last executing test programs: 3.872448185s ago: executing program 4 (id=130): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) io_setup(0x3ff, &(0x7f0000000500)) 3.26944746s ago: executing program 2 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 3.025428444s ago: executing program 2 (id=135): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000000)="8848c6cc91", 0x5}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000380)={0x2, 0x5e21, @local}, 0x10) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 3.008090275s ago: executing program 4 (id=136): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@nolazytime}, {@usrjquota, 0x2e}, {@journal_async_commit}, {@grpjquota}, {@grpjquota}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) 2.07261477s ago: executing program 3 (id=143): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x4, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x9de, 0xffff7fff, 0x1, 'queue1\x00', 0x6}) 1.846287013s ago: executing program 3 (id=145): r0 = socket(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x13, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.72201439s ago: executing program 3 (id=148): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000940)=0x3) poll(&(0x7f0000001300)=[{r3, 0x8000}], 0x1, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24040084) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x80, 0x7ff, 0x9, {{0x1c, 0x4, 0x1, 0x7, 0x70, 0x64, 0x0, 0x42, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x0, 0x5, "53a489"}, {0x7, 0x5, '<2x'}]}, @timestamp={0x44, 0x24, 0x4b, 0x0, 0x3, [0x9, 0xffffffc0, 0x5, 0x0, 0x81, 0x1000, 0x2, 0x7ff]}, @generic={0x86, 0xe, "fe4654de583addcf6d33458f"}, @generic={0x7, 0x8, "6a0dd37069b3"}, @timestamp={0x44, 0x8, 0x87, 0x0, 0x4, [0x1]}, @rr={0x7, 0x3, 0x7d}]}}}}}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0x2, 0xfff3}, {0x1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) 1.533905221s ago: executing program 2 (id=149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x40, r1, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x40}}, 0x4044080) 1.230162418s ago: executing program 2 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x7, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.224855049s ago: executing program 1 (id=151): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x242404, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x2, 0x0) 1.198308691s ago: executing program 4 (id=152): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000001180)}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0x80000d1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) rt_sigqueueinfo(0x0, 0x3f, &(0x7f0000000240)={0x20, 0x8}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.102817846s ago: executing program 1 (id=153): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) 1.0313218s ago: executing program 2 (id=155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xce0, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000088a8", 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 963.615424ms ago: executing program 1 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000000101040000000000000000020000082c00018014000180080001"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 942.280535ms ago: executing program 4 (id=157): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000080), 0xfe, 0x246, &(0x7f0000000800)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) 911.846197ms ago: executing program 0 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 771.556355ms ago: executing program 3 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) tkill(r2, 0x21) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 771.131785ms ago: executing program 2 (id=160): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x479}}, {@noinit_itable}, {@jqfmt_vfsold}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0xdb3bedaebaf6c03c, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000120a0d010000000000000000020000000900020073797a32000064a508000440040000000900010073797a30000000000800034000000001540000001100010000000000000000000000000a"], 0x64}}, 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000800)={0x24, @short={0x2, 0x2, 0x15547}}, 0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000008000/0x4000)=nil) r10 = syz_io_uring_setup(0x10f9, &(0x7f0000000140)={0x0, 0xc3db, 0x800, 0x2, 0x1fc}, 0x0, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_NAPI(r10, 0x1b, &(0x7f0000000100)={0x2, 0x8}, 0x1) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r11, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x24}, 0x94) 744.208497ms ago: executing program 0 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 673.856071ms ago: executing program 0 (id=162): mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', 0x0, 0x140041, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="fe", 0x1}], 0x1) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 604.185415ms ago: executing program 1 (id=163): open(0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = dup2(r0, r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$llc(r4, 0x0, 0x0, 0x80000) 603.556385ms ago: executing program 3 (id=164): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r3, 0xc, 0xa, 0x78, 0x5, 0xb16}, 0x14) 543.263488ms ago: executing program 1 (id=165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x7, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 535.976739ms ago: executing program 4 (id=166): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) 414.347256ms ago: executing program 0 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x40, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x5c}}, 0x0) 250.707646ms ago: executing program 0 (id=168): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x22000, 0x800, 0x3, 0x2}, 0x20) 199.918609ms ago: executing program 4 (id=169): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") 180.62322ms ago: executing program 3 (id=170): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@usrjquota}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nodelalloc}, {@orlov}, {@abort}, {@nombcache}, {@orlov}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 123.376423ms ago: executing program 0 (id=171): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 1 (id=172): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_read_part_table(0x5e2, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 66.558812][ T4172] cgroup: Unknown subsys name 'net' [ 66.691591][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.232617][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.217804][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 70.302047][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 70.375841][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 70.399580][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 70.414844][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 70.450655][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.458074][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.467786][ T4189] device bridge_slave_0 entered promiscuous mode [ 70.481715][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.489101][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.497870][ T4189] device bridge_slave_1 entered promiscuous mode [ 70.578704][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.594790][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.602018][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.610497][ T4184] device bridge_slave_0 entered promiscuous mode [ 70.629098][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.642887][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.650692][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.660088][ T4184] device bridge_slave_1 entered promiscuous mode [ 70.736490][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.752185][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.759635][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.769055][ T4186] device bridge_slave_0 entered promiscuous mode [ 70.780322][ T4189] team0: Port device team_slave_0 added [ 70.796516][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.806013][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.813437][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.821513][ T4193] device bridge_slave_0 entered promiscuous mode [ 70.832216][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.839528][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.847995][ T4186] device bridge_slave_1 entered promiscuous mode [ 70.855419][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.862525][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.870822][ T4195] device bridge_slave_0 entered promiscuous mode [ 70.882235][ T4189] team0: Port device team_slave_1 added [ 70.895560][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.903482][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.911953][ T4193] device bridge_slave_1 entered promiscuous mode [ 70.926961][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.934343][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.942563][ T4195] device bridge_slave_1 entered promiscuous mode [ 71.001051][ T4184] team0: Port device team_slave_0 added [ 71.009258][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.020680][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.039139][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.046559][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.073054][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.087069][ T4184] team0: Port device team_slave_1 added [ 71.093783][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.100841][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.126942][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.139963][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.151267][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.162551][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.204041][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.230425][ T4193] team0: Port device team_slave_0 added [ 71.239235][ T4193] team0: Port device team_slave_1 added [ 71.267104][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.274822][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.301322][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.329088][ T4186] team0: Port device team_slave_0 added [ 71.338206][ T4186] team0: Port device team_slave_1 added [ 71.356065][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.363062][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.391025][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.415298][ T4189] device hsr_slave_0 entered promiscuous mode [ 71.422313][ T4189] device hsr_slave_1 entered promiscuous mode [ 71.439774][ T4195] team0: Port device team_slave_0 added [ 71.451104][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.458737][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.486734][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.506414][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.514467][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.541647][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.568288][ T4195] team0: Port device team_slave_1 added [ 71.582988][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.595370][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.595493][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.602444][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.637576][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.652960][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.660480][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.687032][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.718299][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.725657][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.752062][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.801717][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.809088][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.835823][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.860611][ T4193] device hsr_slave_0 entered promiscuous mode [ 71.867548][ T4193] device hsr_slave_1 entered promiscuous mode [ 71.874412][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.882511][ T4193] Cannot create hsr debugfs directory [ 71.900233][ T4184] device hsr_slave_0 entered promiscuous mode [ 71.906590][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 71.914342][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 71.920522][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 71.922021][ T4184] device hsr_slave_1 entered promiscuous mode [ 71.927645][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 71.940216][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.940228][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 71.954587][ T4184] Cannot create hsr debugfs directory [ 71.998949][ T4186] device hsr_slave_0 entered promiscuous mode [ 72.006365][ T4186] device hsr_slave_1 entered promiscuous mode [ 72.013503][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.021206][ T4186] Cannot create hsr debugfs directory [ 72.052571][ T4195] device hsr_slave_0 entered promiscuous mode [ 72.059733][ T4195] device hsr_slave_1 entered promiscuous mode [ 72.068329][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.076254][ T4195] Cannot create hsr debugfs directory [ 72.431059][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.444541][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.459585][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.482027][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.525181][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.550802][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.568303][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.585129][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.658263][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.668741][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.693326][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.702779][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.785350][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.811932][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.839313][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.857700][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.880846][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.890530][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.905337][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.916728][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.928019][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.941191][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.951233][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.970147][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.991934][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.041411][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.049537][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.063342][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.071401][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.080619][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.090580][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.098026][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.121342][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.136181][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.144740][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.153788][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.164265][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.171376][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.182243][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.192095][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.202455][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.210132][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.220172][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.265908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.274412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.282279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.292596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.306835][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.314214][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.322580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.332049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.344503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.356609][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.371201][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.382015][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.391558][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.402931][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.440387][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.451731][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.477548][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.486663][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.496459][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.505860][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.515169][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.522263][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.530686][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.539514][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.549148][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.558480][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.568230][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.575656][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.586018][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.594782][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.603403][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.612336][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.621267][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.630630][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.639376][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.648153][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.658383][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.668211][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.678768][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.687606][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.696506][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.706860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.736800][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.816058][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.826576][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.839541][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.849167][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.860398][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.870563][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.880023][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.900861][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.910682][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.936783][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.947314][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.966219][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.984425][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 73.990601][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 74.011058][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.018360][ T4271] Bluetooth: hci0: command 0x041b tx timeout [ 74.033320][ T4271] Bluetooth: hci4: command 0x041b tx timeout [ 74.039785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.053059][ T4271] Bluetooth: hci3: command 0x041b tx timeout [ 74.067924][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.085834][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.118850][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.138135][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.159040][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.166716][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.188120][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.204399][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.219849][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.227336][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.243919][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.252956][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.271011][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.279174][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.288756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.312972][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.335059][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.345590][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.355370][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.369823][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.386984][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.406590][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.418929][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.428779][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.439395][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.455088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.474257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.484415][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.491645][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.522130][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.533574][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.549573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.558647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.567748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.577290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.587691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.597019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.606197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.616931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.626295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.635544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.651555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.661452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.702721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.714200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.722965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.733764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.742476][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.749632][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.759175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.770896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.781358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.790843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.800306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.831933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.846437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.860931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.886951][ T4195] device veth0_vlan entered promiscuous mode [ 74.902141][ T4189] device veth0_vlan entered promiscuous mode [ 74.916074][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.925221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.934700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.944584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.971040][ T4189] device veth1_vlan entered promiscuous mode [ 74.989561][ T4195] device veth1_vlan entered promiscuous mode [ 74.998966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.008976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.018533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.027398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.036554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.046341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.063969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.073006][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.082544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.091322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.124928][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.152511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.162618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.171824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.187774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.200171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.217762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.231590][ T4189] device veth0_macvtap entered promiscuous mode [ 75.247898][ T4195] device veth0_macvtap entered promiscuous mode [ 75.276606][ T4189] device veth1_macvtap entered promiscuous mode [ 75.295982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.307338][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.316910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.327523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.337646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.346507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.355162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.388622][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.411357][ T4186] device veth0_vlan entered promiscuous mode [ 75.420107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.435653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.445005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.455158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.466320][ T4195] device veth1_macvtap entered promiscuous mode [ 75.477107][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.492757][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.502356][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.524565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.540924][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.551748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.578822][ T4186] device veth1_vlan entered promiscuous mode [ 75.590416][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.609704][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.620555][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.635327][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.675399][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.688518][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.702713][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.746137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.758827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.770002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.781001][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.792059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.803827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.814324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.823214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.853689][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.873553][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.886178][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.914948][ T4186] device veth0_macvtap entered promiscuous mode [ 75.928751][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.950730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.965616][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.979759][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.989666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.999214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.009765][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.019432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.030476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.040403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.053020][ T4193] device veth0_vlan entered promiscuous mode [ 76.067868][ T4239] Bluetooth: hci3: command 0x040f tx timeout [ 76.077455][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.090479][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.100162][ T4239] Bluetooth: hci4: command 0x040f tx timeout [ 76.107877][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 76.114315][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.114554][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.141135][ T4186] device veth1_macvtap entered promiscuous mode [ 76.160532][ T4193] device veth1_vlan entered promiscuous mode [ 76.174844][ T4239] Bluetooth: hci2: command 0x040f tx timeout [ 76.196289][ T4239] Bluetooth: hci1: command 0x040f tx timeout [ 76.257248][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.281768][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.296735][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.306525][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.317333][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.330379][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.355166][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.371977][ T4193] device veth0_macvtap entered promiscuous mode [ 76.388907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.398252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.407877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.416874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.428172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.439062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.449033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.458563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.481589][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.492507][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.503373][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.514385][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.526180][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.539327][ T4193] device veth1_macvtap entered promiscuous mode [ 76.564591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.581354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.590925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.619838][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.645460][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.658965][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.670555][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.681282][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.692827][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.707573][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.728070][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.737235][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.748058][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.757457][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.774298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.786826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.803819][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.815403][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.825652][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.836531][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.847170][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.858429][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.871324][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.883464][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.891506][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.924740][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.934322][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.945127][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.961091][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.970516][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.008130][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.017392][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.027973][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.037094][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.066865][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.095913][ T4184] device veth0_vlan entered promiscuous mode [ 77.102385][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.126220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.146720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.169884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.184120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.192576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.217882][ T4184] device veth1_vlan entered promiscuous mode [ 77.248248][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.264648][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.323428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.332088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.350246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.383310][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.394309][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.409939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.424490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.444138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.481547][ T4184] device veth0_macvtap entered promiscuous mode [ 77.519115][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.535105][ T4184] device veth1_macvtap entered promiscuous mode [ 77.565584][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.592725][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.626554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.634271][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.649799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.657875][ T4303] loop0: detected capacity change from 0 to 8192 [ 77.670281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.693571][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.707678][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.722301][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.740253][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.759481][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.783386][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.804725][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.821586][ T4308] loop3: detected capacity change from 0 to 512 [ 77.832388][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.852181][ T4308] ======================================================= [ 77.852181][ T4308] WARNING: The mand mount option has been deprecated and [ 77.852181][ T4308] and is ignored by this kernel. Remove the mand [ 77.852181][ T4308] option from the mount to silence this warning. [ 77.852181][ T4308] ======================================================= [ 77.912975][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.937769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.951520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.977547][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.985720][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.041288][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.044356][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.067889][ T4308] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 78.115469][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.126940][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.139731][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.157925][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 78.175136][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 78.197736][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.223710][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 78.241328][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 78.273143][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.285230][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 78.298230][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.311167][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.327065][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.337373][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.348220][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.376175][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.419003][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.437001][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.456795][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.526275][ T4320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7'. [ 78.570903][ T4320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.578602][ T4320] IPv6: NLM_F_CREATE should be set when creating new route [ 78.586013][ T4320] IPv6: NLM_F_CREATE should be set when creating new route [ 78.593308][ T4320] IPv6: NLM_F_CREATE should be set when creating new route [ 78.790072][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.829127][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.847735][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.874341][ T4328] device syzkaller0 entered promiscuous mode [ 78.945207][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.979786][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.093606][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.131734][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 79.147120][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.328653][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.533935][ T4343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.566097][ T4343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.580094][ T26] audit: type=1326 audit(1770209966.345:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 79.662032][ T26] audit: type=1326 audit(1770209966.375:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 79.705934][ T4346] device syzkaller0 entered promiscuous mode [ 79.773862][ T4349] tipc: Started in network mode [ 79.786924][ T4351] loop3: detected capacity change from 0 to 128 [ 79.795114][ T26] audit: type=1326 audit(1770209966.375:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 79.819260][ T4349] tipc: Node identity 32c825d29675, cluster identity 4711 [ 79.844217][ T4349] tipc: Enabled bearer , priority 0 [ 79.984400][ T4345] tipc: Resetting bearer [ 80.049007][ T26] audit: type=1326 audit(1770209966.375:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 80.101860][ T26] audit: type=1326 audit(1770209966.375:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 80.777310][ T4345] tipc: Disabling bearer [ 80.845055][ T26] audit: type=1326 audit(1770209966.375:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 80.869841][ T26] audit: type=1326 audit(1770209966.375:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 80.941721][ T26] audit: type=1326 audit(1770209966.375:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 81.003197][ T26] audit: type=1326 audit(1770209966.375:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 81.089418][ T26] audit: type=1326 audit(1770209966.375:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4344 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 81.172109][ T4366] team0: Port device vlan2 added [ 81.395512][ T4351] attempt to access beyond end of device [ 81.395512][ T4351] loop3: rw=2049, want=250, limit=128 [ 81.472704][ T4379] device syzkaller0 entered promiscuous mode [ 81.483948][ T4381] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 81.490862][ T4381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.519332][ T4381] vhci_hcd vhci_hcd.0: Device attached [ 81.552044][ T4382] vhci_hcd: connection closed [ 81.554515][ T4361] vhci_hcd: stop threads [ 81.573915][ T4361] vhci_hcd: release socket [ 81.578798][ T4361] vhci_hcd: disconnect device [ 81.740649][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 81.760194][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.882584][ T4392] loop2: detected capacity change from 0 to 512 [ 81.967563][ T4392] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.015502][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.021790][ T4392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.169501][ T4400] loop3: detected capacity change from 0 to 512 [ 82.195830][ T4392] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.293286][ T4392] EXT4-fs (loop2): 1 truncate cleaned up [ 82.299457][ T4392] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 82.391009][ T4406] loop1: detected capacity change from 0 to 2048 [ 82.477525][ T4307] loop1: p1 p2 [ 82.552849][ T4406] loop1: p1 p2 [ 82.720741][ T4417] team0: Port device vlan2 added [ 82.753510][ T4307] udevd[4307]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 82.764450][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 82.816804][ T4424] loop1: detected capacity change from 0 to 512 [ 82.910947][ T4424] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.942755][ T4424] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.963430][ T4424] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #4: comm syz.1.52: corrupted inode contents [ 82.986493][ T4424] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #4: comm syz.1.52: mark_inode_dirty error [ 83.004245][ T4424] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #4: comm syz.1.52: corrupted inode contents [ 83.017788][ T4424] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #4: comm syz.1.52: mark_inode_dirty error [ 83.030649][ T4424] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.52: Failed to acquire dquot type 1 [ 83.140661][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 83.252081][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 83.551499][ T4448] loop1: detected capacity change from 0 to 512 [ 83.713036][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #3: comm syz.1.51: corrupted inode contents [ 83.790249][ T4448] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #3: comm syz.1.51: mark_inode_dirty error [ 83.817236][ T4459] syz.4.57 uses obsolete (PF_INET,SOCK_PACKET) [ 83.824373][ T4459] device syzkaller1 entered promiscuous mode [ 83.856729][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #3: comm syz.1.51: corrupted inode contents [ 83.876786][ T4448] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.51: mark_inode_dirty error [ 83.891735][ T4448] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.51: Failed to acquire dquot type 0 [ 83.917611][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.51: corrupted inode contents [ 83.971226][ T4461] team0: Port device vlan2 added [ 83.992423][ T4448] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #16: comm syz.1.51: mark_inode_dirty error [ 84.054617][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.51: corrupted inode contents [ 84.136262][ T4448] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.51: mark_inode_dirty error [ 84.220820][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.51: corrupted inode contents [ 84.263047][ T4472] loop0: detected capacity change from 0 to 512 [ 84.277601][ T4448] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 84.295130][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.51: corrupted inode contents [ 84.333668][ T4472] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.344425][ T4448] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.51: mark_inode_dirty error [ 84.379103][ T4448] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 84.430879][ T4472] EXT4-fs (loop0): 1 truncate cleaned up [ 84.513322][ T4472] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 84.577553][ T4448] EXT4-fs (loop1): 1 truncate cleaned up [ 84.619486][ T4448] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 84.727632][ T4448] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.978773][ T4488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.180658][ T4494] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (166) [ 85.400595][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 85.400613][ T26] audit: type=1326 audit(1770209972.165:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 85.570712][ T26] audit: type=1326 audit(1770209972.185:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 85.615610][ T26] audit: type=1326 audit(1770209972.195:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 85.670719][ T26] audit: type=1326 audit(1770209972.195:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 85.786611][ T26] audit: type=1326 audit(1770209972.195:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 85.892632][ T26] audit: type=1326 audit(1770209972.195:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 85.980215][ T26] audit: type=1326 audit(1770209972.205:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 86.064472][ T4517] loop3: detected capacity change from 0 to 512 [ 86.068359][ T26] audit: type=1326 audit(1770209972.205:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 86.153777][ T4517] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 86.161345][ T4517] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.168263][ T26] audit: type=1326 audit(1770209972.205:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 86.213716][ T4518] loop0: detected capacity change from 0 to 512 [ 86.251174][ T4517] EXT4-fs (loop3): 1 truncate cleaned up [ 86.288866][ T4517] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,mblk_io_submit,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 86.372490][ T26] audit: type=1326 audit(1770209972.205:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4502 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69acfd8eb9 code=0x7ffc0000 [ 86.384802][ T4518] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.80: corrupted inode contents [ 86.412596][ T4518] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #3: comm syz.0.80: mark_inode_dirty error [ 86.432665][ T4518] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.80: corrupted inode contents [ 86.445685][ T4518] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.80: mark_inode_dirty error [ 86.476159][ T4518] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.80: Failed to acquire dquot type 0 [ 86.501214][ T4527] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.521586][ T4522] loop4: detected capacity change from 0 to 2048 [ 86.543835][ T4518] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.80: corrupted inode contents [ 86.577406][ T4518] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.80: mark_inode_dirty error [ 86.600004][ T4518] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.80: corrupted inode contents [ 86.626455][ T4518] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.80: mark_inode_dirty error [ 86.649378][ T4518] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.80: corrupted inode contents [ 86.673797][ T4522] loop4: p1 p2 [ 86.690740][ T4518] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 86.715611][ T4518] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.80: corrupted inode contents [ 86.764285][ T4518] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.80: mark_inode_dirty error [ 86.803931][ T4530] loop1: detected capacity change from 0 to 512 [ 86.811047][ T4518] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 86.849941][ T4518] EXT4-fs (loop0): 1 truncate cleaned up [ 86.872332][ T4518] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 86.908362][ T4530] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 86.909142][ T4532] loop3: detected capacity change from 0 to 512 [ 86.940834][ T4530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.955613][ T1107] cfg80211: failed to load regulatory.db [ 87.003420][ T4518] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.037543][ T4530] EXT4-fs (loop1): 1 truncate cleaned up [ 87.059883][ T4530] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x0000000000000203,mblk_io_submit,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 87.073000][ T4532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.118228][ T4530] EXT4-fs (loop1): shut down requested (2) [ 87.241739][ T4532] EXT4-fs warning (device loop3): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.297222][ T4538] loop4: detected capacity change from 0 to 512 [ 87.407797][ T4538] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 87.532050][ T4538] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.656741][ T4545] loop0: detected capacity change from 0 to 512 [ 87.671087][ T4435] udevd[4435]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 87.878101][ T4545] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.98: corrupted inode contents [ 87.957732][ T4545] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #3: comm syz.0.98: mark_inode_dirty error [ 88.030540][ T4435] udevd[4435]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 88.072908][ T4545] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.98: corrupted inode contents [ 88.143836][ T4545] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.98: mark_inode_dirty error [ 88.406445][ T4545] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.98: Failed to acquire dquot type 0 [ 88.434652][ T4545] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.98: corrupted inode contents [ 88.504000][ T4545] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.98: mark_inode_dirty error [ 88.623702][ T4545] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.98: corrupted inode contents [ 88.655879][ T4545] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.98: mark_inode_dirty error [ 88.741919][ T4545] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.98: corrupted inode contents [ 88.783879][ T4545] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 88.806544][ T4567] loop2: detected capacity change from 0 to 4096 [ 88.814580][ T4545] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.98: corrupted inode contents [ 88.870357][ T4567] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 88.891293][ T4545] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.98: mark_inode_dirty error [ 88.959435][ T4545] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 89.011426][ T4545] EXT4-fs (loop0): 1 truncate cleaned up [ 89.092086][ T4545] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 89.183406][ T4545] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.359482][ T4578] loop4: detected capacity change from 0 to 512 [ 89.446256][ T4578] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 89.465255][ T4578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.477656][ T4580] loop2: detected capacity change from 0 to 2048 [ 89.535335][ T4578] EXT4-fs (loop4): 1 truncate cleaned up [ 89.552817][ T4578] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x0000000000000203,mblk_io_submit,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 89.585368][ T4580] loop2: p1 p2 [ 89.601069][ T4578] EXT4-fs (loop4): shut down requested (2) [ 89.710111][ T3561] loop2: p1 p2 [ 89.924975][ T4435] udevd[4435]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 89.951597][ T4563] udevd[4563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.064277][ T4589] loop4: detected capacity change from 0 to 512 [ 90.171856][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 90.175267][ T4589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.102: bg 0: block 393: padding at end of block bitmap is not set [ 90.178010][ T4589] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 90.178859][ T4589] EXT4-fs (loop4): 2 truncates cleaned up [ 90.178888][ T4589] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.192506][ T4563] udevd[4563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 90.400437][ T4592] loop0: detected capacity change from 0 to 1024 [ 90.574693][ T23] kernel write not supported for file /54/loginuid (pid: 23 comm: kworker/1:1) [ 90.656686][ T4592] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.706853][ T4604] loop2: detected capacity change from 0 to 256 [ 90.739897][ T4592] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.827717][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 90.827734][ T26] audit: type=1800 audit(1770209977.595:118): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.103" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 91.013196][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 91.227532][ T4611] loop4: detected capacity change from 0 to 512 [ 91.242940][ T4613] loop1: detected capacity change from 0 to 512 [ 91.288832][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.306999][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.328639][ T26] audit: type=1326 audit(1770209978.095:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 91.364407][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.373905][ T4613] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.445910][ T26] audit: type=1326 audit(1770209978.125:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 91.470696][ T4613] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 91.474344][ T4611] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #3: comm syz.4.110: corrupted inode contents [ 91.500382][ T4611] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #3: comm syz.4.110: mark_inode_dirty error [ 91.514405][ T4611] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #3: comm syz.4.110: corrupted inode contents [ 91.526782][ T4613] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.111: Corrupt directory, running e2fsck is recommended [ 91.531543][ T26] audit: type=1326 audit(1770209978.125:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 91.564318][ T4613] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 91.582436][ T4613] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.111: corrupted in-inode xattr [ 91.626166][ T4613] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.111: couldn't read orphan inode 15 (err -117) [ 91.643257][ T26] audit: type=1326 audit(1770209978.125:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 91.664688][ T4611] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.110: mark_inode_dirty error [ 91.729868][ T4611] Quota error (device loop4): write_blk: dquota write failed [ 91.739735][ T4613] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000008,jqfmt=vfsold,nolazytime,usrjquota=.journal_async_commit,grpjquota=,grpjquota=,grpid,,,errors=continue. Quota mode: writeback. [ 91.774746][ T4611] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 91.805707][ T26] audit: type=1326 audit(1770209978.125:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 91.824499][ T4611] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.110: Failed to acquire dquot type 0 [ 91.861936][ T4613] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.921555][ T26] audit: type=1326 audit(1770209978.125:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 91.923073][ T4611] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #16: comm syz.4.110: corrupted inode contents [ 91.964120][ T4613] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 92.009519][ T4611] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #16: comm syz.4.110: mark_inode_dirty error [ 92.023268][ T4613] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.111: Corrupt directory, running e2fsck is recommended [ 92.054279][ T4611] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #16: comm syz.4.110: corrupted inode contents [ 92.063052][ T26] audit: type=1326 audit(1770209978.125:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4614 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b824beb9 code=0x7ffc0000 [ 92.132052][ T4633] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.146242][ T4611] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.110: mark_inode_dirty error [ 92.188432][ T4611] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #16: comm syz.4.110: corrupted inode contents [ 92.250766][ T4611] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 92.302954][ T4611] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #16: comm syz.4.110: corrupted inode contents [ 92.319601][ T4633] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 92.334815][ T4633] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.111: Corrupt directory, running e2fsck is recommended [ 92.359043][ T4630] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.372755][ T4630] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 92.373608][ T4611] EXT4-fs error (device loop4): ext4_truncate:4279: inode #16: comm syz.4.110: mark_inode_dirty error [ 92.604654][ T4611] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 92.742073][ T4630] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.111: Corrupt directory, running e2fsck is recommended [ 92.775894][ T4611] EXT4-fs (loop4): 1 truncate cleaned up [ 93.018788][ T4611] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 93.078318][ T4613] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.127181][ T4611] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.328732][ T4648] loop0: detected capacity change from 0 to 1024 [ 93.400583][ T4657] loop2: detected capacity change from 0 to 128 [ 93.479336][ T4657] attempt to access beyond end of device [ 93.479336][ T4657] loop2: rw=2049, want=234, limit=128 [ 93.498233][ T4657] attempt to access beyond end of device [ 93.498233][ T4657] loop2: rw=0, want=129, limit=128 [ 93.510097][ T4657] attempt to access beyond end of device [ 93.510097][ T4657] loop2: rw=0, want=233, limit=128 [ 93.552264][ T4246] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.581018][ T4664] ip6t_srh: unknown srh match flags 4000 [ 93.612616][ T4648] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 93.630603][ T4246] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.659547][ T4666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.129'. [ 93.683407][ T4648] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.697835][ T154] attempt to access beyond end of device [ 93.697835][ T154] loop2: rw=1, want=1041, limit=128 [ 93.804363][ T4648] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 8: comm syz.0.124: lblock 8 mapped to illegal pblock 8 (length 8) [ 93.830090][ T4670] set_capacity_and_notify: 2 callbacks suppressed [ 93.830109][ T4670] loop1: detected capacity change from 0 to 1024 [ 93.853892][ T4648] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.124: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 93.890028][ T4652] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 93.913409][ T4670] EXT4-fs (loop1): Ignoring removed bh option [ 93.953667][ T4668] attempt to access beyond end of device [ 93.953667][ T4668] loop4: rw=2049, want=202, limit=128 [ 93.971112][ T4675] loop2: detected capacity change from 0 to 128 [ 93.980708][ T144] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 94.008570][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 94.018366][ T4670] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,nombcache,barrier,delalloc,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 94.059198][ T4668] attempt to access beyond end of device [ 94.059198][ T4668] loop4: rw=2049, want=146, limit=128 [ 94.072538][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.072538][ T144] [ 94.086100][ T4675] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.166352][ T4671] attempt to access beyond end of device [ 94.166352][ T4671] loop4: rw=2049, want=140, limit=128 [ 94.185693][ T4675] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.239878][ T4652] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.251881][ T4652] EXT4-fs (loop3): Ignoring removed orlov option [ 94.295949][ T4652] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 94.437170][ T4686] loop0: detected capacity change from 0 to 256 [ 94.729119][ T4693] loop2: detected capacity change from 0 to 512 [ 94.777828][ T4687] fido_id[4687]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.815809][ T4695] loop4: detected capacity change from 0 to 512 [ 94.901405][ T4693] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #3: comm syz.2.135: corrupted inode contents [ 94.928982][ T4693] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #3: comm syz.2.135: mark_inode_dirty error [ 94.944438][ T4693] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #3: comm syz.2.135: corrupted inode contents [ 95.006699][ T4695] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.032012][ T4695] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 95.043963][ T4693] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.135: mark_inode_dirty error [ 95.163053][ T4695] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.136: Corrupt directory, running e2fsck is recommended [ 95.195900][ T4693] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.135: Failed to acquire dquot type 0 [ 95.235922][ T4693] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.135: corrupted inode contents [ 95.258116][ T4695] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 95.283960][ T4693] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #16: comm syz.2.135: mark_inode_dirty error [ 95.300319][ T4695] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.136: corrupted in-inode xattr [ 95.324462][ T4693] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.135: corrupted inode contents [ 95.357452][ T4695] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.136: couldn't read orphan inode 15 (err -117) [ 95.390500][ T4693] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.135: mark_inode_dirty error [ 95.410861][ T4695] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000008,jqfmt=vfsold,nolazytime,usrjquota=.journal_async_commit,grpjquota=,grpjquota=,grpid,,,errors=continue. Quota mode: writeback. [ 95.439649][ T4693] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.135: corrupted inode contents [ 95.498364][ T4693] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 95.534467][ T4693] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #16: comm syz.2.135: corrupted inode contents [ 95.593566][ T4695] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.612760][ T4693] EXT4-fs error (device loop2): ext4_truncate:4279: inode #16: comm syz.2.135: mark_inode_dirty error [ 95.656810][ T4695] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 95.691148][ T4693] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 95.733823][ T4693] EXT4-fs (loop2): 1 truncate cleaned up [ 95.739968][ T4693] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 95.763375][ T4695] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.136: Corrupt directory, running e2fsck is recommended [ 95.803821][ T4693] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.819249][ T4720] loop1: detected capacity change from 0 to 512 [ 95.870726][ T4723] loop0: detected capacity change from 0 to 128 [ 95.884487][ T4714] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.961382][ T4714] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 95.980934][ T4720] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 96.001554][ T4714] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.136: Corrupt directory, running e2fsck is recommended [ 96.026469][ T4723] attempt to access beyond end of device [ 96.026469][ T4723] loop0: rw=2049, want=154, limit=128 [ 96.034153][ T4720] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.049019][ T4730] attempt to access beyond end of device [ 96.049019][ T4730] loop0: rw=2049, want=140, limit=128 [ 96.096028][ T4718] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.169755][ T4718] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 96.190987][ T4695] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.236216][ T4695] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 96.331645][ T4730] attempt to access beyond end of device [ 96.331645][ T4730] loop0: rw=2049, want=140, limit=128 [ 96.364046][ T4730] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 96.646227][ T4746] netlink: 76 bytes leftover after parsing attributes in process `syz.1.156'. [ 96.674508][ T4746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'. [ 96.728310][ T4750] loop4: detected capacity change from 0 to 128 [ 96.763484][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 96.786307][ T4750] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.803273][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 96.822636][ T4755] loop3: detected capacity change from 0 to 128 [ 96.850423][ T4750] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.945983][ T4758] loop2: detected capacity change from 0 to 1024 [ 97.066594][ T4758] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000479,noinit_itable,jqfmt=vfsold,nolazytime,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,auto_da_alloc,grpid,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 97.531364][ T1232] Bluetooth: hci5: Frame reassembly failed (-84) [ 97.568862][ T4782] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 97.599472][ T4780] __quota_error: 17 callbacks suppressed [ 97.599492][ T4780] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 97.639371][ T4782] EXT4-fs (loop3): 1 truncate cleaned up [ 97.649853][ T4782] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,usrjquota=,barrier,,errors=continue. Quota mode: writeback. [ 97.713413][ T4780] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 97.722881][ T4780] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.169: Failed to acquire dquot type 0 [ 97.787273][ T4780] EXT4-fs (loop4): 1 truncate cleaned up [ 97.793067][ T4780] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.825464][ T4782] EXT4-fs (loop3): Ignoring removed orlov option [ 97.845721][ T4785] [ 97.848129][ T4785] ====================================================== [ 97.855724][ T4785] WARNING: possible circular locking dependency detected [ 97.862799][ T4785] syzkaller #0 Not tainted [ 97.863398][ T4782] EXT4-fs (loop3): Ignoring removed orlov option [ 97.867239][ T4785] ------------------------------------------------------ [ 97.867247][ T4785] syz.0.171/4785 is trying to acquire lock: [ 97.886887][ T4785] ffff888074a6cb98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 97.897387][ T4785] [ 97.897387][ T4785] but task is already holding lock: [ 97.904797][ T4785] ffff888074a6cff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 97.914278][ T4785] [ 97.914278][ T4785] which lock already depends on the new lock. [ 97.914278][ T4785] [ 97.924925][ T4785] [ 97.924925][ T4785] the existing dependency chain (in reverse order) is: [ 97.934070][ T4785] [ 97.934070][ T4785] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 97.941743][ T4785] __mutex_lock_common+0x1e3/0x2400 [ 97.947614][ T4785] mutex_lock_nested+0x17/0x20 [ 97.953091][ T4785] hci_dev_do_close+0x5f/0x1030 [ 97.958506][ T4785] hci_rfkill_set_block+0x10a/0x190 [ 97.964419][ T4785] rfkill_set_block+0x1c6/0x420 [ 97.969835][ T4785] rfkill_fop_write+0x452/0x560 [ 97.975234][ T4785] vfs_write+0x30b/0xd60 [ 97.980024][ T4785] ksys_write+0x152/0x260 [ 97.984907][ T4785] do_syscall_64+0x4c/0xa0 [ 97.989977][ T4785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.996620][ T4785] [ 97.996620][ T4785] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 98.004650][ T4785] __mutex_lock_common+0x1e3/0x2400 [ 98.010452][ T4785] mutex_lock_nested+0x17/0x20 [ 98.015770][ T4785] rfkill_register+0x33/0x8a0 [ 98.020999][ T4785] hci_register_dev+0x452/0x970 [ 98.026412][ T4785] vhci_create_device+0x32c/0x5c0 [ 98.032010][ T4785] vhci_write+0x391/0x450 [ 98.037003][ T4785] vfs_write+0x745/0xd60 [ 98.041814][ T4785] ksys_write+0x152/0x260 [ 98.046685][ T4785] do_syscall_64+0x4c/0xa0 [ 98.051837][ T4785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.058387][ T4785] [ 98.058387][ T4785] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 98.066370][ T4785] __mutex_lock_common+0x1e3/0x2400 [ 98.072135][ T4785] mutex_lock_nested+0x17/0x20 [ 98.077437][ T4785] vhci_send_frame+0x88/0x100 [ 98.082794][ T4785] hci_send_frame+0x1a9/0x2e0 [ 98.088049][ T4785] hci_tx_work+0x9f9/0x1710 [ 98.093103][ T4785] process_one_work+0x85f/0x1010 [ 98.098602][ T4785] worker_thread+0xaa6/0x1290 [ 98.103839][ T4785] kthread+0x436/0x520 [ 98.108537][ T4785] ret_from_fork+0x1f/0x30 [ 98.113500][ T4785] [ 98.113500][ T4785] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 98.122734][ T4785] __lock_acquire+0x2c42/0x7d10 [ 98.128320][ T4785] lock_acquire+0x19e/0x400 [ 98.133577][ T4785] __flush_work+0x116/0x210 [ 98.138908][ T4785] hci_dev_do_close+0x1e7/0x1030 [ 98.144429][ T4785] hci_rfkill_set_block+0x10a/0x190 [ 98.150408][ T4785] rfkill_set_block+0x1c6/0x420 [ 98.156473][ T4785] rfkill_fop_write+0x452/0x560 [ 98.162157][ T4785] vfs_write+0x30b/0xd60 [ 98.167354][ T4785] ksys_write+0x152/0x260 [ 98.172331][ T4785] do_syscall_64+0x4c/0xa0 [ 98.177472][ T4785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.184009][ T4785] [ 98.184009][ T4785] other info that might help us debug this: [ 98.184009][ T4785] [ 98.194442][ T4785] Chain exists of: [ 98.194442][ T4785] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 98.194442][ T4785] [ 98.209612][ T4785] Possible unsafe locking scenario: [ 98.209612][ T4785] [ 98.217098][ T4785] CPU0 CPU1 [ 98.222596][ T4785] ---- ---- [ 98.228009][ T4785] lock(&hdev->req_lock); [ 98.232604][ T4785] lock(rfkill_global_mutex); [ 98.239921][ T4785] lock(&hdev->req_lock); [ 98.247033][ T4785] lock((work_completion)(&hdev->tx_work)); [ 98.253049][ T4785] [ 98.253049][ T4785] *** DEADLOCK *** [ 98.253049][ T4785] [ 98.261293][ T4785] 2 locks held by syz.0.171/4785: [ 98.266674][ T4785] #0: ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 98.276906][ T4785] #1: ffff888074a6cff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 98.287169][ T4785] [ 98.287169][ T4785] stack backtrace: [ 98.293127][ T4785] CPU: 0 PID: 4785 Comm: syz.0.171 Not tainted syzkaller #0 [ 98.301008][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.311548][ T4785] Call Trace: [ 98.315296][ T4785] [ 98.318245][ T4785] dump_stack_lvl+0x188/0x250 [ 98.322956][ T4785] ? load_image+0x400/0x400 [ 98.327483][ T4785] ? show_regs_print_info+0x20/0x20 [ 98.332962][ T4785] ? print_circular_bug+0x12b/0x1a0 [ 98.338622][ T4785] check_noncircular+0x296/0x330 [ 98.343638][ T4785] ? look_up_lock_class+0x71/0x110 [ 98.348793][ T4785] ? add_chain_block+0x940/0x940 [ 98.353753][ T4785] ? lockdep_lock+0xf1/0x1f0 [ 98.358378][ T4785] ? mark_lock+0x94/0x320 [ 98.362738][ T4785] __lock_acquire+0x2c42/0x7d10 [ 98.367623][ T4785] ? lockdep_unlock+0x143/0x2e0 [ 98.372512][ T4785] ? mark_lock+0x94/0x320 [ 98.376885][ T4785] ? verify_lock_unused+0x140/0x140 [ 98.382139][ T4785] ? __lock_acquire+0x12e8/0x7d10 [ 98.387232][ T4785] lock_acquire+0x19e/0x400 [ 98.391807][ T4785] ? __flush_work+0xfa/0x210 [ 98.396412][ T4785] ? verify_lock_unused+0x140/0x140 [ 98.401636][ T4785] ? __mutex_trylock_common+0x155/0x260 [ 98.407205][ T4785] ? read_lock_is_recursive+0x10/0x10 [ 98.412751][ T4785] __flush_work+0x116/0x210 [ 98.417367][ T4785] ? __flush_work+0xfa/0x210 [ 98.422154][ T4785] ? flush_work+0x20/0x20 [ 98.426498][ T4785] ? hci_leds_update_powered+0x148/0x160 [ 98.432150][ T4785] ? rcu_lock_release+0x5/0x20 [ 98.436955][ T4785] ? __lock_acquire+0x7d10/0x7d10 [ 98.442154][ T4785] hci_dev_do_close+0x1e7/0x1030 [ 98.447138][ T4785] ? _raw_spin_unlock+0x40/0x40 [ 98.452110][ T4785] hci_rfkill_set_block+0x10a/0x190 [ 98.457622][ T4785] ? rcu_lock_release+0x20/0x20 [ 98.462549][ T4785] rfkill_set_block+0x1c6/0x420 [ 98.467531][ T4785] rfkill_fop_write+0x452/0x560 [ 98.472697][ T4785] ? rfkill_fop_read+0x4d0/0x4d0 [ 98.478449][ T4785] ? common_file_perm+0xc0/0x1c0 [ 98.483695][ T4785] ? fsnotify_perm+0x5d/0x560 [ 98.488628][ T4785] ? security_file_permission+0x75/0xa0 [ 98.494224][ T4785] ? rfkill_fop_read+0x4d0/0x4d0 [ 98.499291][ T4785] vfs_write+0x30b/0xd60 [ 98.503585][ T4785] ? file_end_write+0x250/0x250 [ 98.508500][ T4785] ? __fget_files+0x40f/0x480 [ 98.513224][ T4785] ? __fdget_pos+0x1e2/0x370 [ 98.517973][ T4785] ? ksys_write+0x71/0x260 [ 98.522439][ T4785] ksys_write+0x152/0x260 [ 98.526808][ T4785] ? __ia32_sys_read+0x80/0x80 [ 98.531697][ T4785] ? lockdep_hardirqs_on+0x94/0x140 [ 98.537020][ T4785] do_syscall_64+0x4c/0xa0 [ 98.541608][ T4785] ? clear_bhb_loop+0x30/0x80 [ 98.546629][ T4785] ? clear_bhb_loop+0x30/0x80 [ 98.551524][ T4785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.557694][ T4785] RIP: 0033:0x7fa9949b8eb9 [ 98.562174][ T4785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.582188][ T4785] RSP: 002b:00007fa992c14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.590732][ T4785] RAX: ffffffffffffffda RBX: 00007fa994c33fa0 RCX: 00007fa9949b8eb9 [ 98.599116][ T4785] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 98.607281][ T4785] RBP: 00007fa994a26c1f R08: 0000000000000000 R09: 0000000000000000 [ 98.616277][ T4785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.624710][ T4785] R13: 00007fa994c34038 R14: 00007fa994c33fa0 R15: 00007ffd25ab7df8 [ 98.634109][ T4785] [ 98.640443][ T4782] EXT4-fs error (device loop3): ext4_remount:6060: comm syz.3.170: Abort forced by user [ 98.650786][ T4782] EXT4-fs (loop3): Remounting filesystem read-only [ 98.664509][ T4782] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,nodelalloc,orlov,abort,nombcache,orlov,. Quota mode: writeback. [ 99.583237][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 99.591478][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 101.664011][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 101.674373][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 103.743367][ T23] Bluetooth: hci5: command 0x1009 tx timeout