last executing test programs: 48.686959922s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") socket(0xa, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 47.555629243s ago: executing program 1 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) listxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0xf) 45.826177422s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xa5c0a, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 45.571503102s ago: executing program 32 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xa5c0a, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 18.024272183s ago: executing program 5 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) io_setup(0x1, &(0x7f0000000280)) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 7.005232297s ago: executing program 5 (id=333): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 3.794240615s ago: executing program 5 (id=354): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x99, 0xba, 0x20, 0x50d, 0x121, 0x659, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdf, 0xb9, 0xaf}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3.086742002s ago: executing program 2 (id=355): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000100)) 2.901037437s ago: executing program 2 (id=358): unshare(0x6a040000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.798652355s ago: executing program 4 (id=361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0xf0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.715109552s ago: executing program 0 (id=362): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xd9) 2.686554804s ago: executing program 4 (id=363): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0) 2.6123392s ago: executing program 0 (id=365): syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff010000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 2.598130501s ago: executing program 4 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 2.48624072s ago: executing program 0 (id=367): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) 2.48606578s ago: executing program 4 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) io_setup(0x1, &(0x7f0000000280)) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 2.441689124s ago: executing program 0 (id=369): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(r1, 0xffffffffffffffff, 0x0) 2.331866983s ago: executing program 0 (id=370): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0200000000000000000000030700000001000000020000000e0900000000"], 0x0, 0x3e, 0x0, 0xa, 0x7ff}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.49694816s ago: executing program 2 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) 1.334652353s ago: executing program 2 (id=373): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x15) r0 = dup(0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x6, 0x80000001, 0x4, 0x8, 0x8, 0x1, 0x3, 0x7}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x23b]}, 0x8}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700"/16, @ANYRES32], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x20004000) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000511000/0x400000)=nil) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r0]) 1.069271784s ago: executing program 3 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r1, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x10) 914.159626ms ago: executing program 3 (id=375): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 805.670325ms ago: executing program 3 (id=376): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/158) 737.195351ms ago: executing program 5 (id=377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 622.10082ms ago: executing program 3 (id=378): openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x5f501}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) 579.537273ms ago: executing program 5 (id=379): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 455.463623ms ago: executing program 3 (id=380): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffff, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0x800, 0xfff9, 0x4, 0x4}, 0x42, [0x5903, 0x7, 0x7, 0x2, 0x5, 0x7ff, 0xe3e0, 0x6, 0x3, 0xb1f, 0xce55, 0x6, 0xe, 0x1, 0x3, 0x9, 0x0, 0x10af9c92, 0x6, 0x3, 0x8, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x608a, 0x9, 0x1, 0x1, 0x5, 0x401, 0x2, 0x1, 0xa1, 0xfffffffa, 0x5, 0x5, 0x1000, 0x7f, 0x5, 0x1, 0xffffffff, 0x200, 0x0, 0x0, 0xf, 0x0, 0x4d8, 0x5, 0x8, 0x1, 0x3, 0x292, 0xfffeffff, 0x1baf, 0x2, 0x5, 0x1ff, 0x6, 0x2f, 0x6, 0x2], [0x3, 0x7, 0x3, 0x1, 0x2, 0xffff58d8, 0x409, 0x80, 0xffffffff, 0x4d14, 0x2, 0x0, 0x8, 0x7, 0xe32b, 0x9, 0xce28, 0x407f, 0x2, 0x6, 0x6, 0x5, 0x2, 0xed, 0xb, 0x80000001, 0x6, 0x3000, 0x9, 0x2, 0x2, 0x4, 0x8000, 0x2, 0xbc, 0x1, 0x4, 0x97b0, 0x9, 0xc, 0x3, 0x2, 0x5, 0x7, 0x0, 0x9, 0x8a4, 0x5d, 0x5, 0x10000, 0x4, 0x3, 0x0, 0x3ff, 0x401, 0xfe5, 0x4, 0x9b4, 0x3, 0x2, 0x9, 0x42a7, 0x800, 0x9], [0x7, 0xfffff801, 0x7, 0xfff, 0x2, 0xdb, 0x0, 0x6, 0x7, 0x100, 0x9, 0x9, 0x101, 0x4c, 0x6, 0x5, 0xfff, 0x3, 0x7, 0x0, 0xf, 0x0, 0xfffffffa, 0x7, 0x4, 0x5, 0x10001, 0x5, 0x2, 0xe3a1, 0x6, 0x5, 0x6, 0xb1cc, 0x9, 0x2, 0x6, 0xc, 0x8, 0x0, 0x9, 0x6, 0xfffffffd, 0xa60d, 0x7, 0x1, 0x6, 0x7fff, 0x8, 0x0, 0x6, 0x9, 0x2, 0xa41f, 0x9, 0x10, 0x7, 0x0, 0x95b2, 0x1, 0x195, 0x7fff, 0x5, 0x7b8c], [0x0, 0x788e, 0xfffffffb, 0x9, 0x5, 0x4, 0x9, 0x2, 0x1000, 0xf2, 0x8ec, 0xec, 0x43df1e02, 0x0, 0x4c6, 0x4, 0x7, 0x5, 0x3, 0x2, 0x51, 0x1, 0x6, 0x4, 0x4, 0x2f5, 0xf, 0x0, 0x2, 0x6, 0x28, 0x6, 0x1, 0x81, 0x1, 0x1, 0x5, 0x1, 0x0, 0x6, 0x3, 0xdd16, 0x1, 0x0, 0x10000, 0xfffffff7, 0x4, 0x4, 0xc, 0x1, 0xffffff83, 0xe, 0x7, 0x80000000, 0x6, 0xf, 0x200008, 0x7, 0x5, 0x80, 0x7, 0x2, 0x200, 0xb8e]}, 0x45c) 386.103389ms ago: executing program 0 (id=381): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x14, &(0x7f00000011c0)={[{0xd, 0x4e00, "aaeb772048acc1272857ab676d"}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 385.899939ms ago: executing program 2 (id=382): request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) 278.199548ms ago: executing program 4 (id=383): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653a302c002fb51a16f4153556642b0f3e3422bd45e4d63b7c7c902b3327f93a08e62d4fa7"]) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r2 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x8}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000001c0)={0x980900, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) 188.096465ms ago: executing program 4 (id=384): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x4, {0x60, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 138.111179ms ago: executing program 2 (id=385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 91.306282ms ago: executing program 5 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 0s ago: executing program 3 (id=387): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 38.214094][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.224593][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. syzkaller login: [ 58.822954][ T4172] cgroup: Unknown subsys name 'net' [ 58.964482][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.434368][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.828846][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.986489][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.025898][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.048608][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.055735][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.066433][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.095933][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.103130][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.111476][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.150785][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 62.167510][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 62.192595][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.199923][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.207877][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.217249][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.235854][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.257002][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.264174][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.272207][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.341625][ T4184] team0: Port device team_slave_0 added [ 62.355691][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.364980][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.372281][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.380430][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.390097][ T4184] team0: Port device team_slave_1 added [ 62.396099][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.403437][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.411417][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.430917][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.493474][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.500719][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.508758][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.527146][ T4191] team0: Port device team_slave_0 added [ 62.534109][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.541455][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.567771][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.581753][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.591090][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.598275][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.606068][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.622431][ T4191] team0: Port device team_slave_1 added [ 62.629266][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.636222][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.662400][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.675126][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.692283][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.699530][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.707266][ T4183] device bridge_slave_0 entered promiscuous mode [ 62.742821][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.752075][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.759533][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.767400][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.785158][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.792360][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.818503][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.839334][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.869758][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.876768][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.903366][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.916865][ T4185] team0: Port device team_slave_0 added [ 62.940402][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.953830][ T4185] team0: Port device team_slave_1 added [ 62.976193][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.005515][ T4183] team0: Port device team_slave_0 added [ 63.013862][ T4183] team0: Port device team_slave_1 added [ 63.028749][ T4186] team0: Port device team_slave_0 added [ 63.046991][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.054042][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.078598][ T4186] team0: Port device team_slave_1 added [ 63.084778][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.092052][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.118091][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.171257][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.178429][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.204619][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.226021][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.232879][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.240628][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.248522][ T4191] Cannot create hsr debugfs directory [ 63.254534][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.261699][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.287866][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.299744][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.306720][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.332666][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.360663][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.367974][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.394186][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.405789][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.413148][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.439124][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.500000][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.506952][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.513789][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.521507][ T4185] Cannot create hsr debugfs directory [ 63.577942][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.584897][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.591769][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.599845][ T4183] Cannot create hsr debugfs directory [ 63.608720][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 63.608720][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 63.615531][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 63.622094][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.627308][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 63.640110][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 63.642508][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.652835][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.660693][ T4186] Cannot create hsr debugfs directory [ 63.941839][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.953551][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.964837][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.975345][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.035576][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.055061][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.090807][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.103827][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.130364][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.146155][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.157514][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.167475][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.180376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.190626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.203156][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.215787][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.242070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.252438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.261768][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.269060][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.282987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.320828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.330729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.339787][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.346857][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.355157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.363883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.373581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.382668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.391526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.400292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.431212][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.441447][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.453568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.491956][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.501558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.511059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.521069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.529603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.539380][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.565013][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.596445][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.622932][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.633517][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.656144][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.672110][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.695840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.710496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.725496][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.745527][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.777112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.786550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.795777][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.802915][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.812382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.825403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.836594][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.843760][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.852378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.872546][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.880089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.889188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.924542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.933769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.942929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.952723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.961967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.972198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.980693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.001023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.010202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.019163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.028897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.037275][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.044378][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.054334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.063242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.072739][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.079844][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.087900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.101995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.111700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.130366][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.144282][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.155725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.192283][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.204987][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.213381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.222141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.231216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.240881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.252523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.261201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.273528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.282406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.290796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.299222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.319725][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.337121][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.352243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.362020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.371220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.379853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.388889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.397553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.408076][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.422060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.431813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.442147][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.449307][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.475492][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.489275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.497549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.511729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.523825][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.533962][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.543772][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.550924][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.565048][ T4184] device veth0_vlan entered promiscuous mode [ 65.593435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.603347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.614875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.625692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.634711][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.641878][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.656773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.683633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.692497][ T4246] Bluetooth: hci2: command 0x041b tx timeout [ 65.694750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.706834][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 65.708819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.713606][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 65.722743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.735595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.740543][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 65.744145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.751552][ T4246] Bluetooth: hci0: command 0x041b tx timeout [ 65.759299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.791346][ T4184] device veth1_vlan entered promiscuous mode [ 65.800984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.812082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.825345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.836380][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.843513][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.858733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.867501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.877489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.887286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.904431][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.916292][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.948533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.956671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.965587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.975041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.984005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.992696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.001095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.009364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.016817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.024984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.036921][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.056360][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.120412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.130211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.140074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.150768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.159910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.169587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.179356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.193364][ T4184] device veth0_macvtap entered promiscuous mode [ 66.215795][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.229057][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.238533][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.249552][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.260419][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.273244][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.285450][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.309453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.322947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.333626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.342996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.353655][ T4184] device veth1_macvtap entered promiscuous mode [ 66.366306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.375205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.383999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.398898][ T4185] device veth0_vlan entered promiscuous mode [ 66.429578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.445894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.454551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.468385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.475870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.485812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.494448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.502724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.523194][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.535780][ T4185] device veth1_vlan entered promiscuous mode [ 66.544250][ T4191] device veth0_vlan entered promiscuous mode [ 66.564823][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.578621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.586866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.604363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.618382][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.634310][ T4191] device veth1_vlan entered promiscuous mode [ 66.679158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.687201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.695859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.705013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.715291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.722995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.734051][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.743062][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.752917][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.761936][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.789356][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.801999][ T4185] device veth0_macvtap entered promiscuous mode [ 66.829786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.843799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.853904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.863649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.873479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.885897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.900455][ T4191] device veth0_macvtap entered promiscuous mode [ 66.913050][ T4185] device veth1_macvtap entered promiscuous mode [ 66.939705][ T4191] device veth1_macvtap entered promiscuous mode [ 66.999478][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.013184][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.021963][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.030868][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.040008][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.078088][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.089884][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.101585][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.112157][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.123227][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.135449][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.151028][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.163408][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.173600][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.184136][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.195932][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.213086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.223145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.232096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.241078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.250745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.259669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.270028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.278666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.287051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.295658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.342932][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.353417][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.362791][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.363359][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.378122][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.389743][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.408554][ T4183] device veth0_vlan entered promiscuous mode [ 67.420431][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.432058][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.442610][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.456023][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.467140][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.480451][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.489322][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.498434][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.529558][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.539574][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.549248][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.559366][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.591049][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.599845][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.603763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.621229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.630628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.654019][ T4183] device veth1_vlan entered promiscuous mode [ 67.675506][ T4186] device veth0_vlan entered promiscuous mode [ 67.703869][ T4186] device veth1_vlan entered promiscuous mode [ 67.711776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.720840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.730619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.744233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.770136][ T4246] Bluetooth: hci0: command 0x040f tx timeout [ 67.783431][ T4246] Bluetooth: hci3: command 0x040f tx timeout [ 67.795247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.808460][ T4246] Bluetooth: hci1: command 0x040f tx timeout [ 67.814658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.823128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.828531][ T4246] Bluetooth: hci4: command 0x040f tx timeout [ 67.831988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.842364][ T4246] Bluetooth: hci2: command 0x040f tx timeout [ 67.865516][ T4186] device veth0_macvtap entered promiscuous mode [ 67.896065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.908980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.919836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.933164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.944267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.954243][ T4294] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.973619][ T4183] device veth0_macvtap entered promiscuous mode [ 68.000630][ T4186] device veth1_macvtap entered promiscuous mode [ 68.019906][ T4183] device veth1_macvtap entered promiscuous mode [ 68.026499][ T1451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.041898][ T1451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.077445][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.088742][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.096201][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.096733][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.110686][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.125414][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.135732][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.149489][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.165049][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.175064][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.193238][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.202268][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.210636][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.221096][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.230719][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.239790][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.248180][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.256706][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.272868][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.293298][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.329800][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.356118][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.373649][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.383972][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.405486][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.418675][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.443320][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.454120][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.466339][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.478376][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.489790][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.500769][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.510999][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.521752][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.534540][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.563532][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.576091][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.586997][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.599264][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.608763][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.623588][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.634862][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.659156][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.668826][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.695677][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.714379][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.725168][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.748366][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.762674][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.775425][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.791423][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.803256][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.830682][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.852165][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.864368][ T4308] loop0: detected capacity change from 0 to 2048 [ 68.878608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.887408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.898575][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.909604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.965579][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.980201][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.989454][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.998892][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.009130][ T4308] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.089879][ T4314] loop2: detected capacity change from 0 to 128 [ 69.125756][ T4308] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 69.193620][ T1451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.201849][ T4314] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.208331][ T1451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.215985][ T4293] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 69.233858][ T4314] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.235620][ T4293] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.235620][ T4293] [ 69.276993][ T4318] loop3: detected capacity change from 0 to 1024 [ 69.278524][ T4293] EXT4-fs (loop0): Total free blocks count 0 [ 69.291394][ T4293] EXT4-fs (loop0): Free/Dirty block details [ 69.301819][ T4293] EXT4-fs (loop0): free_blocks=2415919504 [ 69.313521][ T4293] EXT4-fs (loop0): dirty_blocks=16 [ 69.328629][ T4293] EXT4-fs (loop0): Block reservation details [ 69.335443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.343946][ T4293] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 69.353146][ T4318] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 69.362735][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.375749][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.396722][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.406882][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.416398][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.429901][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.440841][ T4318] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 69.575357][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.647738][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.670557][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.764718][ T4323] loop0: detected capacity change from 0 to 2048 [ 69.809597][ T4329] loop4: detected capacity change from 0 to 128 [ 69.849737][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 69.857179][ T4323] loop0: p1 < > p3 [ 69.868499][ T4323] loop0: p3 size 134217728 extends beyond EOD, truncated [ 69.875212][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 69.903161][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 69.910105][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 69.980289][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 70.063595][ T3561] loop0: p1 < > p3 [ 70.064833][ T4336] loop1: detected capacity change from 0 to 2048 [ 70.094571][ T3561] loop0: p3 size 134217728 extends beyond EOD, truncated [ 70.115727][ T4339] loop2: detected capacity change from 0 to 512 [ 70.116530][ T4337] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.143132][ T4344] loop4: detected capacity change from 0 to 512 [ 70.154040][ T4336] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 70.247364][ T4341] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 70.258768][ T4344] ======================================================= [ 70.258768][ T4344] WARNING: The mand mount option has been deprecated and [ 70.258768][ T4344] and is ignored by this kernel. Remove the mand [ 70.258768][ T4344] option from the mount to silence this warning. [ 70.258768][ T4344] ======================================================= [ 70.298780][ T4341] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 70.326160][ T4339] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 70.349130][ T4336] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 70.434359][ T4344] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.470850][ T4344] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.550187][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 70.600068][ T4351] loop0: detected capacity change from 0 to 4096 [ 70.675912][ T4351] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 70.781109][ T4336] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 234: padding at end of block bitmap is not set [ 70.892342][ T4336] EXT4-fs (loop1): Remounting filesystem read-only [ 71.067184][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 71.082447][ T4333] udevd[4333]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 71.094203][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 71.132574][ T4351] EXT4-fs (loop0): Test dummy encryption mode enabled [ 71.155405][ T4183] EXT4-fs (loop1): Remounting filesystem read-only [ 71.186521][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 71.216172][ T4183] EXT4-fs (loop1): Remounting filesystem read-only [ 71.226607][ T4351] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,nodioread_nolock,test_dummy_encryption,nombcache,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 71.274796][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 71.294560][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.301620][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.333193][ T4183] EXT4-fs (loop1): Remounting filesystem read-only [ 71.344206][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 71.383358][ T4183] EXT4-fs (loop1): Remounting filesystem read-only [ 71.413599][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 71.470912][ T4183] EXT4-fs (loop1): Remounting filesystem read-only [ 71.482937][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 71.542254][ T4183] EXT4-fs (loop1): Remounting filesystem read-only [ 71.557781][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 71.587926][ T4367] loop2: detected capacity change from 0 to 1024 [ 71.603262][ T4183] EXT4-fs (loop1): Remounting filesystem read-only [ 71.624866][ T4367] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.646086][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 71.667555][ T4183] EXT4-fs (loop1): Remounting filesystem read-only [ 71.674781][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 71.701426][ T4183] EXT4-fs (loop1): Remounting filesystem read-only [ 71.815630][ T4351] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 72.032799][ T4373] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 72.072467][ T4384] loop4: detected capacity change from 0 to 512 [ 72.117760][ T4373] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 72.136161][ T4386] loop2: detected capacity change from 0 to 256 [ 72.234792][ T4386] FAT-fs (loop2): Directory bread(block 64) failed [ 72.267235][ T4384] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 72.299259][ T4386] FAT-fs (loop2): Directory bread(block 65) failed [ 72.306390][ T4386] FAT-fs (loop2): Directory bread(block 66) failed [ 72.339207][ T4384] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.350692][ T4386] FAT-fs (loop2): Directory bread(block 67) failed [ 72.358052][ T4386] FAT-fs (loop2): Directory bread(block 68) failed [ 72.364830][ T4386] FAT-fs (loop2): Directory bread(block 69) failed [ 72.374479][ T4386] FAT-fs (loop2): Directory bread(block 70) failed [ 72.382501][ T4386] FAT-fs (loop2): Directory bread(block 71) failed [ 72.389193][ T4386] FAT-fs (loop2): Directory bread(block 72) failed [ 72.395926][ T4386] FAT-fs (loop2): Directory bread(block 73) failed [ 72.480408][ T4384] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 1969368878 (only 1 groups) [ 72.493753][ T4394] loop3: detected capacity change from 0 to 2048 [ 72.541960][ T4394] loop3: p1 < > p3 [ 72.566560][ T4394] loop3: p3 size 134217728 extends beyond EOD, truncated [ 72.803243][ T4271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.883705][ T4394] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.980366][ T4271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.109194][ T4271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.195054][ T4418] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 73.245160][ T4271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.355089][ T4425] 9pnet: p9_errstr2errno: server reported unknown error @cÿÿÿÿÿÿÿÿD†üB‘…–0xffffffffffffffff [ 73.431718][ T4430] loop2: detected capacity change from 0 to 512 [ 73.490016][ T4430] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.537763][ T4430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.601141][ T4430] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.792565][ T4430] EXT4-fs (loop2): 1 truncate cleaned up [ 73.798597][ T4430] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 74.013627][ T4446] loop3: detected capacity change from 0 to 2048 [ 74.227971][ T4446] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 74.324070][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 74.429647][ T4432] chnl_net:caif_netlink_parms(): no params data found [ 74.521384][ T4470] loop2: detected capacity change from 0 to 512 [ 74.538090][ T4446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.41: bg 0: block 234: padding at end of block bitmap is not set [ 74.595580][ T4446] EXT4-fs (loop3): Remounting filesystem read-only [ 74.691926][ T4470] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.781865][ T4470] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.946559][ T156] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 75.057930][ T156] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 75.177672][ T156] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.177672][ T156] [ 75.211069][ T156] EXT4-fs (loop2): Total free blocks count 0 [ 75.217154][ T156] EXT4-fs (loop2): Free/Dirty block details [ 75.225160][ T156] EXT4-fs (loop2): free_blocks=65280 [ 75.233845][ T156] EXT4-fs (loop2): dirty_blocks=1 [ 75.239513][ T156] EXT4-fs (loop2): Block reservation details [ 75.245621][ T156] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 75.408379][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.415499][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.446598][ T4432] device bridge_slave_0 entered promiscuous mode [ 75.466619][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.491359][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.514223][ T4432] device bridge_slave_1 entered promiscuous mode [ 75.527764][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 75.597448][ T4432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.638847][ T4432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.734785][ T4432] team0: Port device team_slave_0 added [ 75.760598][ T4432] team0: Port device team_slave_1 added [ 75.897598][ T4432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.912545][ T4432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.963364][ T4432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.048150][ T4432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.055279][ T4432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.164150][ T4524] loop0: detected capacity change from 0 to 1024 [ 76.203737][ T4432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.318815][ T4524] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 76.397914][ T4524] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.479902][ T4524] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.53: Freeing blocks not in datazone - block = 0, count = 16 [ 76.496047][ T4537] xt_connbytes: Forcing CT accounting to be enabled [ 76.520038][ T4535] loop2: detected capacity change from 0 to 1024 [ 76.578044][ T4535] EXT4-fs (loop2): Ignoring removed oldalloc option [ 76.622965][ T4271] device hsr_slave_0 left promiscuous mode [ 76.644614][ T4271] device hsr_slave_1 left promiscuous mode [ 76.661066][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.690528][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.714115][ T4535] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 76.739409][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.746837][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.754758][ T4271] device bridge_slave_1 left promiscuous mode [ 76.762717][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.783734][ T4543] loop3: detected capacity change from 0 to 512 [ 76.900223][ T26] audit: type=1804 audit(1754460145.488:2): pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.57" name="/newroot/10/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 76.908559][ T9] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 76.945388][ T4543] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 76.973233][ T4271] device bridge_slave_0 left promiscuous mode [ 76.996098][ T4543] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.007368][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.036422][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 77.049882][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 77.049882][ T9] [ 77.060267][ T9] EXT4-fs (loop0): Total free blocks count 0 [ 77.066890][ T9] EXT4-fs (loop0): Free/Dirty block details [ 77.073889][ T9] EXT4-fs (loop0): free_blocks=4293918736 [ 77.082134][ T9] EXT4-fs (loop0): dirty_blocks=16 [ 77.088524][ T9] EXT4-fs (loop0): Block reservation details [ 77.095169][ T9] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 77.194345][ T4551] loop4: detected capacity change from 0 to 1024 [ 77.208248][ T4271] device veth1_macvtap left promiscuous mode [ 77.235969][ T4271] device veth0_macvtap left promiscuous mode [ 77.270386][ T4551] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 77.291827][ T4271] device veth1_vlan left promiscuous mode [ 77.319021][ T4271] device veth0_vlan left promiscuous mode [ 77.448590][ T4551] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 77.625732][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 77.648718][ T4567] loop3: detected capacity change from 0 to 128 [ 77.700712][ T4567] EXT4-fs warning (device loop3): ext4_fill_super:3980: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 77.745746][ T4567] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 78.409590][ T4271] team0 (unregistering): Port device team_slave_1 removed [ 78.428636][ T4587] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.486559][ T4271] team0 (unregistering): Port device team_slave_0 removed [ 78.543922][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.560218][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.657932][ T4271] bond0 (unregistering): Released all slaves [ 78.789277][ T4432] device hsr_slave_0 entered promiscuous mode [ 78.796397][ T4432] device hsr_slave_1 entered promiscuous mode [ 78.805397][ T4432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.831381][ T4432] Cannot create hsr debugfs directory [ 79.261618][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.297205][ T4610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.391532][ T4620] loop0: detected capacity change from 0 to 512 [ 79.522114][ T4620] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 79.617830][ T4432] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.685048][ T4432] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.697934][ T4241] Bluetooth: hci0: command 0x040f tx timeout [ 79.766239][ T4432] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.804415][ T4432] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.234573][ T4432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.271788][ T4661] loop0: detected capacity change from 0 to 512 [ 80.299892][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.313778][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.381264][ T4432] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.535854][ T4661] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.555878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.570268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.626491][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.633628][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.673609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.699194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.727179][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.734376][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.773387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.815134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.876601][ T4669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 80.926238][ T4669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 80.966564][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.002069][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.039883][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.088613][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.125575][ T4676] mmap: syz.0.91 (4676) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 81.129120][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.202106][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.242859][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.280919][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.312630][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.348768][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.398533][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.541757][ T1108] cfg80211: failed to load regulatory.db [ 81.767862][ T4241] Bluetooth: hci0: command 0x0419 tx timeout [ 81.987970][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.077919][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.121704][ T4700] loop4: detected capacity change from 0 to 512 [ 82.132068][ T4432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.199081][ T4700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.294979][ T4700] EXT4-fs (loop4): 1 truncate cleaned up [ 82.300845][ T4700] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 82.366749][ T4700] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.96: corrupted in-inode xattr [ 82.480051][ T4700] EXT4-fs (loop4): Remounting filesystem read-only [ 82.486687][ T4700] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1760: inode #15: comm syz.4.96: unable to update i_inline_off [ 82.801432][ T26] audit: type=1326 audit(1754460151.388:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce3b7be9 code=0x7ffc0000 [ 82.909096][ T26] audit: type=1326 audit(1754460151.388:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06ce3b7be9 code=0x7ffc0000 [ 83.030933][ T26] audit: type=1326 audit(1754460151.388:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce3b7be9 code=0x7ffc0000 [ 83.034809][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.125009][ T26] audit: type=1326 audit(1754460151.388:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.2.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ce3b7be9 code=0x7ffc0000 [ 83.190551][ T4731] loop0: detected capacity change from 0 to 2048 [ 83.197558][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.240857][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.255885][ T4733] loop4: detected capacity change from 0 to 1024 [ 83.271791][ T4735] loop3: detected capacity change from 0 to 512 [ 83.281530][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.301254][ T4432] device veth0_vlan entered promiscuous mode [ 83.309470][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 83.325963][ T4731] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.343322][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.387361][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.397134][ T4731] fs-verity: sha512 using implementation "sha512-avx2" [ 83.413871][ T4733] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 83.441797][ T4432] device veth1_vlan entered promiscuous mode [ 83.442848][ T4735] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.475238][ T4731] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.103: bg 0: block 345: padding at end of block bitmap is not set [ 83.548278][ T4731] fs-verity (loop0, inode 15): ext4_end_enable_verity() failed with err -117 [ 83.558353][ T4733] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.564079][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.600482][ T4735] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.616890][ T4733] EXT4-fs error (device loop4): ext4_free_blocks:6223: comm syz.4.104: Freeing blocks not in datazone - block = 0, count = 16 [ 83.644030][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.688440][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.722309][ T4731] syz.0.103 (4731) used greatest stack depth: 19776 bytes left [ 83.734527][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.748677][ T4735] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 83.749635][ T4432] device veth0_macvtap entered promiscuous mode [ 83.766821][ T4735] Quota error (device loop3): write_blk: dquota write failed [ 83.784554][ T4735] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 83.796908][ T4735] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.105: Failed to acquire dquot type 0 [ 83.813489][ T4744] loop2: detected capacity change from 0 to 1024 [ 83.814286][ T4735] EXT4-fs (loop3): 1 truncate cleaned up [ 83.871250][ T4432] device veth1_macvtap entered promiscuous mode [ 83.898130][ T4735] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 83.911543][ T4744] EXT4-fs (loop2): Ignoring removed orlov option [ 84.014192][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.076736][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.080782][ T4744] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 84.146834][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.199295][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.209435][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.237713][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.255100][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.270615][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.347959][ T4432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.380840][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.401348][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.478478][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.507926][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.572836][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.642757][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.653640][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.664776][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.675327][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.768953][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.816675][ T4432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.903232][ T4432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.974351][ T4432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.040153][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.057533][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.115707][ T4432] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.126486][ T4432] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.183409][ T4432] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.192545][ T4432] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.758852][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.774876][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.830150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.865032][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.907274][ T4811] loop0: detected capacity change from 0 to 512 [ 85.924567][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.994528][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.033826][ T4811] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.124: invalid block [ 86.089334][ T4820] loop3: detected capacity change from 0 to 512 [ 86.185297][ T4811] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.124: Invalid block bitmap block 0 in block_group 0 [ 86.215900][ T4820] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.126: bad orphan inode 31 [ 86.239364][ T4820] ext4_test_bit(bit=30, block=4) = 0 [ 86.310315][ T4820] EXT4-fs (loop3): 1 truncate cleaned up [ 86.367762][ T4820] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 86.388498][ T4811] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 86.411061][ T4811] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.124: attempt to clear invalid blocks 983261 len 1 [ 86.487025][ T4811] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.124: invalid indirect mapped block 2683928664 (level 0) [ 86.535604][ T4811] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz.0.124: Invalid inode table block 0 in block_group 0 [ 86.579331][ T4811] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 86.644394][ T4811] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 86.741947][ T4811] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz.0.124: Invalid inode table block 0 in block_group 0 [ 86.790095][ T4811] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 86.841608][ T4811] EXT4-fs error (device loop0): ext4_truncate:4273: inode #13: comm syz.0.124: mark_inode_dirty error [ 86.853436][ T4811] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 86.862859][ T4811] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz.0.124: Invalid inode table block 0 in block_group 0 [ 86.888313][ T4811] EXT4-fs (loop0): 1 truncate cleaned up [ 86.928366][ T4811] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 87.089174][ T4839] loop2: detected capacity change from 0 to 1024 [ 87.135592][ T4811] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz.0.124: Invalid inode table block 0 in block_group 0 [ 87.241274][ T4839] EXT4-fs (loop2): Ignoring removed bh option [ 87.252768][ T4811] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 87.272066][ T4839] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.360870][ T4839] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,grpquota,nodioread_nolock,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 87.471152][ T4845] loop5: detected capacity change from 0 to 164 [ 87.648005][ T4845] Unable to read rock-ridge attributes [ 87.744451][ T4849] loop0: detected capacity change from 0 to 4096 [ 87.756010][ T4845] Unable to read rock-ridge attributes [ 87.886321][ T4849] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.953360][ T4867] loop3: detected capacity change from 0 to 512 [ 87.972693][ T4867] EXT4-fs (loop3): Ignoring removed orlov option [ 88.016394][ T4867] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 88.143310][ T4867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 88.220424][ T4867] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.135: corrupted in-inode xattr [ 88.288223][ T4867] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.135: couldn't read orphan inode 15 (err -117) [ 88.321592][ T4867] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 88.343467][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.023707][ T4903] device team0 entered promiscuous mode [ 89.044615][ T4903] device team_slave_0 entered promiscuous mode [ 89.054992][ T4898] loop3: detected capacity change from 0 to 2048 [ 89.088645][ T4903] device team_slave_1 entered promiscuous mode [ 89.111233][ T4903] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.139409][ T4908] block device autoloading is deprecated and will be removed. [ 89.164454][ T4898] loop3: p1 < > p3 [ 89.170829][ T4898] loop3: p3 size 134217728 extends beyond EOD, truncated [ 89.325309][ T4913] kvm: emulating exchange as write [ 89.384823][ T4918] loop2: detected capacity change from 0 to 512 [ 89.545381][ T4924] loop5: detected capacity change from 0 to 512 [ 89.580487][ T4926] loop0: detected capacity change from 0 to 128 [ 89.649327][ T4918] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 89.668051][ T4918] EXT4-fs (loop2): Remounting filesystem read-only [ 89.675337][ T4918] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.151: invalid indirect mapped block 4278190080 (level 0) [ 89.729193][ T4918] EXT4-fs (loop2): Remounting filesystem read-only [ 89.748744][ T4918] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.151: invalid indirect mapped block 1 (level 1) [ 89.774544][ T4926] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.787430][ T4924] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 89.802847][ T4926] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.815271][ T4918] EXT4-fs (loop2): Remounting filesystem read-only [ 89.833396][ T4918] EXT4-fs (loop2): 1 truncate cleaned up [ 89.843721][ T4918] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,noauto_da_alloc,dioread_lock,errors=remount-ro,barrier=0x00000000000000cb,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 89.958789][ T4941] loop4: detected capacity change from 0 to 2048 [ 90.130688][ T4941] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 90.180811][ T4941] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.198429][ T4951] loop0: detected capacity change from 0 to 1024 [ 90.240599][ T4946] loop2: detected capacity change from 0 to 2048 [ 90.276820][ T4951] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 90.311138][ T4946] loop2: p1 < > p3 [ 90.317960][ T4946] loop2: p3 size 134217728 extends beyond EOD, truncated [ 90.357041][ T4951] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 90.504078][ T3561] loop2: p1 < > p3 [ 90.549651][ T3561] loop2: p3 size 134217728 extends beyond EOD, truncated [ 90.598433][ T4960] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.735248][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 90.753587][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 90.793144][ T4965] loop0: detected capacity change from 0 to 1024 [ 90.910699][ T4965] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.944017][ T4965] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.229109][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 91.231289][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 91.350945][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 91.363851][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 91.450507][ T4923] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 92.111923][ T5007] netlink: 248 bytes leftover after parsing attributes in process `syz.2.177'. [ 92.638516][ T5029] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.997883][ T5039] capability: warning: `syz.3.188' uses deprecated v2 capabilities in a way that may be insecure [ 93.211953][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.220908][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.309160][ T5054] tipc: Started in network mode [ 93.314551][ T5054] tipc: Node identity ac1414aa, cluster identity 4711 [ 93.326401][ T5054] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.334477][ T5054] tipc: Enabled bearer , priority 10 [ 93.393459][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 93.457879][ T4315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.459589][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.496357][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 93.597799][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.707833][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 93.737826][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.843436][ T4315] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 93.862402][ T4315] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.877890][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.894686][ T4315] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.902522][ T4291] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.925378][ T4315] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.936071][ T4315] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.951759][ T4315] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.966026][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.969035][ T4291] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.027802][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 94.167978][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 94.260631][ T4315] usb 4-1: GET_CAPABILITIES returned 0 [ 94.277382][ T4315] usbtmc 4-1:16.0: can't read capabilities [ 94.327784][ T4241] tipc: Node number set to 2886997162 [ 94.467829][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 94.483535][ T4315] usb 4-1: USB disconnect, device number 2 [ 94.493148][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 94.737773][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 95.109205][ T5113] syz.3.216 uses obsolete (PF_INET,SOCK_PACKET) [ 95.267836][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 95.300077][ T5123] loop4: detected capacity change from 0 to 164 [ 95.836412][ T5143] loop4: detected capacity change from 0 to 16 [ 95.874677][ T5139] overlayfs: failed to clone upperpath [ 95.914692][ T5143] erofs: (device loop4): mounted with root inode @ nid 36. [ 95.980993][ T5143] process 'syz.4.223' launched 'éq‰Y’3aK' with NULL argv: empty string added [ 96.088622][ T5143] attempt to access beyond end of device [ 96.088622][ T5143] loop4: rw=0, want=24, limit=16 [ 96.102192][ T5151] 9pnet_virtio: no channels available for device syz [ 96.707877][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.743562][ T5170] device tunl0 entered promiscuous mode [ 96.947762][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 97.068473][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 97.082386][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.142373][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.183714][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.207795][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.254693][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.281045][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.404193][ T5185] netlink: 'syz.3.240': attribute type 27 has an invalid length. [ 97.678927][ T7] usb 1-1: GET_CAPABILITIES returned 0 [ 97.685025][ T7] usbtmc 1-1:16.0: can't read capabilities [ 97.856782][ T4291] usb 1-1: USB disconnect, device number 2 [ 98.143533][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.151023][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.417800][ C1] net_ratelimit: 2 callbacks suppressed [ 98.417817][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 98.938203][ T5185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.021369][ T5185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.458388][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 99.494411][ T4193] Bluetooth: Wrong link type (-22) [ 99.655251][ T5207] loop4: detected capacity change from 0 to 2048 [ 99.711227][ T5185] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.715952][ T4353] loop4: p1 < > p3 [ 99.721403][ T5185] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.732736][ T4353] loop4: p3 size 134217728 extends beyond EOD, truncated [ 99.734059][ T5185] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.751979][ T5185] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.766519][ T5207] loop4: p1 < > p3 [ 99.777448][ T5207] loop4: p3 size 134217728 extends beyond EOD, truncated [ 99.816692][ T3561] loop4: p1 < > p3 [ 99.822286][ T3561] loop4: p3 size 134217728 extends beyond EOD, truncated [ 100.004101][ T26] audit: type=1326 audit(1754460168.588:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.4.251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f889e405be9 code=0x0 [ 100.198219][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 100.214023][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 100.435774][ T5225] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 100.462855][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 100.464713][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 100.482746][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 100.492009][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 100.533210][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 100.550127][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 100.727908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 100.736926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 100.745877][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 100.828278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #308!!! [ 100.907213][ T5241] loop5: detected capacity change from 0 to 16 [ 101.046099][ T5241] erofs: (device loop5): mounted with root inode @ nid 36. [ 101.190551][ T5241] attempt to access beyond end of device [ 101.190551][ T5241] loop5: rw=0, want=24, limit=16 [ 101.527845][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 101.804325][ T5266] binder: 5265:5266 unknown command 0 [ 101.825578][ T5266] binder: 5265:5266 ioctl c0306201 200000000080 returned -22 [ 101.901556][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 101.968586][ T5271] binder: 5265:5271 ioctl 4018620d 200000000040 returned -16 [ 102.206822][ T5288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 102.567914][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 103.537893][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.607789][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 104.018838][ T5335] loop3: detected capacity change from 0 to 16 [ 104.088476][ T13] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.135464][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.398548][ T13] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.436135][ T13] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.549301][ T13] usb 1-1: Product: syz [ 104.553787][ T13] usb 1-1: Manufacturer: syz [ 104.595521][ T13] usb 1-1: SerialNumber: syz [ 104.679173][ T13] usb 1-1: config 0 descriptor?? [ 104.812345][ T13] usb 1-1: selecting invalid altsetting 0 [ 105.227333][ T13] usb 1-1: USB disconnect, device number 3 [ 105.517628][ C1] sched: RT throttling activated [ 105.519314][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 105.551791][ T5335] erofs: (device loop3): mounted with root inode @ nid 36. [ 105.561509][ T5335] attempt to access beyond end of device [ 105.561509][ T5335] loop3: rw=0, want=24, limit=16 [ 106.082531][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.447101][ T4291] Bluetooth: hci0: command 0x1407 tx timeout [ 106.567873][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.607907][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.889441][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 107.929436][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 108.010184][ T5385] Zero length message leads to an empty skb [ 108.147874][ T5396] 9pnet_virtio: no channels available for device syz [ 108.390046][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 108.603213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 108.647766][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 108.705877][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 109.012839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 109.048144][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 109.687860][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 110.576310][ T5475] input: syz1 as /devices/virtual/input/input6 [ 110.687906][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.727799][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 110.818766][ T5485] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.837486][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.856800][ T5487] device vlan2 entered promiscuous mode [ 110.866172][ T5487] device team0 entered promiscuous mode [ 110.887347][ T5487] device team_slave_0 entered promiscuous mode [ 110.898009][ T5487] device team_slave_1 entered promiscuous mode [ 110.930604][ T5487] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 110.952417][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 111.026120][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.059447][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.108016][ T1108] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 111.130317][ T1108] usb 1-1: config 0 has no interface number 0 [ 111.158726][ T1108] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 111.177337][ T1108] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 111.194310][ T1108] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.215246][ T1108] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 111.237736][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.305264][ T1108] usb 1-1: config 0 descriptor?? [ 111.361470][ T1108] ldusb 1-1:0.55: Interrupt in endpoint not found [ 111.569274][ T1108] usb 1-1: USB disconnect, device number 4 [ 111.767861][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.210511][ T5546] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.307243][ T5551] kvm: pic: non byte read [ 112.325602][ T5551] kvm: pic: non byte read [ 112.344368][ T5551] kvm: pic: non byte read [ 112.363167][ T5551] kvm: pic: non byte read [ 112.371579][ T5551] kvm: pic: non byte read [ 112.395925][ T5551] kvm: pic: non byte read [ 112.397929][ T4227] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.404091][ T5551] kvm: pic: non byte read [ 112.438184][ T5551] kvm: pic: non byte read [ 112.442847][ T5551] kvm: pic: non byte read [ 112.451306][ T5551] kvm: pic: non byte read [ 112.721794][ T5580] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 112.733283][ T5580] binder: 5579:5580 ioctl 4018620d 2000000002c0 returned -1 [ 112.748249][ T2287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.807796][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.841921][ T4227] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 112.877131][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.168011][ T2287] usb 3-1: Using ep0 maxpacket: 8 [ 113.188592][ T4227] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 114.254667][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 114.694081][ T5606] loop3: detected capacity change from 0 to 2048 [ 114.817056][ T5610] tipc: Started in network mode [ 114.835665][ T5610] tipc: Node identity 5aee143ffbe5, cluster identity 4711 [ 114.845926][ T5610] tipc: Enabled bearer , priority 0 [ 114.861025][ T5610] device syzkaller0 entered promiscuous mode [ 114.902003][ T5610] tipc: Resetting bearer [ 114.934529][ T5609] tipc: Resetting bearer [ 114.984839][ T5609] tipc: Disabling bearer [ 115.287829][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 115.431695][ T4227] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 115.439827][ T4227] usb 6-1: Manufacturer: syz [ 115.446438][ T4227] usb 6-1: config 0 descriptor?? [ 115.477957][ T4227] usb 6-1: can't set config #0, error -71 [ 115.489143][ T4227] usb 6-1: USB disconnect, device number 2 [ 115.498479][ T4353] loop3: p1 < > p3 [ 115.605228][ T2287] usb 3-1: device descriptor read/all, error -71 [ 115.614461][ T4353] loop3: p3 size 134217728 extends beyond EOD, truncated [ 115.662480][ T5606] loop3: p1 < > p3 [ 115.674114][ T5606] loop3: p3 size 134217728 extends beyond EOD, truncated [ 115.751147][ T26] audit: type=1326 audit(1754460184.338:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.2.358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06ce3b7be9 code=0x0 [ 115.772648][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.849807][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 115.885364][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 115.959528][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 115.985352][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 116.007924][ T4227] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.307970][ T4227] usb 6-1: Using ep0 maxpacket: 32 [ 116.324360][ T5649] loop0: detected capacity change from 0 to 2048 [ 116.327942][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 117.350019][ T5657] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 117.361545][ T5657] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 117.370479][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 117.484200][ T5664] 9pnet: Insufficient options for proto=fd [ 117.703708][ T5649] loop0: p1 < > p3 [ 117.709023][ T5649] loop0: p3 size 134217728 extends beyond EOD, truncated [ 118.015341][ T5674] device gtp0 entered promiscuous mode [ 118.111231][ T5677] device netdevsim0 entered promiscuous mode [ 118.190290][ T4227] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 118.219381][ T5679] input: syz0 as /devices/virtual/input/input7 [ 118.250809][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 118.263673][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 118.320008][ T4227] usb 6-1: can't read configurations, error -71 [ 118.407810][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 118.544338][ T5690] ------------[ cut here ]------------ [ 118.616705][ T23] [ 118.619076][ T23] ====================================================== [ 118.626103][ T23] WARNING: possible circular locking dependency detected [ 118.633150][ T23] 5.15.189-syzkaller #0 Not tainted [ 118.638353][ T23] ------------------------------------------------------ [ 118.645380][ T23] kworker/1:1/23 is trying to acquire lock: [ 118.651276][ T23] ffff888073df8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 118.662340][ T23] [ 118.662340][ T23] but task is already holding lock: [ 118.669825][ T23] ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 118.678889][ T23] [ 118.678889][ T23] which lock already depends on the new lock. [ 118.678889][ T23] [ 118.689334][ T23] [ 118.689334][ T23] the existing dependency chain (in reverse order) is: [ 118.698372][ T23] [ 118.698372][ T23] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 118.706390][ T23] __mutex_lock_common+0x1eb/0x2390 [ 118.712134][ T23] mutex_lock_nested+0x17/0x20 [ 118.717443][ T23] rfkill_register+0x33/0x8a0 [ 118.722671][ T23] hci_register_dev+0x452/0x970 [ 118.728073][ T23] vhci_create_device+0x32c/0x5c0 [ 118.733636][ T23] vhci_write+0x391/0x450 [ 118.734349][ T5690] WARNING: CPU: 0 PID: 5690 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 118.738498][ T23] vfs_write+0x712/0xd00 [ 118.738516][ T23] ksys_write+0x14d/0x250 [ 118.738530][ T23] do_syscall_64+0x4c/0xa0 [ 118.738548][ T23] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.750737][ T5690] Modules linked in: [ 118.752332][ T23] [ 118.752332][ T23] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 118.752366][ T23] __mutex_lock_common+0x1eb/0x2390 [ 118.757318][ T5690] [ 118.762152][ T23] mutex_lock_nested+0x17/0x20 [ 118.762173][ T23] vhci_send_frame+0x88/0x100 [ 118.762192][ T23] hci_send_frame+0x1a9/0x2e0 [ 118.762208][ T23] hci_tx_work+0x9f9/0x1710 [ 118.762224][ T23] process_one_work+0x863/0x1000 [ 118.772332][ T5690] CPU: 0 PID: 5690 Comm: syz.2.385 Not tainted 5.15.189-syzkaller #0 [ 118.772516][ T23] worker_thread+0xaa8/0x12a0 [ 118.780775][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.786019][ T23] kthread+0x436/0x520 [ 118.786052][ T23] ret_from_fork+0x1f/0x30 [ 118.786071][ T23] [ 118.786071][ T23] -> #2 ((work_completion)(&hdev->tx_work) [ 118.788813][ T5690] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 118.793673][ T23] ){+.+.}-{0:0}: [ 118.793692][ T23] __flush_work+0xdd/0x1b0 [ 118.793711][ T23] hci_dev_do_close+0x1e7/0x1030 [ 118.793729][ T23] hci_unregister_dev+0x2d7/0x580 [ 118.799637][ T5690] Code: c0 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 25 4b c0 ff 0f 0b e9 62 fe ff ff e8 19 4b c0 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 a2 69 8d 80 e1 07 80 c1 03 38 c1 [ 118.804093][ T23] vhci_release+0x73/0xc0 [ 118.804117][ T23] __fput+0x234/0x930 [ 118.809597][ T5690] RSP: 0018:ffffc9000318fac8 EFLAGS: 00010287 [ 118.814585][ T23] task_work_run+0x125/0x1a0 [ 118.814608][ T23] do_exit+0x61e/0x20a0 [ 118.864858][ T5690] [ 118.869214][ T23] do_group_exit+0x12e/0x300 [ 118.869242][ T23] __x64_sys_exit_group+0x3b/0x40 [ 118.869262][ T23] do_syscall_64+0x4c/0xa0 [ 118.869294][ T23] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.869315][ T23] [ 118.869315][ T23] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 118.869345][ T23] __mutex_lock_common+0x1eb/0x2390 [ 118.869364][ T23] mutex_lock_nested+0x17/0x20 [ 118.869381][ T23] bg_scan_update+0x44/0x3b0 [ 118.869398][ T23] process_one_work+0x863/0x1000 [ 118.869415][ T23] worker_thread+0xaa8/0x12a0 [ 118.869431][ T23] kthread+0x436/0x520 [ 118.931197][ T5690] RAX: ffffffff81b77907 RBX: 0000200000000000 RCX: 0000000000080000 [ 118.932689][ T23] ret_from_fork+0x1f/0x30 [ 118.932715][ T23] [ 118.932715][ T23] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 119.011177][ T23] __lock_acquire+0x2c33/0x7c60 [ 119.016595][ T23] lock_acquire+0x197/0x3f0 [ 119.021617][ T23] __flush_work+0xdd/0x1b0 [ 119.026553][ T23] __cancel_work_timer+0x3ac/0x520 [ 119.032180][ T23] hci_request_cancel_all+0xcc/0x300 [ 119.037980][ T23] hci_dev_do_close+0x4e/0x1030 [ 119.043345][ T23] hci_rfkill_set_block+0x10a/0x190 [ 119.049060][ T23] rfkill_set_block+0x1c6/0x420 [ 119.054433][ T23] rfkill_epo+0x75/0x170 [ 119.059193][ T23] rfkill_op_handler+0x76/0x220 [ 119.064558][ T23] process_one_work+0x863/0x1000 [ 119.070011][ T23] worker_thread+0xaa8/0x12a0 [ 119.075224][ T23] kthread+0x436/0x520 [ 119.079809][ T23] ret_from_fork+0x1f/0x30 [ 119.084740][ T23] [ 119.084740][ T23] other info that might help us debug this: [ 119.084740][ T23] [ 119.094956][ T23] Chain exists of: [ 119.094956][ T23] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 119.094956][ T23] [ 119.110688][ T23] Possible unsafe locking scenario: [ 119.110688][ T23] [ 119.118133][ T23] CPU0 CPU1 [ 119.123486][ T23] ---- ---- [ 119.128838][ T23] lock(rfkill_global_mutex); [ 119.133597][ T23] lock(&data->open_mutex); [ 119.140707][ T23] lock(rfkill_global_mutex); [ 119.147980][ T23] lock((work_completion)(&hdev->bg_scan_update)); [ 119.154555][ T23] [ 119.154555][ T23] *** DEADLOCK *** [ 119.154555][ T23] [ 119.162689][ T23] 3 locks held by kworker/1:1/23: [ 119.167702][ T23] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 119.178054][ T23] #1: ffffc90000ddfd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 119.188414][ T23] #2: ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 119.197888][ T23] [ 119.197888][ T23] stack backtrace: [ 119.203761][ T23] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted 5.15.189-syzkaller #0 [ 119.211815][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.221860][ T23] Workqueue: events rfkill_op_handler [ 119.227262][ T23] Call Trace: [ 119.230539][ T23] [ 119.233465][ T23] dump_stack_lvl+0x168/0x230 [ 119.238141][ T23] ? load_image+0x3b0/0x3b0 [ 119.242638][ T23] ? show_regs_print_info+0x20/0x20 [ 119.247844][ T23] ? print_circular_bug+0x12b/0x1a0 [ 119.253039][ T23] check_noncircular+0x274/0x310 [ 119.257969][ T23] ? add_chain_block+0x940/0x940 [ 119.262895][ T23] ? lockdep_lock+0xdc/0x1e0 [ 119.267490][ T23] ? __lock_acquire+0x12d9/0x7c60 [ 119.272511][ T23] ? lockdep_lock+0x1e0/0x1e0 [ 119.277189][ T23] ? mark_lock+0x94/0x320 [ 119.281540][ T23] __lock_acquire+0x2c33/0x7c60 [ 119.286394][ T23] ? verify_lock_unused+0x140/0x140 [ 119.291599][ T23] ? verify_lock_unused+0x140/0x140 [ 119.296794][ T23] ? ret_from_fork+0x1e/0x30 [ 119.301388][ T23] lock_acquire+0x197/0x3f0 [ 119.305905][ T23] ? __flush_work+0xc1/0x1b0 [ 119.310490][ T23] ? __lock_acquire+0x7c60/0x7c60 [ 119.315511][ T23] ? read_lock_is_recursive+0x10/0x10 [ 119.320885][ T23] ? start_flush_work+0x776/0x820 [ 119.325919][ T23] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 119.331826][ T23] __flush_work+0xdd/0x1b0 [ 119.336243][ T23] ? __flush_work+0xc1/0x1b0 [ 119.340830][ T23] ? flush_work+0x20/0x20 [ 119.345159][ T23] ? try_to_grab_pending+0xf3/0x7e0 [ 119.350360][ T23] ? lockdep_hardirqs_off+0x70/0x100 [ 119.355649][ T23] ? mark_lock+0x94/0x320 [ 119.359980][ T23] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 119.365961][ T23] ? lock_chain_count+0x20/0x20 [ 119.370806][ T23] ? lockdep_hardirqs_off+0x70/0x100 [ 119.376084][ T23] ? mark_lock+0x94/0x320 [ 119.380412][ T23] ? __cancel_work_timer+0x331/0x520 [ 119.385695][ T23] __cancel_work_timer+0x3ac/0x520 [ 119.390804][ T23] ? cancel_work_sync+0x20/0x20 [ 119.395646][ T23] ? __cancel_work+0x1f4/0x2d0 [ 119.400406][ T23] ? lockdep_hardirqs_on+0x94/0x140 [ 119.405635][ T23] ? __cancel_work+0x26f/0x2d0 [ 119.410404][ T23] ? cancel_work+0x20/0x20 [ 119.414820][ T23] hci_request_cancel_all+0xcc/0x300 [ 119.420104][ T23] hci_dev_do_close+0x4e/0x1030 [ 119.424954][ T23] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 119.430846][ T23] ? _raw_spin_unlock+0x40/0x40 [ 119.435705][ T23] ? kobject_uevent_env+0x371/0x890 [ 119.440903][ T23] hci_rfkill_set_block+0x10a/0x190 [ 119.446106][ T23] ? rcu_lock_release+0x20/0x20 [ 119.450967][ T23] rfkill_set_block+0x1c6/0x420 [ 119.455817][ T23] rfkill_epo+0x75/0x170 [ 119.460055][ T23] rfkill_op_handler+0x76/0x220 [ 119.464905][ T23] process_one_work+0x863/0x1000 [ 119.469844][ T23] ? worker_detach_from_pool+0x240/0x240 [ 119.475468][ T23] ? lockdep_hardirqs_off+0x70/0x100 [ 119.480761][ T23] ? _raw_spin_lock_irq+0xab/0xe0 [ 119.485820][ T23] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 119.491210][ T23] ? wq_worker_running+0x97/0x170 [ 119.496228][ T23] worker_thread+0xaa8/0x12a0 [ 119.500940][ T23] kthread+0x436/0x520 [ 119.505006][ T23] ? rcu_lock_release+0x20/0x20 [ 119.509855][ T23] ? kthread_blkcg+0xd0/0xd0 [ 119.514442][ T23] ret_from_fork+0x1f/0x30 [ 119.518865][ T23] [ 119.522835][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 119.572049][ T5690] RDX: ffffc9000c7e1000 RSI: 0000000000000a3e RDI: 0000000000000a3f [ 119.582638][ T5690] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10048a5718 [ 119.606514][ T5690] R10: ffffed10048a5718 R11: 1ffff110048a5717 R12: ffff88807f517af0 [ 119.670185][ T5690] R13: dffffc0000000000 R14: ffff88807f517a50 R15: ffff888079157340 [ 119.717703][ T5690] FS: 00007f06cc21f6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 119.751633][ T5690] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.759053][ T5690] CR2: 0000200001000000 CR3: 0000000077cc4000 CR4: 00000000003526f0 [ 119.768078][ T5690] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.776276][ T5690] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.788223][ T5690] Call Trace: [ 119.791685][ T5690] [ 119.794659][ T5690] __vma_adjust+0x6a9/0x1c20 [ 119.801671][ T5690] __split_vma+0x34b/0x410 [ 119.806138][ T5690] __do_munmap+0x375/0xdc0 [ 119.811748][ T5690] mremap_to+0x363/0x6b0 [ 119.816040][ T5690] __se_sys_mremap+0x418/0x990 [ 119.822341][ T5690] ? __x64_sys_mremap+0xc0/0xc0 [ 119.827247][ T5690] ? lock_chain_count+0x20/0x20 [ 119.841078][ T5690] ? lockdep_hardirqs_on+0x94/0x140 [ 119.846332][ T5690] ? __x64_sys_mremap+0x1c/0xc0 [ 119.854132][ T5690] do_syscall_64+0x4c/0xa0 [ 119.860279][ T5690] ? clear_bhb_loop+0x30/0x80 [ 119.865059][ T5690] ? clear_bhb_loop+0x30/0x80 [ 119.871267][ T5690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.877256][ T5690] RIP: 0033:0x7f06ce3b7be9 [ 119.883686][ T5690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.906189][ T5690] RSP: 002b:00007f06cc21f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 119.915839][ T5690] RAX: ffffffffffffffda RBX: 00007f06ce5defa0 RCX: 00007f06ce3b7be9 [ 119.926230][ T5690] RDX: 0000000000200000 RSI: 0000000000600000 RDI: 0000200000000000 [ 119.937045][ T5690] RBP: 00007f06ce43ae19 R08: 0000200000a00000 R09: 0000000000000000 [ 119.950028][ T5690] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 119.963836][ T5690] R13: 00007f06ce5df038 R14: 00007f06ce5defa0 R15: 00007ffd94e85838 [ 119.972190][ T5690] [ 119.975306][ T5690] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.982603][ T5690] CPU: 0 PID: 5690 Comm: syz.2.385 Not tainted 5.15.189-syzkaller #0 [ 119.990674][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.000773][ T5690] Call Trace: [ 120.004051][ T5690] [ 120.006976][ T5690] dump_stack_lvl+0x168/0x230 [ 120.011708][ T5690] ? show_regs_print_info+0x20/0x20 [ 120.016912][ T5690] ? load_image+0x3b0/0x3b0 [ 120.021421][ T5690] panic+0x2c9/0x7f0 [ 120.025339][ T5690] ? bpf_jit_dump+0xd0/0xd0 [ 120.029846][ T5690] ? hugetlb_split+0x237/0x2a0 [ 120.034604][ T5690] __warn+0x248/0x2b0 [ 120.038585][ T5690] ? hugetlb_split+0x237/0x2a0 [ 120.043365][ T5690] report_bug+0x1b7/0x2e0 [ 120.047728][ T5690] handle_bug+0x3a/0x70 [ 120.051911][ T5690] exc_invalid_op+0x16/0x40 [ 120.056436][ T5690] asm_exc_invalid_op+0x16/0x20 [ 120.061304][ T5690] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 120.066695][ T5690] Code: c0 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 25 4b c0 ff 0f 0b e9 62 fe ff ff e8 19 4b c0 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 a2 69 8d 80 e1 07 80 c1 03 38 c1 [ 120.086304][ T5690] RSP: 0018:ffffc9000318fac8 EFLAGS: 00010287 [ 120.092377][ T5690] RAX: ffffffff81b77907 RBX: 0000200000000000 RCX: 0000000000080000 [ 120.100365][ T5690] RDX: ffffc9000c7e1000 RSI: 0000000000000a3e RDI: 0000000000000a3f [ 120.108336][ T5690] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10048a5718 [ 120.116327][ T5690] R10: ffffed10048a5718 R11: 1ffff110048a5717 R12: ffff88807f517af0 [ 120.124295][ T5690] R13: dffffc0000000000 R14: ffff88807f517a50 R15: ffff888079157340 [ 120.132275][ T5690] ? hugetlb_split+0x237/0x2a0 [ 120.137043][ T5690] ? hugetlb_split+0x237/0x2a0 [ 120.141805][ T5690] __vma_adjust+0x6a9/0x1c20 [ 120.146402][ T5690] __split_vma+0x34b/0x410 [ 120.150819][ T5690] __do_munmap+0x375/0xdc0 [ 120.155276][ T5690] mremap_to+0x363/0x6b0 [ 120.159543][ T5690] __se_sys_mremap+0x418/0x990 [ 120.164316][ T5690] ? __x64_sys_mremap+0xc0/0xc0 [ 120.169169][ T5690] ? lock_chain_count+0x20/0x20 [ 120.174052][ T5690] ? lockdep_hardirqs_on+0x94/0x140 [ 120.179251][ T5690] ? __x64_sys_mremap+0x1c/0xc0 [ 120.184105][ T5690] do_syscall_64+0x4c/0xa0 [ 120.188526][ T5690] ? clear_bhb_loop+0x30/0x80 [ 120.193205][ T5690] ? clear_bhb_loop+0x30/0x80 [ 120.197894][ T5690] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.203799][ T5690] RIP: 0033:0x7f06ce3b7be9 [ 120.208229][ T5690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.227828][ T5690] RSP: 002b:00007f06cc21f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 120.236232][ T5690] RAX: ffffffffffffffda RBX: 00007f06ce5defa0 RCX: 00007f06ce3b7be9 [ 120.244204][ T5690] RDX: 0000000000200000 RSI: 0000000000600000 RDI: 0000200000000000 [ 120.252177][ T5690] RBP: 00007f06ce43ae19 R08: 0000200000a00000 R09: 0000000000000000 [ 120.260180][ T5690] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 120.268162][ T5690] R13: 00007f06ce5df038 R14: 00007f06ce5defa0 R15: 00007ffd94e85838 [ 120.276133][ T5690] [ 120.279423][ T5690] Kernel Offset: disabled [ 120.283778][ T5690] Rebooting in 86400 seconds..