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 77.002662][ T26] audit: type=1800 audit(1776872627.825:19): pid=4577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.100" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 77.082391][ T4591] EXT4-fs (loop1): shut down requested (2) [ 77.152604][ T26] audit: type=1326 audit(1776872627.975:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe314c6a819 code=0x7ffc0000 [ 77.207209][ T26] audit: type=1326 audit(1776872627.975:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe314c6a819 code=0x7ffc0000 [ 77.232926][ T26] audit: type=1326 audit(1776872627.975:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe314c6a819 code=0x7ffc0000 [ 77.256035][ T26] audit: type=1326 audit(1776872627.975:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4592 comm="syz.2.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe314c6a819 code=0x7ffc0000 [ 77.374185][ T4598] netlink: 128 bytes leftover after parsing attributes in process `syz.2.109'. [ 77.841521][ T4620] loop4: detected capacity change from 0 to 512 [ 77.885016][ T4620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.996432][ T4620] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.119: bad orphan inode 131083 [ 78.008421][ T4620] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 78.283092][ T4632] EXT4-fs (loop4): shut down requested (2) [ 78.335748][ T4634] netlink: 360 bytes leftover after parsing attributes in process `syz.1.124'. [ 78.473496][ T4606] loop2: detected capacity change from 0 to 32768 [ 78.674875][ T4606] XFS (loop2): Mounting V5 Filesystem [ 78.796623][ T4606] XFS (loop2): Ending clean mount [ 78.983456][ T4606] XFS (loop2): User initiated shutdown received. [ 79.016165][ T4606] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 79.083547][ T4606] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 79.158778][ T4188] XFS (loop2): Unmounting Filesystem [ 79.590831][ T4667] loop3: detected capacity change from 0 to 1024 [ 79.705854][ T4671] device bridge0 entered promiscuous mode [ 79.712106][ T4671] device macvlan2 entered promiscuous mode [ 79.727008][ T4667] EXT4-fs (loop3): Ignoring removed bh option [ 79.738483][ T4673] loop4: detected capacity change from 0 to 1024 [ 79.843411][ T4667] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 79.897169][ T4673] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.003885][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 80.003901][ T26] audit: type=1804 audit(1776872630.825:25): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.138" name="/newroot/28/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 80.085258][ T4667] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 81.445394][ T4723] syz.1.159 uses obsolete (PF_INET,SOCK_PACKET) [ 81.578778][ T1107] cfg80211: failed to load regulatory.db [ 82.284807][ T4732] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.499960][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.507401][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.672633][ T26] audit: type=1326 audit(1776872633.495:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671fd3b819 code=0x7ffc0000 [ 82.718219][ T26] audit: type=1326 audit(1776872633.495:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671fd3b819 code=0x7ffc0000 [ 82.746601][ T26] audit: type=1326 audit(1776872633.495:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671fd3b819 code=0x7ffc0000 [ 82.769488][ T26] audit: type=1326 audit(1776872633.495:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f671fd3b819 code=0x7ffc0000 [ 82.793051][ T26] audit: type=1326 audit(1776872633.495:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671fd3b819 code=0x7ffc0000 [ 82.822598][ T26] audit: type=1326 audit(1776872633.495:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f671fd3b819 code=0x7ffc0000 [ 82.851983][ T26] audit: type=1326 audit(1776872633.495:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4746 comm="syz.0.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671fd3b819 code=0x7ffc0000 [ 83.399551][ T4753] loop4: detected capacity change from 0 to 512 [ 83.421851][ T4753] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.467980][ T4753] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.170: bad orphan inode 131083 [ 83.479402][ T4753] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 83.483104][ T4723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.563439][ T4723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.594566][ T26] audit: type=1800 audit(1776872634.415:33): pid=4753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.170" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 83.663653][ T4755] EXT4-fs (loop4): shut down requested (2) [ 84.114038][ T4723] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.123551][ T4723] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.133232][ T4723] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.146970][ T4723] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.226655][ T4768] loop4: detected capacity change from 0 to 512 [ 84.262286][ T4768] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 84.279050][ T4768] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.310608][ T26] audit: type=1800 audit(1776872635.135:34): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.175" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 84.548427][ T4781] loop2: detected capacity change from 0 to 164 [ 84.621296][ T4781] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 84.974772][ T4803] loop3: detected capacity change from 0 to 736 [ 85.086924][ T4185] [ 85.089321][ T4185] ====================================================== [ 85.096360][ T4185] WARNING: possible circular locking dependency detected [ 85.103386][ T4185] syzkaller #0 Not tainted [ 85.107986][ T4185] ------------------------------------------------------ [ 85.115012][ T4185] syz-executor/4185 is trying to acquire lock: [ 85.121250][ T4185] ffff88802b4bf938 ((wq_completion)loop4){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 85.130998][ T4185] [ 85.130998][ T4185] but task is already holding lock: [ 85.138354][ T4185] ffff88802053a468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 85.147152][ T4185] [ 85.147152][ T4185] which lock already depends on the new lock. [ 85.147152][ T4185] [ 85.157552][ T4185] [ 85.157552][ T4185] the existing dependency chain (in reverse order) is: [ 85.166575][ T4185] [ 85.166575][ T4185] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 85.174058][ T4185] __mutex_lock_common+0x1e3/0x2400 [ 85.179785][ T4185] mutex_lock_killable_nested+0x17/0x20 [ 85.185972][ T4185] lo_open+0x6a/0x100 [ 85.190475][ T4185] blkdev_get_whole+0x90/0x390 [ 85.195759][ T4185] blkdev_get_by_dev+0x2d0/0xa60 [ 85.201239][ T4185] blkdev_open+0x12d/0x2c0 [ 85.206176][ T4185] do_dentry_open+0x7ff/0xf80 [ 85.211374][ T4185] path_openat+0x26f5/0x2fa0 [ 85.216487][ T4185] do_filp_open+0x1e2/0x410 [ 85.221509][ T4185] do_sys_openat2+0x150/0x4b0 [ 85.226709][ T4185] __x64_sys_openat+0x135/0x160 [ 85.232076][ T4185] do_syscall_64+0x4c/0xa0 [ 85.237014][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.243429][ T4185] [ 85.243429][ T4185] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 85.251250][ T4185] __mutex_lock_common+0x1e3/0x2400 [ 85.256971][ T4185] mutex_lock_nested+0x17/0x20 [ 85.262255][ T4185] blkdev_get_by_dev+0x157/0xa60 [ 85.267713][ T4185] swsusp_check+0xa1/0x2b0 [ 85.272651][ T4185] software_resume+0xc6/0x3b0 [ 85.277852][ T4185] resume_store+0xe4/0x130 [ 85.283256][ T4185] kernfs_fop_write_iter+0x379/0x4c0 [ 85.289063][ T4185] vfs_write+0x745/0xd60 [ 85.293920][ T4185] ksys_write+0x152/0x260 [ 85.298778][ T4185] do_syscall_64+0x4c/0xa0 [ 85.303802][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.310212][ T4185] [ 85.310212][ T4185] -> #5 (system_transition_mutex/1){+.+.}-{3:3}: [ 85.318723][ T4185] __mutex_lock_common+0x1e3/0x2400 [ 85.324442][ T4185] mutex_lock_nested+0x17/0x20 [ 85.329727][ T4185] software_resume+0x7c/0x3b0 [ 85.335014][ T4185] resume_store+0xe4/0x130 [ 85.339972][ T4185] kernfs_fop_write_iter+0x379/0x4c0 [ 85.345781][ T4185] vfs_write+0x745/0xd60 [ 85.350627][ T4185] ksys_write+0x152/0x260 [ 85.355474][ T4185] do_syscall_64+0x4c/0xa0 [ 85.360409][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.366820][ T4185] [ 85.366820][ T4185] -> #4 (&of->mutex){+.+.}-{3:3}: [ 85.374026][ T4185] __mutex_lock_common+0x1e3/0x2400 [ 85.379746][ T4185] mutex_lock_nested+0x17/0x20 [ 85.385037][ T4185] kernfs_seq_start+0x51/0x3c0 [ 85.390325][ T4185] seq_read_iter+0x3c4/0xd50 [ 85.395526][ T4185] vfs_read+0x759/0xd60 [ 85.400198][ T4185] ksys_read+0x152/0x260 [ 85.404957][ T4185] do_syscall_64+0x4c/0xa0 [ 85.409892][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.416306][ T4185] [ 85.416306][ T4185] -> #3 (&p->lock){+.+.}-{3:3}: [ 85.423351][ T4185] __mutex_lock_common+0x1e3/0x2400 [ 85.429170][ T4185] mutex_lock_nested+0x17/0x20 [ 85.434540][ T4185] seq_read_iter+0xad/0xd50 [ 85.439565][ T4185] proc_reg_read_iter+0x1a9/0x270 [ 85.445115][ T4185] generic_file_splice_read+0x3ef/0x5f0 [ 85.451175][ T4185] splice_direct_to_actor+0x423/0xc10 [ 85.457155][ T4185] do_splice_direct+0x1d4/0x2f0 [ 85.462529][ T4185] do_sendfile+0x5fc/0xeb0 [ 85.467464][ T4185] __se_sys_sendfile64+0x141/0x1a0 [ 85.473094][ T4185] do_syscall_64+0x4c/0xa0 [ 85.478031][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.484472][ T4185] [ 85.484472][ T4185] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 85.491858][ T4185] lo_write_bvec+0x1a0/0x780 [ 85.496986][ T4185] loop_process_work+0x1b46/0x24a0 [ 85.502621][ T4185] process_one_work+0x85f/0x1010 [ 85.508090][ T4185] worker_thread+0xaa6/0x1290 [ 85.513284][ T4185] kthread+0x436/0x520 [ 85.517867][ T4185] ret_from_fork+0x1f/0x30 [ 85.522808][ T4185] [ 85.522808][ T4185] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 85.532180][ T4185] process_one_work+0x7bb/0x1010 [ 85.537729][ T4185] worker_thread+0xaa6/0x1290 [ 85.542944][ T4185] kthread+0x436/0x520 [ 85.547616][ T4185] ret_from_fork+0x1f/0x30 [ 85.552551][ T4185] [ 85.552551][ T4185] -> #0 ((wq_completion)loop4){+.+.}-{0:0}: [ 85.560630][ T4185] __lock_acquire+0x2c42/0x7d10 [ 85.566001][ T4185] lock_acquire+0x19e/0x400 [ 85.571021][ T4185] flush_workqueue+0x16c/0x13d0 [ 85.576386][ T4185] drain_workqueue+0xcf/0x380 [ 85.581583][ T4185] destroy_workqueue+0x7b/0xb20 [ 85.586972][ T4185] __loop_clr_fd+0x234/0xb90 [ 85.592078][ T4185] blkdev_put+0x53f/0x7d0 [ 85.596923][ T4185] deactivate_locked_super+0x93/0xf0 [ 85.602725][ T4185] cleanup_mnt+0x42d/0x4e0 [ 85.607664][ T4185] task_work_run+0x125/0x1a0 [ 85.612778][ T4185] exit_to_user_mode_loop+0x10f/0x130 [ 85.618671][ T4185] exit_to_user_mode_prepare+0xee/0x180 [ 85.624733][ T4185] syscall_exit_to_user_mode+0x16/0x40 [ 85.630714][ T4185] do_syscall_64+0x58/0xa0 [ 85.635648][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.642064][ T4185] [ 85.642064][ T4185] other info that might help us debug this: [ 85.642064][ T4185] [ 85.652380][ T4185] Chain exists of: [ 85.652380][ T4185] (wq_completion)loop4 --> &disk->open_mutex --> &lo->lo_mutex [ 85.652380][ T4185] [ 85.665847][ T4185] Possible unsafe locking scenario: [ 85.665847][ T4185] [ 85.673291][ T4185] CPU0 CPU1 [ 85.678650][ T4185] ---- ---- [ 85.684015][ T4185] lock(&lo->lo_mutex); [ 85.688314][ T4185] lock(&disk->open_mutex); [ 85.695420][ T4185] lock(&lo->lo_mutex); [ 85.702179][ T4185] lock((wq_completion)loop4); [ 85.707027][ T4185] [ 85.707027][ T4185] *** DEADLOCK *** [ 85.707027][ T4185] [ 85.715163][ T4185] 2 locks held by syz-executor/4185: [ 85.720441][ T4185] #0: ffff88802059f518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 85.729751][ T4185] #1: ffff88802053a468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 85.738979][ T4185] [ 85.738979][ T4185] stack backtrace: [ 85.744864][ T4185] CPU: 1 PID: 4185 Comm: syz-executor Not tainted syzkaller #0 [ 85.752405][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 85.762462][ T4185] Call Trace: [ 85.765741][ T4185] [ 85.768678][ T4185] dump_stack_lvl+0x188/0x250 [ 85.773357][ T4185] ? load_image+0x400/0x400 [ 85.777857][ T4185] ? show_regs_print_info+0x20/0x20 [ 85.783057][ T4185] ? print_circular_bug+0x12b/0x1a0 [ 85.788429][ T4185] check_noncircular+0x296/0x330 [ 85.793458][ T4185] ? add_chain_block+0x940/0x940 [ 85.798391][ T4185] ? lockdep_lock+0xf1/0x1f0 [ 85.802982][ T4185] ? mark_lock+0x94/0x320 [ 85.807308][ T4185] __lock_acquire+0x2c42/0x7d10 [ 85.812171][ T4185] ? verify_lock_unused+0x140/0x140 [ 85.817751][ T4185] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 85.823738][ T4185] ? verify_lock_unused+0x140/0x140 [ 85.828942][ T4185] ? verify_lock_unused+0x140/0x140 [ 85.834139][ T4185] ? memset+0x1e/0x40 [ 85.838121][ T4185] lock_acquire+0x19e/0x400 [ 85.842625][ T4185] ? flush_workqueue+0x150/0x13d0 [ 85.847649][ T4185] ? __mutex_trylock_common+0x155/0x260 [ 85.853201][ T4185] ? read_lock_is_recursive+0x10/0x10 [ 85.858574][ T4185] ? __init_swait_queue_head+0xa5/0x150 [ 85.864124][ T4185] flush_workqueue+0x16c/0x13d0 [ 85.868973][ T4185] ? flush_workqueue+0x150/0x13d0 [ 85.873998][ T4185] ? __lock_acquire+0x7d10/0x7d10 [ 85.879030][ T4185] ? lock_chain_count+0x20/0x20 [ 85.883921][ T4185] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 85.889402][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 85.894702][ T4185] ? rcu_work_rcufn+0x120/0x120 [ 85.899555][ T4185] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 85.905197][ T4185] ? finish_wait+0xc0/0x1d0 [ 85.909700][ T4185] drain_workqueue+0xcf/0x380 [ 85.914382][ T4185] destroy_workqueue+0x7b/0xb20 [ 85.919239][ T4185] __loop_clr_fd+0x234/0xb90 [ 85.923832][ T4185] ? lo_release+0x172/0x1f0 [ 85.928331][ T4185] ? lo_open+0x100/0x100 [ 85.932568][ T4185] blkdev_put+0x53f/0x7d0 [ 85.936902][ T4185] deactivate_locked_super+0x93/0xf0 [ 85.942419][ T4185] cleanup_mnt+0x42d/0x4e0 [ 85.946863][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 85.952081][ T4185] task_work_run+0x125/0x1a0 [ 85.956684][ T4185] exit_to_user_mode_loop+0x10f/0x130 [ 85.962069][ T4185] exit_to_user_mode_prepare+0xee/0x180 [ 85.967615][ T4185] syscall_exit_to_user_mode+0x16/0x40 [ 85.973077][ T4185] do_syscall_64+0x58/0xa0 [ 85.977539][ T4185] ? clear_bhb_loop+0x30/0x80 [ 85.982394][ T4185] ? clear_bhb_loop+0x30/0x80 [ 85.987071][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.992970][ T4185] RIP: 0033:0x7f6ef3929a57 [ 85.997413][ T4185] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 86.017019][ T4185] RSP: 002b:00007ffeece16828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.025438][ T4185] RAX: 0000000000000000 RBX: 00007f6ef39be048 RCX: 00007f6ef3929a57 [ 86.033411][ T4185] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeece168e0 [ 86.041385][ T4185] RBP: 00007ffeece168e0 R08: 00007ffeece178e0 R09: 00000000ffffffff [ 86.049360][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeece17970 [ 86.057331][ T4185] R13: 00007f6ef39be048 R14: 0000000000014bd4 R15: 00007ffeece179b0 [ 86.065307][ T4185] [ 86.085577][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 86.096366][ T4805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.209454][ T4808] loop4: detected capacity change from 0 to 1764 [ 86.258377][ T4808] ISO 9660 Extensions: Microsoft Joliet Level 3 [ 87.430804][ T4773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512