last executing test programs: 1.821796438s ago: executing program 4 (id=297): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) setfsuid(0x0) 1.788089301s ago: executing program 4 (id=299): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0xdd3) openat(0xffffffffffffff9c, 0x0, 0xa0142, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 681.490747ms ago: executing program 3 (id=323): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800450000200000e0f518125685d7301e000000000000004e20000c907861100000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 557.297097ms ago: executing program 3 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_gettime(r2, &(0x7f0000000000)) 539.301948ms ago: executing program 3 (id=325): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000024, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 433.886106ms ago: executing program 3 (id=329): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) 354.120342ms ago: executing program 1 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0) 353.961142ms ago: executing program 3 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 353.784772ms ago: executing program 0 (id=333): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x22020400) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x4000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 349.203183ms ago: executing program 1 (id=334): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 290.083447ms ago: executing program 3 (id=336): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x5, 0xff}, &(0x7f0000000180)=0x8) 289.849987ms ago: executing program 2 (id=337): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 285.416418ms ago: executing program 0 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a3100000000be00010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 255.52801ms ago: executing program 1 (id=339): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1b1280, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 191.803745ms ago: executing program 2 (id=340): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5882d087378cd098) 191.612845ms ago: executing program 1 (id=341): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0a0000000000007211b4000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 191.454545ms ago: executing program 2 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) 191.295815ms ago: executing program 4 (id=343): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgget$private(0x0, 0x8) 190.931295ms ago: executing program 0 (id=344): semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x8, 0x1000}], 0x1, &(0x7f0000000280)={0x0, 0x989680}) 146.109058ms ago: executing program 1 (id=345): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 145.867129ms ago: executing program 2 (id=346): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2a3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 140.684149ms ago: executing program 0 (id=347): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x10000001}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 116.814881ms ago: executing program 4 (id=348): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') read$rfkill(r2, &(0x7f0000000200), 0x8) 62.149705ms ago: executing program 0 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) 61.971735ms ago: executing program 2 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 61.796735ms ago: executing program 4 (id=351): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/nfsfs\x00') 56.729245ms ago: executing program 0 (id=352): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x8, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) 45.668996ms ago: executing program 2 (id=353): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x102c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000200), 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 1.30596ms ago: executing program 4 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x40006) 0s ago: executing program 1 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 30.993069][ T4308] cgroup: Unknown subsys name 'net' [ 31.220597][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.475599][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.641816][ T4321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.643532][ T4321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.651535][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.652863][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.654322][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.655794][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.656216][ T4336] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.657125][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.658659][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.659971][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.660608][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.662137][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.663050][ T4336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.664254][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.665355][ T4336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.666584][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.667453][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.669082][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.669532][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.671057][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.672560][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.674072][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.676253][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.678629][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.680503][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.682408][ T4335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.683708][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.684949][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.686900][ T4328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.688158][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.779464][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 32.819542][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 32.828887][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.836338][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.838120][ T4325] device bridge_slave_0 entered promiscuous mode [ 32.849779][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.851010][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.852445][ T4325] device bridge_slave_1 entered promiscuous mode [ 32.863996][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 32.872627][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.875214][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 32.884252][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.891337][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.892559][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.893964][ T4319] device bridge_slave_0 entered promiscuous mode [ 32.908652][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.909853][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.911395][ T4319] device bridge_slave_1 entered promiscuous mode [ 32.920081][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.921284][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.922671][ T4323] device bridge_slave_0 entered promiscuous mode [ 32.927045][ T4325] team0: Port device team_slave_0 added [ 32.932247][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.933443][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.934827][ T4323] device bridge_slave_1 entered promiscuous mode [ 32.940535][ T4325] team0: Port device team_slave_1 added [ 32.953509][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.955760][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.962261][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.963455][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.964914][ T4320] device bridge_slave_0 entered promiscuous mode [ 32.967031][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.969362][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.971264][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.972388][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.976566][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.979584][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 32.981521][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.982659][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.987085][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.989785][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.990850][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.992311][ T4320] device bridge_slave_1 entered promiscuous mode [ 33.015111][ T4319] team0: Port device team_slave_0 added [ 33.016954][ T4323] team0: Port device team_slave_0 added [ 33.022149][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.024086][ T4319] team0: Port device team_slave_1 added [ 33.027606][ T4323] team0: Port device team_slave_1 added [ 33.036409][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.044022][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.045212][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.046762][ T4326] device bridge_slave_0 entered promiscuous mode [ 33.053628][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.054789][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.058978][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.062920][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.064007][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.065461][ T4326] device bridge_slave_1 entered promiscuous mode [ 33.089193][ T4325] device hsr_slave_0 entered promiscuous mode [ 33.128403][ T4325] device hsr_slave_1 entered promiscuous mode [ 33.190661][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.191721][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.195522][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.197872][ T4320] team0: Port device team_slave_0 added [ 33.199223][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.200848][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.204507][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.211573][ T4320] team0: Port device team_slave_1 added [ 33.212715][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.213940][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.217987][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.223384][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.225889][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.237865][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.239100][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.243051][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.250852][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.251817][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.255394][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.259000][ T4326] team0: Port device team_slave_0 added [ 33.268629][ T4326] team0: Port device team_slave_1 added [ 33.309273][ T4319] device hsr_slave_0 entered promiscuous mode [ 33.358467][ T4319] device hsr_slave_1 entered promiscuous mode [ 33.398261][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.399484][ T4319] Cannot create hsr debugfs directory [ 33.439448][ T4323] device hsr_slave_0 entered promiscuous mode [ 33.478413][ T4323] device hsr_slave_1 entered promiscuous mode [ 33.538246][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.539515][ T4323] Cannot create hsr debugfs directory [ 33.589083][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.628389][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.668250][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.669462][ T4320] Cannot create hsr debugfs directory [ 33.670955][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.672104][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.676206][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.684729][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.685914][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.692632][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.779289][ T4326] device hsr_slave_0 entered promiscuous mode [ 33.818298][ T4326] device hsr_slave_1 entered promiscuous mode [ 33.858212][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.859343][ T4326] Cannot create hsr debugfs directory [ 33.906569][ T4325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.950497][ T4325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.999144][ T4325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.050312][ T4325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.085705][ T4323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.125190][ T4323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.159079][ T4323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.207144][ T4323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.282743][ T4319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.321933][ T4319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.349247][ T4319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.392832][ T4319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.445249][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.484977][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.532532][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.572028][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.629230][ T4326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.671046][ T4326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.709129][ T4326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.728539][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 34.729762][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 34.730217][ T4321] Bluetooth: hci1: command 0x0409 tx timeout [ 34.730695][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 34.730745][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 34.762778][ T4326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.825405][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.829850][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.831849][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.833843][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.837603][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.846601][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.848856][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.851906][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.853954][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.865292][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.866869][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.869210][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.870444][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.872026][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.873695][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.875162][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.876283][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.877569][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.880387][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.889341][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.890761][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.892328][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.893980][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.895414][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.896492][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.897733][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.899828][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.901376][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.903125][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.904654][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.906121][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.907596][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.909314][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.910604][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.912071][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.914696][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.920370][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.923120][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.925664][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.931729][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.933212][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.934614][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.935727][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.937049][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.942220][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.943636][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.944811][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.946323][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.953661][ T4325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.955463][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.963034][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.968752][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.970476][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.973412][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.975115][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.977080][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.978825][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.980372][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.982141][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.983663][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.985217][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.986677][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.987974][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.989178][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.993435][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.995128][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.996532][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.002303][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.003750][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.007321][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.009365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.013428][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.014897][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.016827][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.021524][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.027913][ T4320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.030331][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.032873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.034633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.036126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.037651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.040687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.042203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.048782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.050304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.064373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.065942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.067312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.069115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.070657][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.071712][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.073093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.074781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.076344][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.077397][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.079560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.081487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.082984][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.084115][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.085475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.087048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.089344][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.090522][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.091928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.093428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.095017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.096512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.098068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.100682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.102263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.103908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.105351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.106637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.108012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.109619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.115270][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.116802][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.121812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.123596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.125147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.126643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.130370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.131610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.132773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.134274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.140771][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.142509][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.145638][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.152104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.153461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.155065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.156637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.158031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.162307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.163806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.165236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.170743][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.177036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.178600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.200502][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.202093][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.203738][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.205264][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.212231][ T4323] device veth0_vlan entered promiscuous mode [ 35.215519][ T4323] device veth1_vlan entered promiscuous mode [ 35.223711][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.225285][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.226880][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.230098][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.240407][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.241939][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.246240][ T4323] device veth0_macvtap entered promiscuous mode [ 35.250214][ T4323] device veth1_macvtap entered promiscuous mode [ 35.253841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.255457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.256957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.259292][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.264827][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.266286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.267554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.276301][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.277815][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.280054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.281454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.292434][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.293589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.294765][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.295925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.297821][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.302446][ T4325] device veth0_vlan entered promiscuous mode [ 35.306185][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.311633][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.313667][ T4325] device veth1_vlan entered promiscuous mode [ 35.315753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.317090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.319172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.326265][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.327383][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.329351][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.341056][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.342539][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.343923][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.345302][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.347604][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.349412][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.350915][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.355976][ T4325] device veth0_macvtap entered promiscuous mode [ 35.358105][ T4325] device veth1_macvtap entered promiscuous mode [ 35.362592][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.364066][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.365616][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.367076][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.369696][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.381352][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.382752][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.384169][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.385835][ T4319] device veth0_vlan entered promiscuous mode [ 35.394903][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.396518][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.398779][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.400328][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.402228][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.403809][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.405568][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.419935][ T4320] device veth0_vlan entered promiscuous mode [ 35.422694][ T4319] device veth1_vlan entered promiscuous mode [ 35.425599][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.427191][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.429270][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.430767][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.432274][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.433658][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.439707][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.441310][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.443334][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.452205][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.453746][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.456788][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.458133][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.460080][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.461503][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.464410][ T1590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.469230][ T1590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.470967][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.472576][ T4320] device veth1_vlan entered promiscuous mode [ 35.484654][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.485952][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.486516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.488859][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.490275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.491773][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.493136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.494732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.500907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.502398][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.503853][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.505141][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.512195][ T4320] device veth0_macvtap entered promiscuous mode [ 35.523144][ T4326] device veth0_vlan entered promiscuous mode [ 35.525590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.527100][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.531601][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.533171][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.534930][ T4319] device veth0_macvtap entered promiscuous mode [ 35.536906][ T4320] device veth1_macvtap entered promiscuous mode [ 35.545145][ T4319] device veth1_macvtap entered promiscuous mode [ 35.553380][ T4326] device veth1_vlan entered promiscuous mode [ 35.555798][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.557142][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.565974][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.567511][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.569785][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.571319][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.572754][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.574267][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.577886][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.579896][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.581460][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.583138][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.592891][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.599979][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.601527][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.605304][ T1590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.606576][ T1590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.607873][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.611351][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.612866][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.614430][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.616064][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.617802][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.621656][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.622929][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.624335][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.632588][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.637692][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.640262][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.641779][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.643274][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.645970][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.661521][ T27] audit: type=1326 audit(35.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f5b9e8 code=0x7ffc0000 [ 35.664826][ T27] audit: type=1326 audit(35.650:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=90 compat=0 ip=0xffff91f5b9e8 code=0x7ffc0000 [ 35.667929][ T27] audit: type=1326 audit(35.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f5b9e8 code=0x7ffc0000 [ 35.679521][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.680991][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.682441][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.683859][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.687101][ T4326] device veth0_macvtap entered promiscuous mode [ 35.689099][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.690714][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.692345][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.693901][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.695332][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.697056][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.703213][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.706546][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.707964][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.710393][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.712765][ T4326] device veth1_macvtap entered promiscuous mode [ 35.717390][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.721660][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.723136][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.724770][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.726273][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.727874][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.732178][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.733663][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.735739][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.745580][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.747160][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.751131][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.757126][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.764234][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.766222][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.769014][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.770537][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.772047][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.773580][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.781053][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.783781][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.785308][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.786653][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.788108][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.790356][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.793186][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.794679][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.796140][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.797629][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.807467][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.815200][ T4445] netlink: 40 bytes leftover after parsing attributes in process `wޣ'. [ 35.815940][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.829595][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.831051][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.832550][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.833929][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.857623][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.859306][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.862542][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.865866][ T1590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.867130][ T1590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.877824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.941497][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.942826][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.946319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.957187][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.957419][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.960021][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.961643][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.961706][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.966857][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.022320][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.023567][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.025307][ T255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.115431][ T4459] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16'. [ 36.147627][ T4462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 36.508324][ T4462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 36.515909][ T27] audit: type=1326 audit(36.500:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.20" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5b9e8 code=0x7ffc0000 [ 36.520577][ T27] audit: type=1326 audit(36.500:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.20" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=77 compat=0 ip=0xffffbab5b9e8 code=0x7ffc0000 [ 36.524572][ T27] audit: type=1326 audit(36.500:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.3.20" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5b9e8 code=0x7ffc0000 [ 36.558340][ T4462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 36.656731][ T4488] loop4: detected capacity change from 0 to 512 [ 36.672493][ T4488] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.687398][ T27] audit: type=1326 audit(36.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5b9e8 code=0x7ffc0000 [ 36.698440][ T27] audit: type=1326 audit(36.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5b9e8 code=0x7ffc0000 [ 36.703731][ T4488] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 36.716139][ T27] audit: type=1326 audit(36.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5b9e8 code=0x7ffc0000 [ 36.719563][ T4488] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.25: bg 0: block 248: padding at end of block bitmap is not set [ 36.722119][ T27] audit: type=1326 audit(36.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffbab5b9e8 code=0x7ffc0000 [ 36.725866][ T4488] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.25: Failed to acquire dquot type 1 [ 36.744453][ T4488] EXT4-fs (loop4): 1 truncate cleaned up [ 36.747642][ T4488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.753875][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 36.806466][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 36.808309][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 36.808444][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 36.809278][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 36.810583][ T4335] Bluetooth: hci0: command 0x041b tx timeout [ 36.811393][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 36.933596][ T4509] loop4: detected capacity change from 0 to 512 [ 36.989419][ T4509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.034446][ T4521] loop2: detected capacity change from 0 to 1024 [ 37.035762][ T4521] ======================================================= [ 37.035762][ T4521] WARNING: The mand mount option has been deprecated and [ 37.035762][ T4521] and is ignored by this kernel. Remove the mand [ 37.035762][ T4521] option from the mount to silence this warning. [ 37.035762][ T4521] ======================================================= [ 37.056863][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 37.093687][ T4525] process 'syz.4.40' launched './file1' with NULL argv: empty string added [ 37.164142][ T4533] Zero length message leads to an empty skb [ 37.186216][ T4534] loop1: detected capacity change from 0 to 512 [ 37.213088][ T4534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 37.214478][ T4534] System zones: 0-2, 18-18, 34-34 [ 37.222245][ T4534] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.43: bg 0: block 248: padding at end of block bitmap is not set [ 37.225364][ T4534] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.43: Failed to acquire dquot type 1 [ 37.242571][ T4541] loop4: detected capacity change from 0 to 1024 [ 37.780133][ T4541] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.826218][ T4541] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 37.843077][ T4534] EXT4-fs (loop1): 1 truncate cleaned up [ 37.864191][ T4534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.984197][ T4541] JBD2: no valid journal superblock found [ 37.985100][ T4541] EXT4-fs (loop4): error loading journal [ 38.000953][ T4549] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET) [ 38.128896][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 38.204644][ T4546] Process accounting resumed [ 38.537261][ T4570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 38.564181][ T4575] loop4: detected capacity change from 0 to 1024 [ 38.565805][ T4575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.596376][ T4575] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.629486][ T4584] netlink: 'syz.3.61': attribute type 4 has an invalid length. [ 38.665603][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 38.808470][ T4337] Bluetooth: hci5: command 0x1003 tx timeout [ 38.809863][ T4321] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 38.888645][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 38.889704][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 38.890593][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 38.891519][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 38.892479][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 38.895183][ T4600] device veth1_to_bond entered promiscuous mode [ 38.896992][ T4599] device veth1_to_bond left promiscuous mode [ 39.156761][ T4620] loop1: detected capacity change from 0 to 512 [ 39.183999][ T4620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.267259][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 39.441441][ T4642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'. [ 39.442901][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 39.620448][ T4651] xt_hashlimit: max too large, truncated to 1048576 [ 39.754382][ T4663] mmap: syz.2.94 (4663) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.877444][ T4673] loop3: detected capacity change from 0 to 2048 [ 39.922575][ T4673] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.986094][ T4673] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.001177][ T4673] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1808 with error 28 [ 40.010444][ T4673] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.010444][ T4673] [ 40.014418][ T4673] EXT4-fs (loop3): Total free blocks count 0 [ 40.016740][ T4673] EXT4-fs (loop3): Free/Dirty block details [ 40.027758][ T4673] EXT4-fs (loop3): free_blocks=2415919104 [ 40.032946][ T4673] EXT4-fs (loop3): dirty_blocks=1808 [ 40.033759][ T4673] EXT4-fs (loop3): Block reservation details [ 40.042310][ T4673] EXT4-fs (loop3): i_reserved_data_blocks=113 [ 40.166341][ T4687] openvswitch: netlink: Missing key (keys=40, expected=100) [ 40.232915][ T4693] IPv6: Can't replace route, no match found [ 40.276076][ T4698] ipt_ECN: cannot use operation on non-tcp rule [ 40.283408][ T4698] netlink: 96 bytes leftover after parsing attributes in process `syz.4.110'. [ 40.305536][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 40.657975][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 40.767287][ T4714] loop0: detected capacity change from 0 to 764 [ 40.797847][ T4714] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 40.816903][ T4714] Symlink component flag not implemented [ 40.817958][ T4714] Symlink component flag not implemented (7) [ 40.968830][ T4321] Bluetooth: hci1: command 0x0419 tx timeout [ 40.970673][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 40.971855][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 40.971877][ T4335] Bluetooth: hci0: command 0x0419 tx timeout [ 40.972821][ T4337] Bluetooth: hci2: command 0x0419 tx timeout [ 40.986964][ T4716] loop4: detected capacity change from 0 to 512 [ 41.059881][ T4716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.346934][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 41.399210][ T27] kauditd_printk_skb: 109 callbacks suppressed [ 41.399218][ T27] audit: type=1326 audit(41.390:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.400431][ T27] audit: type=1326 audit(41.390:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.400533][ T27] audit: type=1326 audit(41.390:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.400785][ T27] audit: type=1326 audit(41.390:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.400843][ T27] audit: type=1326 audit(41.390:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.400947][ T27] audit: type=1326 audit(41.390:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.401048][ T27] audit: type=1326 audit(41.390:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.401167][ T27] audit: type=1326 audit(41.390:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.401217][ T27] audit: type=1326 audit(41.390:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.405365][ T27] audit: type=1326 audit(41.390:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.1.130" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffff8d35b9e8 code=0x7ffc0000 [ 41.585892][ T4760] loop1: detected capacity change from 0 to 1024 [ 41.594700][ T4760] EXT4-fs: inline encryption not supported [ 41.594711][ T4760] EXT4-fs: Ignoring removed orlov option [ 41.605342][ T4758] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 41.629641][ T4760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c018, mo2=0002] [ 41.629672][ T4760] System zones: 0-1, 3-12 [ 41.630181][ T4760] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.637512][ T4766] __nla_validate_parse: 3 callbacks suppressed [ 41.637529][ T4766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 42.037992][ T4789] loop4: detected capacity change from 0 to 256 [ 42.135621][ T4791] netlink: 'syz.2.150': attribute type 10 has an invalid length. [ 42.136955][ T4791] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 42.256623][ T4807] loop2: detected capacity change from 0 to 1024 [ 42.297732][ T4807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.313908][ T4807] EXT4-fs warning (device loop2): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 42.422086][ T4323] EXT4-fs (loop2): unmounting filesystem. [ 42.446900][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 42.466907][ T4823] loop1: detected capacity change from 0 to 764 [ 42.475745][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 42.585159][ T4546] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.587931][ T4546] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.594039][ T4837] loop0: detected capacity change from 0 to 1024 [ 42.647697][ T4844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.172'. [ 42.678588][ T4837] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.708397][ T4846] fido_id[4846]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.235952][ T4869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 43.514723][ T4871] netlink: 'syz.2.182': attribute type 4 has an invalid length. [ 43.595024][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 43.639621][ T4874] loop9: detected capacity change from 0 to 7 [ 43.642824][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.644389][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.646456][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.647869][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.649632][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.651220][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.652874][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.654430][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.659830][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.661375][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.667606][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.668997][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.673421][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.674960][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.677412][ T4874] ldm_validate_partition_table(): Disk read failed. [ 43.687075][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.688664][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.694647][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.696142][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.697985][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.699505][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.701529][ T4874] Dev loop9: unable to read RDB block 0 [ 43.703659][ T4874] loop9: unable to read partition table [ 43.704888][ T4874] loop9: partition table beyond EOD, truncated [ 43.705987][ T4874] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 43.705987][ T4874] ) failed (rc=-5) [ 43.749091][ T4881] device syzkaller1 entered promiscuous mode [ 43.798087][ T4887] loop3: detected capacity change from 0 to 512 [ 43.807128][ T4887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.811577][ T4887] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.842638][ T4887] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.190: Allocating blocks 41-42 which overlap fs metadata [ 43.845253][ T4887] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.190: Allocating blocks 41-42 which overlap fs metadata [ 43.847937][ T4887] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.190: Failed to acquire dquot type 1 [ 43.853144][ T4887] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 43.856373][ T4887] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.190: corrupted inode contents [ 43.860632][ T4887] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #12: comm syz.3.190: mark_inode_dirty error [ 43.862844][ T4887] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.190: corrupted inode contents [ 43.864964][ T4887] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.190: mark_inode_dirty error [ 43.867101][ T4887] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.190: corrupted inode contents [ 43.872660][ T4887] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 43.874418][ T4887] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.190: corrupted inode contents [ 43.876875][ T4887] EXT4-fs error (device loop3): ext4_truncate:4318: inode #12: comm syz.3.190: mark_inode_dirty error [ 43.918964][ T4887] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 43.930025][ T4887] EXT4-fs (loop3): 1 truncate cleaned up [ 43.931004][ T4887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.955340][ T4887] EXT4-fs (loop3): shut down requested (1) [ 43.964279][ T4899] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.985388][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 44.003176][ T4902] loop1: detected capacity change from 0 to 512 [ 44.015863][ T4902] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.023248][ T4907] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.044121][ T4902] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.045753][ T4902] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.071344][ T4902] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.197: corrupted inode contents [ 44.082032][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 44.083310][ T4902] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #16: comm syz.1.197: mark_inode_dirty error [ 44.092123][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 44.094962][ T4902] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.197: corrupted inode contents [ 44.100355][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 44.101439][ T4902] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.197: mark_inode_dirty error [ 44.103557][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 44.104598][ T4902] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.197: corrupted inode contents [ 44.115249][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 44.116362][ T4902] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 44.127660][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 44.128854][ T4902] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #16: comm syz.1.197: corrupted inode contents [ 44.131034][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 44.132159][ T4902] EXT4-fs error (device loop1): ext4_truncate:4318: inode #16: comm syz.1.197: mark_inode_dirty error [ 44.134038][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 44.135107][ T4902] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 44.137092][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 44.138912][ T4902] EXT4-fs (loop1): 1 truncate cleaned up [ 44.140406][ T4419] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:6: Failed to release dquot type 1 [ 44.143533][ T4419] EXT4-fs (loop1): Remounting filesystem read-only [ 44.144961][ T4902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.181515][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 44.251037][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 44.288985][ T4926] netlink: 'syz.1.207': attribute type 13 has an invalid length. [ 44.385053][ T4926] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.386588][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.408268][ T4337] Bluetooth: hci5: command 0x1003 tx timeout [ 44.409863][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 44.809791][ T4926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.823402][ T4926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.114352][ T4926] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.115851][ T4926] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.117249][ T4926] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.118746][ T4926] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.439616][ T4963] loop9: detected capacity change from 0 to 7 [ 45.441612][ T4963] ldm_validate_partition_table(): Disk read failed. [ 45.446128][ T4963] Dev loop9: unable to read RDB block 0 [ 45.460638][ T4963] loop9: unable to read partition table [ 45.461688][ T4963] loop9: partition table beyond EOD, truncated [ 45.462664][ T4963] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 45.462664][ T4963] ) failed (rc=-5) [ 45.530433][ T4974] loop3: detected capacity change from 0 to 4096 [ 45.538637][ T4974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.563983][ T4974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.570835][ T4974] EXT4-fs error (device loop3): __ext4_remount:6618: comm syz.3.228: Abort forced by user [ 45.573278][ T4974] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 45.575287][ T4974] EXT4-fs error (device loop3): __ext4_remount:6618: comm syz.3.228: Abort forced by user [ 45.577785][ T4974] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 45.588681][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 45.629661][ T4985] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 45.682500][ T4991] netlink: 'syz.1.235': attribute type 4 has an invalid length. [ 45.803861][ T5007] loop2: detected capacity change from 0 to 1024 [ 45.844340][ T5007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.886054][ T5007] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2749: inode #13: comm syz.2.243: corrupted in-inode xattr [ 45.894154][ T5007] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 45.922382][ T4323] EXT4-fs (loop2): unmounting filesystem. [ 46.042128][ T5033] loop3: detected capacity change from 0 to 764 [ 46.083348][ T5033] Symlink component flag not implemented [ 46.084258][ T5033] Symlink component flag not implemented [ 46.092404][ T5037] loop4: detected capacity change from 0 to 128 [ 46.093853][ T5037] EXT4-fs: Ignoring removed oldalloc option [ 46.099852][ T5033] Symlink component flag not implemented (129) [ 46.100888][ T5033] Symlink component flag not implemented (6) [ 46.107942][ T5037] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.125701][ T5033] rock: directory entry would overflow storage [ 46.128718][ T5033] rock: sig=0x4f50, size=4, remaining=3 [ 46.130881][ T5040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'. [ 46.135000][ T5033] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 46.137060][ T5037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.190954][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 46.235864][ T5048] loop3: detected capacity change from 0 to 1024 [ 46.255483][ T5048] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.273513][ T5048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.287301][ T5048] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.260: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 46.301755][ T5048] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.260: couldn't read orphan inode 11 (err -117) [ 46.307461][ T5048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.364878][ T5058] loop1: detected capacity change from 0 to 256 [ 46.370490][ T5048] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.260: Invalid block bitmap block 0 in block_group 0 [ 46.374334][ T5061] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 46.401172][ T5048] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.260: Failed to acquire dquot type 0 [ 46.406838][ T5058] FAT-fs (loop1): bogus number of FAT sectors [ 46.407987][ T5058] FAT-fs (loop1): Can't find a valid FAT filesystem [ 46.444295][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 46.568660][ T5069] loop0: detected capacity change from 0 to 2048 [ 46.611645][ T5069] EXT4-fs (loop0): failed to initialize system zone (-117) [ 46.612925][ T5069] EXT4-fs (loop0): mount failed [ 46.958012][ T5103] loop4: detected capacity change from 0 to 2048 [ 46.983710][ T5107] loop9: detected capacity change from 0 to 7 [ 46.985626][ T5107] ldm_validate_partition_table(): Disk read failed. [ 46.986947][ T5107] Dev loop9: unable to read RDB block 0 [ 46.988139][ T5107] loop9: unable to read partition table [ 46.996096][ T5103] Alternate GPT is invalid, using primary GPT. [ 46.997406][ T5103] loop4: p2 p3 p7 [ 46.998477][ T5107] loop9: partition table beyond EOD, truncated [ 46.999549][ T5107] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 46.999549][ T5107] ) failed (rc=-5) [ 47.053615][ T27] kauditd_printk_skb: 660 callbacks suppressed [ 47.053622][ T27] audit: type=1326 audit(47.040:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5108 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255b9e8 code=0x7ffc0000 [ 47.068088][ T27] audit: type=1326 audit(47.040:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5108 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9255b9e8 code=0x7ffc0000 [ 47.077006][ T27] audit: type=1326 audit(47.050:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5108 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=449 compat=0 ip=0xffff9255b9e8 code=0x7ffc0000 [ 47.088699][ T27] audit: type=1326 audit(47.070:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 47.096368][ T4527] udevd[4527]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.098496][ T27] audit: type=1326 audit(47.080:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 47.100991][ T5114] loop1: detected capacity change from 0 to 1024 [ 47.101992][ T27] audit: type=1326 audit(47.080:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 47.117502][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.123062][ T5114] EXT4-fs: Ignoring removed oldalloc option [ 47.124123][ T5114] EXT4-fs: Ignoring removed bh option [ 47.126584][ T27] audit: type=1326 audit(47.080:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 47.126682][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 47.132280][ T5114] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.136705][ T27] audit: type=1326 audit(47.080:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 47.151013][ T27] audit: type=1326 audit(47.080:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 47.154637][ T27] audit: type=1326 audit(47.080:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.4.290" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b5b9e8 code=0x7ffc0000 [ 47.179766][ T5114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.254852][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 47.363549][ T5125] loop4: detected capacity change from 0 to 512 [ 47.366457][ T5125] ext4: Unknown parameter 'seclabel' [ 47.413443][ T5127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.295'. [ 47.421596][ T5129] loop1: detected capacity change from 0 to 512 [ 47.451653][ T5129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.473081][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 47.836771][ T5149] loop1: detected capacity change from 0 to 512 [ 47.848726][ T5149] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.864333][ T5149] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.305: bg 0: block 384: padding at end of block bitmap is not set [ 47.867308][ T5149] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 47.869233][ T5149] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.305: attempt to clear invalid blocks 983260 len 1 [ 47.890678][ T5149] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.305: Invalid inode table block 0 in block_group 0 [ 47.918665][ T5149] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 47.920474][ T5149] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 47.923013][ T5149] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.305: Invalid inode table block 0 in block_group 0 [ 47.926184][ T5149] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 47.933039][ T5149] EXT4-fs error (device loop1): ext4_truncate:4318: inode #11: comm syz.1.305: mark_inode_dirty error [ 47.935350][ T5149] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 47.940340][ T5149] EXT4-fs (loop1): 1 truncate cleaned up [ 47.941343][ T5149] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.950806][ T5149] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.305: Invalid inode bitmap blk 0 in block_group 0 [ 47.969915][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 48.138564][ T5163] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.310'. [ 48.140175][ T5163] netlink: zone id is out of range [ 48.141026][ T5163] netlink: zone id is out of range [ 48.141826][ T5163] netlink: zone id is out of range [ 48.143136][ T5163] netlink: zone id is out of range [ 48.143908][ T5163] netlink: zone id is out of range [ 48.145144][ T5163] netlink: zone id is out of range [ 48.183225][ T5163] netlink: set zone limit has 8 unknown bytes [ 48.450560][ T5186] loop3: detected capacity change from 0 to 512 [ 48.452684][ T5186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.454065][ T5186] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.464431][ T5186] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.321: Allocating blocks 41-42 which overlap fs metadata [ 48.467173][ T5186] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.321: Allocating blocks 41-42 which overlap fs metadata [ 48.471936][ T5186] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.321: Failed to acquire dquot type 1 [ 48.474137][ T5186] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 48.476606][ T5186] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.321: corrupted inode contents [ 48.479316][ T5186] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #12: comm syz.3.321: mark_inode_dirty error [ 48.481212][ T5186] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.321: corrupted inode contents [ 48.483400][ T5186] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.321: mark_inode_dirty error [ 48.485218][ T5186] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.321: corrupted inode contents [ 48.487630][ T5186] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 48.492987][ T5186] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #12: comm syz.3.321: corrupted inode contents [ 48.495342][ T5186] EXT4-fs error (device loop3): ext4_truncate:4318: inode #12: comm syz.3.321: mark_inode_dirty error [ 48.497211][ T5186] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 48.502002][ T5186] EXT4-fs (loop3): 1 truncate cleaned up [ 48.503021][ T5186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.506876][ T5186] EXT4-fs (loop3): unmounting filesystem. [ 48.735596][ T5196] loop9: detected capacity change from 0 to 7 [ 48.737054][ C0] blk_print_req_error: 47 callbacks suppressed [ 48.737060][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.739455][ C0] buffer_io_error: 47 callbacks suppressed [ 48.739464][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.744369][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.745934][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.747296][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.748836][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.750350][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.751837][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.753202][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.754737][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.756167][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.757522][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.761347][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.762865][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.764204][ T5196] ldm_validate_partition_table(): Disk read failed. [ 48.765498][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.766889][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.771945][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.773332][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.784700][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.786256][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.787855][ T5196] Dev loop9: unable to read RDB block 0 [ 48.791805][ T5196] loop9: unable to read partition table [ 48.794925][ T5196] loop9: partition table beyond EOD, truncated [ 48.795912][ T5196] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 48.795912][ T5196] ) failed (rc=-5) [ 48.948914][ T5212] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 48.990617][ T5222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.338'. [ 49.253412][ T5251] loop0: detected capacity change from 0 to 4096 [ 49.263519][ T5253] loop2: detected capacity change from 0 to 512 [ 49.271258][ T5251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.295925][ T5253] [ 49.296290][ T5253] ====================================================== [ 49.297405][ T5253] WARNING: possible circular locking dependency detected [ 49.298502][ T5253] syzkaller #0 Not tainted [ 49.299225][ T5253] ------------------------------------------------------ [ 49.300320][ T5253] syz.2.353/5253 is trying to acquire lock: [ 49.301204][ T5253] ffff0000f908eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x188/0x284c [ 49.302744][ T5253] [ 49.302744][ T5253] but task is already holding lock: [ 49.303883][ T5253] ffff0000f5dddb10 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 49.305366][ T5253] [ 49.305366][ T5253] which lock already depends on the new lock. [ 49.305366][ T5253] [ 49.306868][ T5253] [ 49.306868][ T5253] the existing dependency chain (in reverse order) is: [ 49.308175][ T5253] [ 49.308175][ T5253] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 49.309397][ T5253] down_read+0x64/0x304 [ 49.310079][ T5253] ext4_xattr_get+0xec/0x544 [ 49.310845][ T5253] ext4_get_acl+0x94/0x5f0 [ 49.311592][ T5253] get_acl+0x160/0x33c [ 49.312284][ T5253] posix_acl_create+0x104/0x3d0 [ 49.313071][ T5253] ext4_init_acl+0xac/0x340 [ 49.313797][ T5253] __ext4_new_inode+0x27b8/0x3340 [ 49.314600][ T5253] ext4_ext_migrate+0x498/0xbfc [ 49.315355][ T5253] ext4_ioctl+0x1a38/0x4198 [ 49.316033][ T5253] __arm64_sys_ioctl+0x14c/0x1c8 [ 49.316786][ T5253] invoke_syscall+0x98/0x2bc [ 49.317546][ T5253] el0_svc_common+0x138/0x258 [ 49.318348][ T5253] do_el0_svc+0x58/0x13c [ 49.319109][ T5253] el0_svc+0x58/0x138 [ 49.319753][ T5253] el0t_64_sync_handler+0x84/0xf0 [ 49.320592][ T5253] el0t_64_sync+0x18c/0x190 [ 49.321344][ T5253] [ 49.321344][ T5253] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 49.322633][ T5253] __lock_acquire+0x293c/0x6544 [ 49.323452][ T5253] lock_acquire+0x20c/0x644 [ 49.324193][ T5253] percpu_down_read+0x70/0x2a8 [ 49.325030][ T5253] ext4_writepages+0x188/0x284c [ 49.325915][ T5253] do_writepages+0x2c0/0x4fc [ 49.326679][ T5253] __writeback_single_inode+0x164/0x157c [ 49.327674][ T5253] writeback_single_inode+0x1c0/0x720 [ 49.328645][ T5253] write_inode_now+0x144/0x1b0 [ 49.329405][ T5253] iput+0x5cc/0x7f4 [ 49.330065][ T5253] ext4_xattr_block_set+0x17a4/0x2810 [ 49.330984][ T5253] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 49.331928][ T5253] __ext4_expand_extra_isize+0x298/0x358 [ 49.332905][ T5253] __ext4_mark_inode_dirty+0x3e4/0x790 [ 49.333908][ T5253] ext4_evict_inode+0xb58/0x1270 [ 49.334783][ T5253] evict+0x3c8/0x810 [ 49.335428][ T5253] iput+0x764/0x7f4 [ 49.336059][ T5253] ext4_process_orphan+0x240/0x2b4 [ 49.336895][ T5253] ext4_orphan_cleanup+0x908/0x104c [ 49.337805][ T5253] ext4_fill_super+0x6440/0x68a8 [ 49.338606][ T5253] get_tree_bdev+0x358/0x544 [ 49.339329][ T5253] ext4_get_tree+0x28/0x38 [ 49.340009][ T5253] vfs_get_tree+0x90/0x274 [ 49.340745][ T5253] do_new_mount+0x228/0x810 [ 49.341585][ T5253] path_mount+0x5b4/0xe78 [ 49.342328][ T5253] __arm64_sys_mount+0x49c/0x584 [ 49.343226][ T5253] invoke_syscall+0x98/0x2bc [ 49.343909][ T5253] el0_svc_common+0x138/0x258 [ 49.344646][ T5253] do_el0_svc+0x58/0x13c [ 49.345304][ T5253] el0_svc+0x58/0x138 [ 49.346014][ T5253] el0t_64_sync_handler+0x84/0xf0 [ 49.346836][ T5253] el0t_64_sync+0x18c/0x190 [ 49.347559][ T5253] [ 49.347559][ T5253] other info that might help us debug this: [ 49.347559][ T5253] [ 49.349025][ T5253] Possible unsafe locking scenario: [ 49.349025][ T5253] [ 49.350102][ T5253] CPU0 CPU1 [ 49.350881][ T5253] ---- ---- [ 49.351637][ T5253] lock(&ei->xattr_sem); [ 49.352313][ T5253] lock(&sbi->s_writepages_rwsem); [ 49.353491][ T5253] lock(&ei->xattr_sem); [ 49.354484][ T5253] lock(&sbi->s_writepages_rwsem); [ 49.355258][ T5253] [ 49.355258][ T5253] *** DEADLOCK *** [ 49.355258][ T5253] [ 49.356503][ T5253] 3 locks held by syz.2.353/5253: [ 49.357266][ T5253] #0: ffff0000f908c0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 49.358779][ T5253] #1: ffff0000f908c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 49.360307][ T5253] #2: ffff0000f5dddb10 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 49.361934][ T5253] [ 49.361934][ T5253] stack backtrace: [ 49.362853][ T5253] CPU: 0 PID: 5253 Comm: syz.2.353 Not tainted syzkaller #0 [ 49.363951][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 49.365515][ T5253] Call trace: [ 49.365937][ T5253] dump_backtrace+0x1c8/0x1f4 [ 49.366627][ T5253] show_stack+0x2c/0x3c [ 49.367302][ T5253] __dump_stack+0x30/0x40 [ 49.367949][ T5253] dump_stack_lvl+0xf8/0x160 [ 49.368620][ T5253] dump_stack+0x1c/0x5c [ 49.369217][ T5253] print_circular_bug+0x148/0x1b0 [ 49.369908][ T5253] check_noncircular+0x240/0x2d4 [ 49.370664][ T5253] __lock_acquire+0x293c/0x6544 [ 49.371419][ T5253] lock_acquire+0x20c/0x644 [ 49.372069][ T5253] percpu_down_read+0x70/0x2a8 [ 49.372742][ T5253] ext4_writepages+0x188/0x284c [ 49.373472][ T5253] do_writepages+0x2c0/0x4fc [ 49.374100][ T5253] __writeback_single_inode+0x164/0x157c [ 49.374909][ T5253] writeback_single_inode+0x1c0/0x720 [ 49.375753][ T5253] write_inode_now+0x144/0x1b0 [ 49.376520][ T5253] iput+0x5cc/0x7f4 [ 49.377081][ T5253] ext4_xattr_block_set+0x17a4/0x2810 [ 49.377878][ T5253] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 49.378784][ T5253] __ext4_expand_extra_isize+0x298/0x358 [ 49.379696][ T5253] __ext4_mark_inode_dirty+0x3e4/0x790 [ 49.379747][ T5261] loop4: detected capacity change from 0 to 256 [ 49.380552][ T5253] ext4_evict_inode+0xb58/0x1270 [ 49.382381][ T5253] evict+0x3c8/0x810 [ 49.382979][ T5253] iput+0x764/0x7f4 [ 49.383608][ T5253] ext4_process_orphan+0x240/0x2b4 [ 49.384423][ T5253] ext4_orphan_cleanup+0x908/0x104c [ 49.385267][ T5253] ext4_fill_super+0x6440/0x68a8 [ 49.386059][ T5253] get_tree_bdev+0x358/0x544 [ 49.386751][ T5253] ext4_get_tree+0x28/0x38 [ 49.387476][ T5253] vfs_get_tree+0x90/0x274 [ 49.388175][ T5253] do_new_mount+0x228/0x810 [ 49.388897][ T5253] path_mount+0x5b4/0xe78 [ 49.389549][ T5253] __arm64_sys_mount+0x49c/0x584 [ 49.390395][ T5253] invoke_syscall+0x98/0x2bc [ 49.391108][ T5253] el0_svc_common+0x138/0x258 [ 49.391818][ T5253] do_el0_svc+0x58/0x13c [ 49.392441][ T5253] el0_svc+0x58/0x138 [ 49.393045][ T5253] el0t_64_sync_handler+0x84/0xf0 [ 49.393805][ T5253] el0t_64_sync+0x18c/0x190 [ 49.397992][ T4319] EXT4-fs (loop0): unmounting filesystem. [ 49.404573][ T5253] ------------[ cut here ]------------ [ 49.405511][ T5253] EA inode 11 i_nlink=2 [ 49.405730][ T5253] WARNING: CPU: 1 PID: 5253 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 49.407850][ T5253] Modules linked in: [ 49.408455][ T5253] CPU: 1 PID: 5253 Comm: syz.2.353 Not tainted syzkaller #0 [ 49.409537][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 49.411084][ T5253] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 49.412298][ T5253] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 49.413206][ T5253] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 49.414092][ T5253] sp : ffff800021366e00 [ 49.414718][ T5253] x29: ffff800021366ea0 x28: 0000000000000000 x27: dfff800000000000 [ 49.415964][ T5253] x26: 1fffe0001ebbbd1f x25: ffff70000426cdc4 x24: 0000000000000000 [ 49.417160][ T5253] x23: ffff800017a15000 x22: ffff0000f5dde740 x21: 0000000000000002 [ 49.418337][ T5253] x20: 0000000000000001 x19: ffff0000f5dde700 x18: ffff800011a5bd40 [ 49.419518][ T5253] x17: 1fffe00033eebd7e x16: ffff800008042d90 x15: 0000000040000000 [ 49.420738][ T5253] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 49.421958][ T5253] x11: ff0080000804801c x10: 0000000040000002 x9 : b4c85784f3dd6500 [ 49.423259][ T5253] x8 : b4c85784f3dd6500 x7 : 0000000000000004 x6 : ffff8000082532dc [ 49.424421][ T5253] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 49.425604][ T5253] x2 : ffff8000213669a0 x1 : 0000000000000000 x0 : ffff800008253370 [ 49.426859][ T5253] Call trace: [ 49.427354][ T5253] ext4_xattr_inode_update_ref+0x42c/0x470 [ 49.428231][ T5253] ext4_xattr_set_entry+0x918/0x15ac [ 49.429060][ T5253] ext4_xattr_ibody_set+0x204/0x600 [ 49.429831][ T5253] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 49.430733][ T5253] __ext4_expand_extra_isize+0x298/0x358 [ 49.431584][ T5253] __ext4_mark_inode_dirty+0x3e4/0x790 [ 49.432435][ T5253] ext4_evict_inode+0xb58/0x1270 [ 49.433162][ T5253] evict+0x3c8/0x810 [ 49.433739][ T5253] iput+0x764/0x7f4 [ 49.434302][ T5253] ext4_process_orphan+0x240/0x2b4 [ 49.435097][ T5253] ext4_orphan_cleanup+0x908/0x104c [ 49.435875][ T5253] ext4_fill_super+0x6440/0x68a8 [ 49.436602][ T5253] get_tree_bdev+0x358/0x544 [ 49.437344][ T5253] ext4_get_tree+0x28/0x38 [ 49.437984][ T5253] vfs_get_tree+0x90/0x274 [ 49.438632][ T5253] do_new_mount+0x228/0x810 [ 49.439314][ T5253] path_mount+0x5b4/0xe78 [ 49.439917][ T5253] __arm64_sys_mount+0x49c/0x584 [ 49.440659][ T5253] invoke_syscall+0x98/0x2bc [ 49.441345][ T5253] el0_svc_common+0x138/0x258 [ 49.442002][ T5253] do_el0_svc+0x58/0x13c [ 49.442621][ T5253] el0_svc+0x58/0x138 [ 49.443230][ T5253] el0t_64_sync_handler+0x84/0xf0 [ 49.443930][ T5253] el0t_64_sync+0x18c/0x190 [ 49.444610][ T5253] irq event stamp: 3789 [ 49.445187][ T5253] hardirqs last enabled at (3789): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 49.446704][ T5253] hardirqs last disabled at (3788): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 49.448222][ T5253] softirqs last enabled at (2122): [] local_bh_enable+0x10/0x34 [ 49.449603][ T5253] softirqs last disabled at (2120): [] local_bh_disable+0x10/0x34 [ 49.450924][ T5253] ---[ end trace 0000000000000000 ]--- [ 49.454053][ T5253] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #18: comm syz.2.353: iget: bad extra_isize 90 (inode size 256) [ 49.456526][ T5253] EXT4-fs (loop2): Remounting filesystem read-only [ 49.457921][ T5253] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.353: error while reading EA inode 18 err=-117 [ 49.460296][ T5253] EXT4-fs (loop2): Remounting filesystem read-only [ 49.461409][ T5253] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #18: comm syz.2.353: iget: bad extra_isize 90 (inode size 256) [ 49.466101][ T5253] EXT4-fs (loop2): Remounting filesystem read-only [ 49.468215][ T5253] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.353: error while reading EA inode 18 err=-117 [ 49.471536][ T5253] EXT4-fs (loop2): Remounting filesystem read-only [ 49.473272][ T5253] EXT4-fs (loop2): 1 orphan inode deleted [ 49.474126][ T5253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.484968][ T4323] EXT4-fs (loop2): unmounting filesystem.