last executing test programs: 21.190660823s ago: executing program 4 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 20.332287593s ago: executing program 4 (id=701): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)=r2}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0) 10.160051892s ago: executing program 4 (id=711): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e1c, 0x6, @empty, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='Z', 0x1}], 0x1}}], 0x1, 0x404c484) 10.145740562s ago: executing program 4 (id=716): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 10.014032094s ago: executing program 4 (id=721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffff5865}}}}}}}, 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r2) 9.48816803s ago: executing program 4 (id=729): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 9.48794499s ago: executing program 32 (id=729): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 7.920542268s ago: executing program 3 (id=773): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x1db7, 0x7721, 0x10, 0x0, 0x0) 7.77454657s ago: executing program 3 (id=775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) waitid(0x1, 0x0, 0x0, 0x40000006, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@usrjquota}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@quota}, {@inlinecrypt}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, 'max_batch_time'}}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 7.648072101s ago: executing program 3 (id=777): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x2018000, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRESOCT], 0x8, 0x2f3, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="3d010000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd0300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 7.605397692s ago: executing program 3 (id=778): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, 0x0, 0x20044048) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x10000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0xfffc, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000004c0)=@phonet={0x23, 0x3, 0x7, 0xf}, 0x80, &(0x7f0000000580)=[{&(0x7f00000007c0)="dd73927c5ff330503b6622f52f669b0a5aeaf4dc2cd08bc8fa0322940a41e1b1624474a711b1a568e70b72ba67ef78a07460ec81454f88af9807ee11aeafbe50aff61151d5352299ad4acc730ad5db9db8072d14dd417785f6b6c8abf0e5b32b0a834de8d7214deafa8e8051bfcf956984fe523e5b9575f8fb317450c024cd222d7ba692254b743df84b9e85c7ac37f4c43104c9d0900012719a1e595b192dca5830c7a9c12b3235262d49a852f6feacf55668cc7a88261d78225001856888a7c40e8151c979073daa72ea864902dcd3862af91bfb83427f14463d0043f0be6184dbf27d76", 0xe5}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r9 = timerfd_create(0x2, 0x80800) timerfd_gettime(r9, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r10 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r10, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) socket$netlink(0x10, 0x3, 0x4) 5.764163773s ago: executing program 2 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000005a00f3ff"], 0x1c}], 0x1}, 0x0) 5.551386505s ago: executing program 3 (id=808): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@barrier}, {@user_xattr}]}, 0x80, 0x55d, &(0x7f0000002600)="$eJzs3c9vG1kdAPDvuHa2P9J1luUAK7EssKhdQe1mw+5GHJYiIThVWrHcS0jcKKoTV7Gz20SVNv0LkBACBCe4cEHiD0BClbhwREiV4AzSIhCCFA5IQGdle/KjyTh1U8fOj89Hms6b9zz+vjfuTObNPM0EcGq9EhHXIuJRmqavRUQ5yy9kU6x3p/bnHm7cnW1PSaTpu/9IIsnyNr8ryeYXstXORsQ3vxHxnWRv3Obq2q2Zer22nC1XW4u3q83VtSsLizPztfna0tTU5JvTb02/MX11IO28GBFvf+0vP/juz7/+9q+/+P6fb/ztcrvZMZ6V72zHU2hvomJeQZqmH8TWNil1tsWm9grLBwh2VBU7Lcycy/tEmqbpo7S8I+feUGoGAMBu7RPYj0XEZyPitSjHmfzTWQAAAOAYS78yHv9Lundocoz1yAcAAACOkUJnDGxSqGRjAcajUKhUumN4Px7nC/VGs/WFm42VpbkHPx6PiIkoFW4u1GtXs7HCE1FK2suTnfT28uu7lqci4oWI+H75XGe5Mtuoz4364gcAAACcEhd29f//Xe72/wEAAIATZmJvVmEU9QAAAAAOT07/HwAAADhh9P8BAADgRHvn+tl45/r1dPP913Pvra7carx3Za7WvFVZXJmtzDaWb1fmG435zjP7Fneueybn++qNxu0vxdLKnWqr1mxVm6trNxYbK0utGwuPvQIbAAAAGKIXPn3/j0lErH/5XGdqGxt1pYChKG6lkmyes/f/6fnu/MMhVQoYirxr+Lt9+NwQKgIMXfFAa6X9HDaAI6406goAI5c8obzn4J3fZfPPDLY+AADA4F36ZO/7//u/A2DdKwLgmLMTw+m160ZeWh5VRYCh69z/73fAr5MFOFFKfY0ABE6yZ77//0Rp+lQVAgAABm68MyWFSnZ5bzwKhUol4mLntQCl5OZCvXY1Ip6PiD+US8+1lyc7ayZP7DMAAAAAAAAAAAAAAAAAAAAAAAAAAF1pmkS6n2v7lgIAAADHQEThr8lvus/yv1R+dXz39YGx5D+dVwKPRcT7P3n3h3dmWq3lyXb+P7fyWz/K8l8fxRUMAAAAYLfNfvpmPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABunhxt3Zhxt30/9u3J0dZty/fzUiJrbid6ZuSTHOduZnoxQR5/+VRHHHeklEnBlA/PV7EfGJvPhJu1pbIfPinzv8+DGRbYW8+BcGEB9Os/vt48+1vP2vEK905vn7XzHiseWD6n38i63j35ke+//FPmO89OCX1Z7x70W8VMw//mzGT/bET7J5oa/43/7W2lqvsvSnEZciP/7OaNXW4u1qc3XtysLizHxtvrY0NTX55vRb029MX63eXKjXsn9zY3zvU796tF/7z/eIP9Gz/d06vdpX6yP+/+DOxos9/l6141/+XE783/4s+8Te+IXsuz6fpdvllzbT6930Ti//4vcv79f+ue32l/r7/bsxL+/f7O0fcBA7CgAwMM3VtVsz9Xpt+TgkSgdZq91Lzyt6MdsCz16xsaOyfSSeMvHBnpzzz7BfpGma9vgfdT8i+vmeJPqJVcoqeajbZzTHIwAA4PBsn/SPuiYAAAAAAAAAAAAAAAAAAABweg3wmWFjuY/Zy3mywPpWKvFkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyPgoAAD//3zh2Fo=") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 5.488882386s ago: executing program 3 (id=811): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240080c1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000340)="17f479d804", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 3.503033269s ago: executing program 0 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 858.722341ms ago: executing program 2 (id=822): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) readv(r1, 0x0, 0x0) 800.153711ms ago: executing program 0 (id=824): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x8, 0x0, 0xd6f, 0x3}}) 799.670651ms ago: executing program 0 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x23, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x30000011}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 668.970643ms ago: executing program 0 (id=827): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003980)=[{{&(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @empty}}}], 0x20}}], 0x1, 0x40000) 608.126353ms ago: executing program 2 (id=828): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 603.280493ms ago: executing program 0 (id=830): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 574.077204ms ago: executing program 1 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 479.892045ms ago: executing program 0 (id=832): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000340)=""/176, &(0x7f00000004c0)=0xb0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000000c0)=0xfffffffffffffff8, 0x9, 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) 479.600055ms ago: executing program 1 (id=833): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}]}, 0x28}, 0x1, 0x7}, 0x0) 417.253246ms ago: executing program 1 (id=834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x14, r1, 0x70d, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x24000800) 338.028447ms ago: executing program 1 (id=835): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 308.911736ms ago: executing program 5 (id=730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x300}, 0x0) 211.967448ms ago: executing program 1 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) 201.584868ms ago: executing program 5 (id=837): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 174.239588ms ago: executing program 2 (id=838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x18) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 124.172609ms ago: executing program 1 (id=839): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 123.718079ms ago: executing program 2 (id=840): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_eee={0x44, 0xffff, 0x4, 0x1ff, 0x1, 0xf, 0xa8, 0x5, [0x558887cd, 0x2]}}) 123.445469ms ago: executing program 5 (id=841): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) open(0x0, 0x81, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x6c2, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2, 0x10f}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 90.57257ms ago: executing program 5 (id=842): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYBLOB="a947a96f4b"], 0x20) 60.53773ms ago: executing program 2 (id=843): openat$sndseq(0xffffffffffffff9c, 0x0, 0x40000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") 0s ago: executing program 5 (id=844): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x20000000f}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x6, &(0x7f0000000380), 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) kernel console output (not intermixed with test programs): hosts. [ 27.053644][ T4310] cgroup: Unknown subsys name 'net' [ 27.308337][ T4310] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.615920][ T4310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 28.438018][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.446562][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.447913][ T4334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.449742][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.451236][ T4334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.452408][ T4335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.452710][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.453636][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.456137][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.456297][ T4335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.457326][ T4334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.458548][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.460030][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.460820][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.462003][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.462994][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.464053][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 28.466302][ T4334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.466877][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.467579][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.469054][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.469711][ T4334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.471426][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 28.471854][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 28.473933][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.475916][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 28.476101][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 28.478858][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.480218][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.496777][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 28.623497][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 28.658869][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 28.660802][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 28.680665][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 28.700123][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.701378][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.702833][ T4323] device bridge_slave_0 entered promiscuous mode [ 28.705027][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.706423][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.707903][ T4323] device bridge_slave_1 entered promiscuous mode [ 28.724603][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.731512][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 28.738267][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.743180][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.744325][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.746172][ T4320] device bridge_slave_0 entered promiscuous mode [ 28.748172][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.749340][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.750817][ T4331] device bridge_slave_0 entered promiscuous mode [ 28.764908][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.767563][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.769037][ T4320] device bridge_slave_1 entered promiscuous mode [ 28.770401][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.771533][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.773021][ T4331] device bridge_slave_1 entered promiscuous mode [ 28.778345][ T4323] team0: Port device team_slave_0 added [ 28.786258][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.787421][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.788973][ T4328] device bridge_slave_0 entered promiscuous mode [ 28.791184][ T4323] team0: Port device team_slave_1 added [ 28.799908][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.801364][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.802637][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.804248][ T4328] device bridge_slave_1 entered promiscuous mode [ 28.813315][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.816010][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.818272][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.831436][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.832641][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.837184][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.841728][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.842818][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.844256][ T4327] device bridge_slave_0 entered promiscuous mode [ 28.851124][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.852207][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.856047][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.860303][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.862303][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.863455][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.864832][ T4327] device bridge_slave_1 entered promiscuous mode [ 28.867416][ T4331] team0: Port device team_slave_0 added [ 28.869408][ T4320] team0: Port device team_slave_0 added [ 28.871507][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.879368][ T4331] team0: Port device team_slave_1 added [ 28.883994][ T4320] team0: Port device team_slave_1 added [ 28.894446][ T4328] team0: Port device team_slave_0 added [ 28.936222][ T4323] device hsr_slave_0 entered promiscuous mode [ 28.995381][ T4323] device hsr_slave_1 entered promiscuous mode [ 29.036102][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.043605][ T4328] team0: Port device team_slave_1 added [ 29.047910][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.050672][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.051819][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.058224][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.062619][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.063779][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.067807][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.075637][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.076758][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.080353][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.085543][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.086634][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.090843][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.098050][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.099160][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.102643][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.109482][ T4327] team0: Port device team_slave_0 added [ 29.112592][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.113734][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.117839][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.120662][ T4327] team0: Port device team_slave_1 added [ 29.176768][ T4331] device hsr_slave_0 entered promiscuous mode [ 29.225447][ T4331] device hsr_slave_1 entered promiscuous mode [ 29.265532][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.266772][ T4331] Cannot create hsr debugfs directory [ 29.276157][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.277237][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.280917][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.326125][ T4320] device hsr_slave_0 entered promiscuous mode [ 29.385345][ T4320] device hsr_slave_1 entered promiscuous mode [ 29.425218][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.426396][ T4320] Cannot create hsr debugfs directory [ 29.432016][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.433105][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.437405][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.496320][ T4328] device hsr_slave_0 entered promiscuous mode [ 29.535258][ T4328] device hsr_slave_1 entered promiscuous mode [ 29.595149][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.596401][ T4328] Cannot create hsr debugfs directory [ 29.686050][ T4327] device hsr_slave_0 entered promiscuous mode [ 29.745323][ T4327] device hsr_slave_1 entered promiscuous mode [ 29.805125][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.806322][ T4327] Cannot create hsr debugfs directory [ 29.887392][ T4323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.951646][ T4323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.986293][ T4323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.028311][ T4331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.066135][ T4323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.100225][ T4331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.180700][ T4331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.217796][ T4331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.270025][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.336971][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.387819][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.436690][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.478989][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.517660][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.555732][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 30.556795][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 30.557774][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 30.558782][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 30.559308][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 30.569203][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.627938][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.673628][ T4327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.708752][ T4327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.746638][ T4327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.801545][ T4327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.876422][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.882456][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.887485][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.891250][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.898001][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.906843][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.908652][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.911637][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.918457][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.920067][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.921600][ T250] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.922770][ T250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.924625][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.934904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.936852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.938504][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.939524][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.940927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.942451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.944010][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.945126][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.947925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.949416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.951263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.952721][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.953858][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.960723][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.964997][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.967754][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.971707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.978313][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.982582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 30.984833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.986485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 30.990681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 30.992312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.997561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.999324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.000801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.003951][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.007916][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.009390][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.010735][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.012198][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.017906][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.019954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.021423][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.031045][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.032237][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.033729][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.036413][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.037557][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.038956][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.040567][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.042063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.048391][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.052478][ T4323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.054238][ T4323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.057305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.058851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.060273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.061749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.063370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.064847][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.066784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.070184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.071991][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.073553][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.074668][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.080093][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.081782][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.083327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.084897][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.086787][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.087876][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.089311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.090908][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.092387][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.093554][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.101607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.103388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.104792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.106799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.108524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.113802][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.120465][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.122403][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.123894][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.127724][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.136005][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.137674][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.139212][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.140571][ T1693] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.141677][ T1693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.153752][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.155737][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.157150][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.158604][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.160014][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.162056][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.163581][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.169202][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.170817][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.172311][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.173818][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.176614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.178148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.187371][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.189557][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.191227][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.192585][ T1693] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.193739][ T1693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.207950][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.209953][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.212857][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.214567][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.218150][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.223923][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.226655][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.228556][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.230561][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.232329][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.233937][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.237386][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.243006][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.244830][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.250267][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.251836][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.253317][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.261286][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.262603][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.268118][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.287157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.288433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.291919][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.300288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.301909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.312650][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.314182][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.318318][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.319913][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.334027][ T4323] device veth0_vlan entered promiscuous mode [ 31.337086][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.338614][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.347904][ T4323] device veth1_vlan entered promiscuous mode [ 31.353030][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.358568][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.360216][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 31.361722][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.363028][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.364333][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.366378][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.367932][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.369352][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.374606][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.378346][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.380013][ T4331] device veth0_vlan entered promiscuous mode [ 31.399694][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.401074][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.407850][ T4331] device veth1_vlan entered promiscuous mode [ 31.409713][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.411209][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.412887][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.416640][ T4323] device veth0_macvtap entered promiscuous mode [ 31.421366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 31.422821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 31.424210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.426822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.428448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.429817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.431626][ T4323] device veth1_macvtap entered promiscuous mode [ 31.435620][ T4328] device veth0_vlan entered promiscuous mode [ 31.438170][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.441466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.442895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.444170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.448082][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.461305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.462929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.467627][ T4328] device veth1_vlan entered promiscuous mode [ 31.470092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.471623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.473124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.474670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.476630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.480335][ T4320] device veth0_vlan entered promiscuous mode [ 31.483541][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.490101][ T4320] device veth1_vlan entered promiscuous mode [ 31.496375][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 31.497823][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.499161][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 31.500587][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.502347][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.503969][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.509146][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.513348][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.516940][ T4331] device veth0_macvtap entered promiscuous mode [ 31.519538][ T4331] device veth1_macvtap entered promiscuous mode [ 31.524136][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 31.525900][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.527240][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.529002][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.531186][ T4323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.532555][ T4323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.533958][ T4323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536539][ T4323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.543265][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.544893][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.551318][ T4320] device veth0_macvtap entered promiscuous mode [ 31.553354][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.556326][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.558574][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.564857][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 31.566770][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.568300][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.575692][ T4328] device veth0_macvtap entered promiscuous mode [ 31.578282][ T4320] device veth1_macvtap entered promiscuous mode [ 31.581476][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.583079][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.584421][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.589215][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 31.592035][ T4328] device veth1_macvtap entered promiscuous mode [ 31.594597][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.597112][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.599247][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.604840][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.606535][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.608080][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.611738][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.613009][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.614239][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.616026][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.623124][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.624710][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.626875][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.628448][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.630426][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.636773][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.638951][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.649252][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.650853][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.652397][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.653963][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.656460][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.657854][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.659523][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.660984][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.662592][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.664128][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.667381][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.669534][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.671881][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.673163][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.681143][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 31.682542][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.684027][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.686582][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.688090][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.689959][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.691543][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.693089][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.694574][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.696187][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.697756][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.699744][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.700982][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.702610][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.709225][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.710593][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.711919][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.713237][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.718346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.719970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.735864][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.737152][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.737245][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.739648][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.741057][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.742400][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.749109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 31.751991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.753547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.759833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.761182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.772969][ T4327] device veth0_vlan entered promiscuous mode [ 31.787536][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.788751][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.790621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 31.793613][ T4327] device veth1_vlan entered promiscuous mode [ 31.813631][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.814970][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.819878][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.821191][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.829923][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.831289][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.837678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.839213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 31.841329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 31.842772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 31.844227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 31.873902][ T4431] 9pnet_fd: p9_fd_create_unix (4431): problem connecting socket: ./file0: -2 [ 31.880849][ T4431] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 31.888795][ T27] audit: type=1326 audit(31.880:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 31.892192][ T27] audit: type=1326 audit(31.880:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 31.900815][ T27] audit: type=1326 audit(31.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 31.906157][ T4327] device veth0_macvtap entered promiscuous mode [ 31.908636][ T27] audit: type=1326 audit(31.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 31.909759][ T4327] device veth1_macvtap entered promiscuous mode [ 31.913090][ T27] audit: type=1326 audit(31.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 31.917480][ T27] audit: type=1326 audit(31.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 31.920798][ T27] audit: type=1326 audit(31.880:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 31.923955][ T27] audit: type=1326 audit(31.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 31.927453][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.928213][ T27] audit: type=1326 audit(31.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4432 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=72 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 31.929669][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.937530][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.939060][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 31.970021][ T1610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.971953][ T1610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.974330][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.979345][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.980903][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.982814][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.984473][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.987002][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.988521][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.990264][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.993055][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.994389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 31.996671][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.998229][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.009934][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.011368][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.011537][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.014482][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.017636][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.019430][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.020947][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.022578][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.024095][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.388211][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.390734][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.402005][ T4327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.409995][ T4327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.417559][ T4327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.421619][ T4327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.501860][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.503339][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.536994][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.538508][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.635735][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 32.637412][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 32.638468][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 32.639500][ T4334] Bluetooth: hci4: command 0x041b tx timeout [ 32.673664][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 32.682134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.682937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.683246][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.684022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.684245][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.778687][ T27] audit: type=1326 audit(32.770:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 32.884080][ T4462] loop1: detected capacity change from 0 to 2048 [ 32.961713][ T4462] Alternate GPT is invalid, using primary GPT. [ 32.962752][ T4462] loop1: p1 p2 p3 [ 32.963341][ T4462] loop1: partition table partially beyond EOD, truncated [ 33.209619][ T4471] udevd[4471]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 33.214408][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 33.221682][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 33.815418][ T4478] tipc: Started in network mode [ 33.816335][ T4478] tipc: Node identity b26b5960b2ff, cluster identity 4711 [ 33.818962][ T4478] tipc: Enabled bearer , priority 0 [ 33.825639][ T4480] device syzkaller0 entered promiscuous mode [ 33.867477][ T4502] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.872487][ T4493] tipc: Resetting bearer [ 33.906587][ T4472] tipc: Resetting bearer [ 33.936062][ T4472] tipc: Disabling bearer [ 33.955148][ T4506] loop3: detected capacity change from 0 to 4096 [ 34.042268][ T4516] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 34.122028][ T4519] loop0: detected capacity change from 0 to 2048 [ 34.176090][ T4519] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.181907][ T4519] EXT4-fs error (device loop0): ext4_ext_precache:627: inode #2: comm syz.0.28: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 34.197274][ T4519] EXT4-fs (loop0): Remounting filesystem read-only [ 34.202004][ T4533] loop4: detected capacity change from 0 to 1024 [ 34.203419][ T4533] ======================================================= [ 34.203419][ T4533] WARNING: The mand mount option has been deprecated and [ 34.203419][ T4533] and is ignored by this kernel. Remove the mand [ 34.203419][ T4533] option from the mount to silence this warning. [ 34.203419][ T4533] ======================================================= [ 34.234547][ T4535] vhci_hcd: invalid port number 121 [ 34.238104][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 34.240359][ T4535] vhci_hcd: default hub control req: 4000 v0051 i0079 l0 [ 34.262571][ T4533] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.33: Invalid block bitmap block 0 in block_group 0 [ 34.274001][ T4533] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.33: Failed to acquire dquot type 0 [ 34.282899][ T4544] syz.1.38 uses obsolete (PF_INET,SOCK_PACKET) [ 34.285690][ T4533] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.33: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.299290][ T4533] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.33: Invalid inode bitmap blk 0 in block_group 0 [ 34.302979][ T4533] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 34.305301][ T4533] EXT4-fs (loop4): 1 orphan inode deleted [ 34.306313][ T4533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.335778][ T1610] EXT4-fs error (device loop4): ext4_release_dquot:6845: comm kworker/u4:4: Failed to release dquot type 0 [ 34.367090][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 34.408911][ T4553] loop3: detected capacity change from 0 to 4096 [ 34.442277][ T4562] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 34.658282][ T4599] lo speed is unknown, defaulting to 1000 [ 34.667888][ T4599] lo speed is unknown, defaulting to 1000 [ 34.673271][ T4599] lo speed is unknown, defaulting to 1000 [ 34.683853][ T4600] loop4: detected capacity change from 0 to 4096 [ 34.715816][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 34.715848][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 34.716941][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 34.717826][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 34.718945][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 34.726980][ T4604] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 34.770708][ T4366] lo speed is unknown, defaulting to 1000 [ 34.774295][ T4599] infiniband sz1: set active [ 34.777125][ T4599] infiniband sz1: added lo [ 34.827203][ T4599] RDS/IB: sz1: added [ 34.831083][ T4599] smc: adding ib device sz1 with port count 1 [ 34.834680][ T4599] smc: ib device sz1 port 1 has pnetid [ 34.845548][ T22] lo speed is unknown, defaulting to 1000 [ 34.847560][ T4599] lo speed is unknown, defaulting to 1000 [ 34.881943][ T4582] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 34.917138][ T4599] lo speed is unknown, defaulting to 1000 [ 34.920285][ T4625] netlink: 256 bytes leftover after parsing attributes in process `syz.4.66'. [ 34.982978][ T4599] lo speed is unknown, defaulting to 1000 [ 35.039525][ T4599] lo speed is unknown, defaulting to 1000 [ 35.065950][ T4599] lo speed is unknown, defaulting to 1000 [ 35.254390][ T4645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.71'. [ 35.537861][ T4652] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 35.713678][ T4667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.715126][ T4667] IPv6: NLM_F_CREATE should be set when creating new route [ 35.716306][ T4667] IPv6: NLM_F_CREATE should be set when creating new route [ 35.726547][ T4667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 36.115717][ T4668] lo speed is unknown, defaulting to 1000 [ 36.131627][ T4671] netlink: 'syz.1.85': attribute type 3 has an invalid length. [ 36.134608][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 37.137531][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 37.180962][ T4689] loop3: detected capacity change from 0 to 128 [ 37.271762][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 37.272784][ T4332] Bluetooth: hci0: command 0x0419 tx timeout [ 37.273682][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 37.274545][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 37.276712][ T27] kauditd_printk_skb: 150 callbacks suppressed [ 37.276719][ T27] audit: type=1326 audit(37.240:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 37.299953][ T27] audit: type=1326 audit(37.240:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 37.303367][ T27] audit: type=1326 audit(37.250:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 37.307249][ T27] audit: type=1326 audit(37.250:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 37.310531][ T27] audit: type=1326 audit(37.250:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 37.332387][ T27] audit: type=1326 audit(37.250:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 37.341531][ T27] audit: type=1326 audit(37.250:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 37.345644][ T27] audit: type=1326 audit(37.250:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 37.349044][ T27] audit: type=1326 audit(37.250:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 37.359297][ T4708] loop2: detected capacity change from 0 to 512 [ 37.362591][ T27] audit: type=1326 audit(37.250:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 37.366619][ T4708] EXT4-fs: Ignoring removed oldalloc option [ 37.372897][ T4708] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.377675][ T4708] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.380988][ T4704] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 37.389935][ T4708] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 37.392161][ T4708] EXT4-fs (loop2): 1 truncate cleaned up [ 37.392956][ T4708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.394984][ T4698] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 37.413967][ T4698] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 37.415098][ T4698] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 37.418063][ T4698] vhci_hcd vhci_hcd.0: Device attached [ 37.448843][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 37.552650][ T4726] device bridge1 entered promiscuous mode [ 37.655445][ T4715] vhci_hcd: connection closed [ 37.659364][ T9] vhci_hcd: stop threads [ 37.661148][ T9] vhci_hcd: release socket [ 37.661881][ T9] vhci_hcd: disconnect device [ 37.725217][ T4377] usb 11-1: enqueue for inactive port 0 [ 37.751267][ T4745] loop2: detected capacity change from 0 to 8192 [ 37.760724][ T4749] process 'syz.3.116' launched '/dev/fd/3' with NULL argv: empty string added [ 38.029069][ T4780] bridge: RTM_NEWNEIGH with invalid ether address [ 38.246402][ T4377] usb usb11-port1: attempt power cycle [ 38.251549][ T4806] vhci_hcd: invalid port number 96 [ 38.252442][ T4806] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 38.280360][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 38.410722][ T4822] loop3: detected capacity change from 0 to 2048 [ 38.443171][ T4821] netlink: 96 bytes leftover after parsing attributes in process `syz.0.143'. [ 38.453980][ T4822] loop3: p1 p3 [ 38.454622][ T4822] loop3: partition table partially beyond EOD, truncated [ 38.456053][ T4822] loop3: p1 start 458752 is beyond EOD, truncated [ 38.457185][ T4822] loop3: p3 start 8388352 is beyond EOD, truncated [ 38.639464][ T4848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.158'. [ 38.641160][ T4848] IPVS: Unknown mcast interface: v [ 38.724910][ T4858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.163'. [ 38.736868][ T4858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.163'. [ 38.739071][ T4858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.163'. [ 38.854374][ T4872] vhci_hcd: invalid port number 96 [ 38.855586][ T4872] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 38.885639][ T4377] usb usb11-port1: unable to enumerate USB device [ 38.916564][ T4877] loop3: detected capacity change from 0 to 128 [ 39.180986][ T4895] netlink: 34 bytes leftover after parsing attributes in process `syz.4.179'. [ 39.354101][ T4903] loop0: detected capacity change from 0 to 512 [ 39.372880][ T4903] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 39.374183][ T4903] System zones: 0-2, 18-18, 34-34 [ 39.377939][ T4903] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.182: bg 0: block 248: padding at end of block bitmap is not set [ 39.381099][ T4903] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.182: Failed to acquire dquot type 1 [ 39.384986][ T4903] EXT4-fs (loop0): 1 truncate cleaned up [ 39.389613][ T4903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.408606][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 39.766275][ T4913] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 39.879979][ T4923] loop3: detected capacity change from 0 to 512 [ 39.897864][ T4923] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 39.899528][ T4923] System zones: 1-20 [ 39.901780][ T4923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.928629][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 40.014649][ T4932] device bridge2 entered promiscuous mode [ 40.129832][ T4942] netlink: 'syz.1.196': attribute type 41 has an invalid length. [ 40.522265][ T4956] loop4: detected capacity change from 0 to 512 [ 40.550298][ T4956] EXT4-fs warning (device loop4): ext4_enable_quotas:7061: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 40.553514][ T4956] EXT4-fs (loop4): mount failed [ 40.713361][ T4966] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 40.966486][ T2500] cfg80211: failed to load regulatory.db [ 41.267554][ T4981] Falling back ldisc for ttyS3. [ 41.621377][ T5008] __nla_validate_parse: 1 callbacks suppressed [ 41.621397][ T5008] netlink: 21188 bytes leftover after parsing attributes in process `syz.0.221'. [ 41.623958][ T5008] netlink: 76 bytes leftover after parsing attributes in process `syz.0.221'. [ 41.625817][ T5008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'. [ 41.630961][ T5008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'. [ 42.610980][ T27] kauditd_printk_skb: 192 callbacks suppressed [ 42.610990][ T27] audit: type=1326 audit(42.600:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 42.621870][ T27] audit: type=1326 audit(42.610:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=442 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 42.631447][ T27] audit: type=1326 audit(42.620:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 42.639602][ T27] audit: type=1326 audit(42.620:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8075b9e8 code=0x7ffc0000 [ 42.689998][ T5038] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 42.701559][ T27] audit: type=1326 audit(42.690:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5037 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 42.710275][ T27] audit: type=1326 audit(42.700:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5037 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 42.713423][ T27] audit: type=1326 audit(42.700:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5037 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 42.750607][ T27] audit: type=1326 audit(42.700:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5037 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 42.794075][ T27] audit: type=1326 audit(42.700:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5037 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 42.839302][ T27] audit: type=1326 audit(42.700:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5037 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 42.979138][ T5062] loop3: detected capacity change from 0 to 256 [ 43.000390][ T5062] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 43.012098][ T5062] FAT-fs (loop3): Filesystem has been set read-only [ 43.015422][ T5062] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 43.021711][ T5062] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 43.185476][ T5088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.244'. [ 43.187131][ T5088] Zero length message leads to an empty skb [ 43.457357][ T5108] loop1: detected capacity change from 0 to 512 [ 43.460236][ T5108] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.476087][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.477719][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.482194][ T5108] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.254: invalid indirect mapped block 4294967295 (level 0) [ 43.496313][ T5108] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.254: invalid indirect mapped block 4294967295 (level 1) [ 43.514985][ T5108] EXT4-fs (loop1): 1 orphan inode deleted [ 43.522834][ T5108] EXT4-fs (loop1): 1 truncate cleaned up [ 43.528691][ T5108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.553023][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 43.824463][ T5123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 43.944242][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.980587][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.229505][ T5102] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.230972][ T5102] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.232372][ T5102] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.233684][ T5102] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.476832][ T5102] device bridge1 left promiscuous mode [ 44.478730][ T5102] device bridge2 left promiscuous mode [ 44.484039][ T5123] lo speed is unknown, defaulting to 1000 [ 44.616769][ T5137] random: crng reseeded on system resumption [ 44.777976][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 44.820613][ T5153] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.878362][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.880509][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.893010][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.896081][ T5159] device bridge_slave_0 left promiscuous mode [ 44.897199][ T5159] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.961392][ T5159] device bridge_slave_1 left promiscuous mode [ 44.962628][ T5159] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.997315][ T5159] bond0: (slave bond_slave_0): Releasing backup interface [ 45.039887][ T5159] bond0: (slave bond_slave_1): Releasing backup interface [ 45.102141][ T5159] team0: Port device team_slave_0 removed [ 45.114180][ T5159] team0: Port device team_slave_1 removed [ 45.122642][ T5159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.135488][ T5159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.140450][ T5159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.141725][ T5159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.538469][ T5206] device wireguard0 entered promiscuous mode [ 46.254360][ T4367] kernel write not supported for file bpf-prog (pid: 4367 comm: kworker/1:4) [ 46.403865][ T5257] 9pnet_fd: p9_fd_create_unix (5257): problem connecting socket: ./file0: -2 [ 46.454298][ T5260] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 46.456833][ T5260] vhci_hcd: invalid port number 96 [ 46.457645][ T5260] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 46.485183][ T5263] loop4: detected capacity change from 0 to 256 [ 46.571248][ T5267] netlink: 'syz.4.317': attribute type 10 has an invalid length. [ 46.573896][ T5267] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 46.641362][ T5271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.319'. [ 46.718010][ T5271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.319'. [ 46.745792][ T5278] lo speed is unknown, defaulting to 1000 [ 46.839253][ T5271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.319'. [ 46.839508][ T5280] lo speed is unknown, defaulting to 1000 [ 46.855764][ T5278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.322'. [ 46.908685][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 46.910820][ T5290] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 47.028584][ T5302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.332'. [ 47.080495][ T5304] loop3: detected capacity change from 0 to 1024 [ 47.090942][ T5306] loop1: detected capacity change from 0 to 1024 [ 47.096101][ T5306] EXT4-fs: Ignoring removed bh option [ 47.115203][ T5304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.126815][ T5306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.129699][ T5306] EXT4-fs (loop1): unmounting filesystem. [ 47.192810][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 47.239891][ T5324] loop2: detected capacity change from 0 to 256 [ 47.380675][ T5339] loop3: detected capacity change from 0 to 512 [ 47.387488][ T5339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.391445][ T5339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.391467][ T5343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.350'. [ 47.401753][ T5339] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.347: Invalid block bitmap block 0 in block_group 0 [ 47.422252][ T5339] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 47.426463][ T5348] netlink: 176 bytes leftover after parsing attributes in process `syz.1.351'. [ 47.426502][ T5339] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.347: attempt to clear invalid blocks 983261 len 1 [ 47.441603][ T5339] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.347: Invalid inode table block 0 in block_group 0 [ 47.450771][ T5339] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 47.453733][ T5339] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 47.456273][ T5339] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.347: Invalid inode table block 0 in block_group 0 [ 47.458431][ T5339] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 47.460020][ T5339] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.347: mark_inode_dirty error [ 47.474646][ T5339] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 47.478999][ T5339] EXT4-fs error (device loop3): __ext4_get_inode_loc:4513: comm syz.3.347: Invalid inode table block 0 in block_group 0 [ 47.481462][ T5339] EXT4-fs (loop3): 1 truncate cleaned up [ 47.482429][ T5339] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.519973][ T5339] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 47.618183][ T27] kauditd_printk_skb: 184 callbacks suppressed [ 47.618195][ T27] audit: type=1326 audit(47.617:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 47.622667][ T27] audit: type=1326 audit(47.617:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 47.640933][ T27] audit: type=1326 audit(47.617:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 47.644528][ T27] audit: type=1326 audit(47.617:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 47.650151][ T5374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'. [ 47.671883][ T27] audit: type=1326 audit(47.617:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 47.679400][ T27] audit: type=1326 audit(47.617:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 47.693080][ T27] audit: type=1326 audit(47.617:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 47.702530][ T27] audit: type=1326 audit(47.617:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 47.713293][ T27] audit: type=1326 audit(47.617:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 47.717841][ T27] audit: type=1326 audit(47.617:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5369 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 48.192327][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 48.714856][ T5433] loop3: detected capacity change from 0 to 256 [ 48.793233][ T5441] loop4: detected capacity change from 0 to 2048 [ 48.840340][ T5441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.933612][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 48.981170][ T5465] loop3: detected capacity change from 0 to 256 [ 49.050034][ T5476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.051228][ T5476] IPv6: NLM_F_CREATE should be set when creating new route [ 49.052290][ T5476] IPv6: NLM_F_CREATE should be set when creating new route [ 49.061003][ T5476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.150824][ T5490] netlink: 'syz.0.417': attribute type 3 has an invalid length. [ 49.240323][ T5500] loop3: detected capacity change from 0 to 256 [ 49.430029][ T39] Bluetooth: hci5: Frame reassembly failed (-84) [ 49.618698][ T5530] loop3: detected capacity change from 0 to 256 [ 49.659835][ T5532] loop1: detected capacity change from 0 to 256 [ 49.784792][ T5543] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 49.789499][ T5543] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 49.814235][ T5547] loop1: detected capacity change from 0 to 512 [ 49.834067][ T5547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.869605][ T5547] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #12: comm syz.1.445: corrupted xattr block 6 [ 49.901744][ T5552] lo speed is unknown, defaulting to 1000 [ 49.901888][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 49.957526][ T5558] netlink: 'syz.1.449': attribute type 11 has an invalid length. [ 49.959446][ T5560] loop3: detected capacity change from 0 to 256 [ 49.994087][ T5558] lo speed is unknown, defaulting to 1000 [ 50.051470][ T5562] bridge0: port 3(gretap0) entered blocking state [ 50.059342][ T5562] bridge0: port 3(gretap0) entered disabled state [ 50.072916][ T5562] device gretap0 entered promiscuous mode [ 50.077657][ T5562] bridge0: port 3(gretap0) entered blocking state [ 50.079022][ T5562] bridge0: port 3(gretap0) entered forwarding state [ 50.403260][ T5588] loop4: detected capacity change from 0 to 256 [ 50.550906][ T5593] lo speed is unknown, defaulting to 1000 [ 50.824479][ T5605] device pim6reg1 entered promiscuous mode [ 50.872239][ T5610] loop3: detected capacity change from 0 to 2048 [ 50.904361][ T5610] loop3: p1 < > p4 [ 50.906855][ T5610] loop3: p4 size 8388608 extends beyond EOD, truncated [ 50.977111][ T4616] udevd[4616]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 51.000223][ T4616] udevd[4616]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 51.014672][ T5619] device syzkaller0 entered promiscuous mode [ 51.371299][ T5623] loop3: detected capacity change from 0 to 512 [ 51.455891][ T4332] Bluetooth: hci5: command 0x1003 tx timeout [ 51.457177][ T4336] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 51.518752][ T5623] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 51.520456][ T5623] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.528056][ T5629] loop2: detected capacity change from 0 to 2048 [ 51.529306][ T5623] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.475: corrupted inode contents [ 51.531566][ T5623] EXT4-fs (loop3): Remounting filesystem read-only [ 51.532540][ T5623] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #16: comm syz.3.475: mark_inode_dirty error [ 51.534360][ T5623] EXT4-fs (loop3): Remounting filesystem read-only [ 51.535505][ T5623] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.475: corrupted inode contents [ 51.537365][ T5623] EXT4-fs (loop3): Remounting filesystem read-only [ 51.538324][ T5623] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.475: mark_inode_dirty error [ 51.542035][ T5623] EXT4-fs (loop3): Remounting filesystem read-only [ 51.543083][ T5623] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.475: corrupted inode contents [ 51.549145][ T5623] EXT4-fs (loop3): Remounting filesystem read-only [ 51.550180][ T5623] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 51.559657][ T5623] EXT4-fs (loop3): Remounting filesystem read-only [ 51.560584][ T5623] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #16: comm syz.3.475: corrupted inode contents [ 51.564099][ T5623] EXT4-fs (loop3): Remounting filesystem read-only [ 51.565183][ T5623] EXT4-fs error (device loop3): ext4_truncate:4318: inode #16: comm syz.3.475: mark_inode_dirty error [ 51.570098][ T5623] EXT4-fs (loop3): Remounting filesystem read-only [ 51.571055][ T5623] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 51.573494][ T5623] EXT4-fs (loop3): Remounting filesystem read-only [ 51.574957][ T5623] EXT4-fs (loop3): 1 truncate cleaned up [ 51.577312][ T5629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.578804][ T1693] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:5: Failed to release dquot type 1 [ 51.589526][ T1693] EXT4-fs (loop3): Remounting filesystem read-only [ 51.591126][ T5623] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.673022][ T5634] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.477: bg 0: block 345: padding at end of block bitmap is not set [ 51.679920][ T5634] EXT4-fs (loop2): Remounting filesystem read-only [ 51.723932][ T5638] 9pnet_fd: Insufficient options for proto=fd [ 51.755649][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 51.847915][ T5651] loop1: detected capacity change from 0 to 128 [ 51.902109][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 51.920433][ T5656] loop4: detected capacity change from 0 to 256 [ 51.969718][ T5658] __nla_validate_parse: 6 callbacks suppressed [ 51.969729][ T5658] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 52.075417][ T5658] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 52.108309][ T5672] loop1: detected capacity change from 0 to 1024 [ 52.112227][ T5672] EXT4-fs: Ignoring removed orlov option [ 52.135953][ T5672] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.152618][ T5658] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 52.184239][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 52.252069][ T5680] IPv6: sit1: Disabled Multicast RS [ 52.363199][ T5697] loop3: detected capacity change from 0 to 256 [ 52.654221][ T27] kauditd_printk_skb: 147 callbacks suppressed [ 52.654252][ T27] audit: type=1326 audit(52.647:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.661365][ T27] audit: type=1326 audit(52.657:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.668942][ T27] audit: type=1326 audit(52.667:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.677297][ T27] audit: type=1326 audit(52.667:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.696417][ T27] audit: type=1326 audit(52.667:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.710856][ T27] audit: type=1326 audit(52.667:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.718951][ T27] audit: type=1326 audit(52.667:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.728325][ T27] audit: type=1326 audit(52.667:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.737956][ T27] audit: type=1326 audit(52.667:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.744279][ T5726] loop4: detected capacity change from 0 to 512 [ 52.744741][ T27] audit: type=1326 audit(52.667:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=133 compat=0 ip=0xffff8b55b9e8 code=0x7ffc0000 [ 52.761268][ T5726] EXT4-fs (loop4): failed to initialize system zone (-117) [ 52.762515][ T5726] EXT4-fs (loop4): mount failed [ 52.819715][ T5731] loop4: detected capacity change from 0 to 128 [ 52.838183][ T5733] loop3: detected capacity change from 0 to 256 [ 52.911073][ T5737] loop2: detected capacity change from 0 to 1024 [ 52.912920][ T5737] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.919755][ T5737] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.968750][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 52.969305][ T5731] syz.4.520: attempt to access beyond end of device [ 52.969305][ T5731] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 52.983100][ T5731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.520'. [ 53.129631][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 53.279720][ T5763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 53.282140][ T5763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 53.297017][ T5763] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 53.301360][ T5763] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 53.384090][ T5767] loop3: detected capacity change from 0 to 256 [ 53.614801][ T5781] tipc: Enabling of bearer rejected, failed to enable media [ 53.838168][ T5792] lo speed is unknown, defaulting to 1000 [ 54.029063][ T5792] lo speed is unknown, defaulting to 1000 [ 54.030146][ T5792] lo speed is unknown, defaulting to 1000 [ 54.031397][ T5792] lo speed is unknown, defaulting to 1000 [ 54.033352][ T5792] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.036752][ T5792] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.043963][ T5792] lo speed is unknown, defaulting to 1000 [ 54.045294][ T5792] lo speed is unknown, defaulting to 1000 [ 54.046372][ T5792] lo speed is unknown, defaulting to 1000 [ 54.047427][ T5792] lo speed is unknown, defaulting to 1000 [ 54.048580][ T5792] lo speed is unknown, defaulting to 1000 [ 54.049676][ T5792] lo speed is unknown, defaulting to 1000 [ 54.076786][ T5798] loop4: detected capacity change from 0 to 256 [ 54.111633][ T5800] vhci_hcd: invalid port number 96 [ 54.113852][ T5800] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 54.177115][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 54.295683][ T5816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.555'. [ 54.309656][ T5818] loop1: detected capacity change from 0 to 1024 [ 54.311176][ T5818] ext4: Unknown parameter 'dont_appraise' [ 54.367373][ T5823] vhci_hcd: invalid port number 23 [ 54.380249][ T5825] netlink: 'syz.4.559': attribute type 41 has an invalid length. [ 54.503066][ T5836] loop3: detected capacity change from 0 to 256 [ 54.603199][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 54.709171][ T5855] lo speed is unknown, defaulting to 1000 [ 54.796876][ T5855] lo speed is unknown, defaulting to 1000 [ 55.142712][ T5866] loop1: detected capacity change from 0 to 8192 [ 55.877003][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 55.885465][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 55.994019][ T5908] loop3: detected capacity change from 0 to 256 [ 56.027136][ T5910] capability: warning: `syz.0.595' uses deprecated v2 capabilities in a way that may be insecure [ 56.254427][ T5922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 56.535781][ T5940] lo speed is unknown, defaulting to 1000 [ 56.636065][ T5940] lo speed is unknown, defaulting to 1000 [ 56.723383][ T5940] siw: device registration error -23 [ 57.295904][ T4334] Bluetooth: hci5: command 0x1003 tx timeout [ 57.297006][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 57.429638][ T5956] loop2: detected capacity change from 0 to 512 [ 57.484064][ T5956] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 57.486492][ T5956] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.492217][ T5956] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 57.494245][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 57.495273][ T5956] EXT4-fs error (device loop2): ext4_dirty_inode:6133: inode #16: comm +}[@: mark_inode_dirty error [ 57.497468][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 57.498566][ T5956] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 57.500520][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 57.501621][ T5956] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm +}[@: mark_inode_dirty error [ 57.503545][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 57.504527][ T5956] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 57.511824][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 57.512906][ T5956] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 57.514562][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 57.515644][ T5956] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm +}[@: corrupted inode contents [ 57.518213][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 57.519242][ T5956] EXT4-fs error (device loop2): ext4_truncate:4318: inode #16: comm +}[@: mark_inode_dirty error [ 57.521178][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 57.522177][ T5956] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 57.523663][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 57.525100][ T5956] EXT4-fs (loop2): 1 truncate cleaned up [ 57.536964][ T1693] EXT4-fs error (device loop2): ext4_release_dquot:6845: comm kworker/u4:5: Failed to release dquot type 1 [ 57.538861][ T1693] EXT4-fs (loop2): Remounting filesystem read-only [ 57.539989][ T5956] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.586663][ T5955] lo speed is unknown, defaulting to 1000 [ 57.595944][ T5956] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm +}[@: iget: bad i_size value: 360287970189639690 [ 57.602340][ T5955] lo speed is unknown, defaulting to 1000 [ 57.620999][ T5963] lo speed is unknown, defaulting to 1000 [ 57.640489][ T5963] lo speed is unknown, defaulting to 1000 [ 57.724966][ T5969] netlink: 'syz.3.617': attribute type 10 has an invalid length. [ 57.730708][ T5969] team0: Port device dummy0 added [ 57.733531][ T5969] netlink: 'syz.3.617': attribute type 10 has an invalid length. [ 57.743987][ T5969] team0: Port device dummy0 removed [ 57.746593][ T5969] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.859225][ T5975] device pim6reg1 entered promiscuous mode [ 57.887709][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 57.968439][ T5979] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 57.969959][ T5979] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 58.006806][ T27] kauditd_printk_skb: 117 callbacks suppressed [ 58.006815][ T27] audit: type=1326 audit(58.007:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.017672][ T27] audit: type=1326 audit(58.007:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.020955][ T27] audit: type=1326 audit(58.007:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.024083][ T27] audit: type=1326 audit(58.007:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.043541][ T27] audit: type=1326 audit(58.007:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.055291][ T27] audit: type=1326 audit(58.007:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.066700][ T27] audit: type=1326 audit(58.007:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.072506][ T27] audit: type=1326 audit(58.007:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.085877][ T27] audit: type=1326 audit(58.007:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.089211][ T27] audit: type=1326 audit(58.007:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.1.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 58.119384][ T5989] __nla_validate_parse: 9 callbacks suppressed [ 58.119402][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'. [ 58.121806][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'. [ 58.475145][ T4336] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 58.475332][ T4321] Bluetooth: hci6: command 0x1003 tx timeout [ 58.517806][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 58.742264][ T5959] Set syz1 is full, maxelem 65536 reached [ 59.219992][ T5998] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.221649][ T5998] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 59.226254][ T6006] lo speed is unknown, defaulting to 1000 [ 59.243803][ T6006] lo speed is unknown, defaulting to 1000 [ 59.389394][ T6021] netlink: 76 bytes leftover after parsing attributes in process `syz.1.640'. [ 59.488280][ T6030] device syz_tun entered promiscuous mode [ 59.500877][ T6030] device syz_tun left promiscuous mode [ 59.601807][ T6040] device ip6gretap0 entered promiscuous mode [ 59.603609][ T6040] device vlan2 entered promiscuous mode [ 59.936117][ T6057] loop1: detected capacity change from 0 to 512 [ 59.953127][ T6057] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.965174][ T4367] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 59.989093][ T6057] EXT4-fs (loop1): 1 truncate cleaned up [ 59.990005][ T6057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 60.162319][ T4367] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 60.163841][ T4367] usb 1-1: config 0 has no interface number 0 [ 60.164995][ T4367] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 60.166956][ T4367] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 60.173923][ T4367] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 60.192269][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.200181][ T4367] usb 1-1: Product: syz [ 60.200891][ T4367] usb 1-1: Manufacturer: syz [ 60.205031][ T4367] usb 1-1: SerialNumber: syz [ 60.212510][ T4367] usb 1-1: config 0 descriptor?? [ 60.306794][ T6070] loop4: detected capacity change from 0 to 8192 [ 60.308544][ T6074] loop3: detected capacity change from 0 to 512 [ 60.326247][ T6070] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.558672][ T6088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.668'. [ 60.571554][ T6090] netlink: 'syz.3.669': attribute type 3 has an invalid length. [ 60.624605][ T6092] loop4: detected capacity change from 0 to 512 [ 60.670925][ T6092] EXT4-fs warning (device loop4): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.673779][ T6092] EXT4-fs (loop4): mount failed [ 60.697550][ T6101] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.758913][ T6108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.772319][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 60.901809][ T6122] siw: device registration error -23 [ 60.917056][ T6122] smc: removing ib device sz1 [ 61.083749][ T6133] tipc: Enabled bearer , priority 0 [ 61.090700][ T6132] tipc: Resetting bearer [ 61.646466][ T6147] loop3: detected capacity change from 0 to 2048 [ 61.686807][ T6147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 61.747681][ T6150] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.695: bg 0: block 345: padding at end of block bitmap is not set [ 61.751660][ T6150] EXT4-fs (loop3): Remounting filesystem read-only [ 61.790454][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 61.920565][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.700'. [ 61.980476][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.700'. [ 62.058055][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.700'. [ 62.096041][ T4368] tipc: Node number set to 9722208 [ 62.408462][ T4367] asix 1-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 62.410503][ T4367] asix: probe of 1-1:0.239 failed with error -71 [ 62.421186][ T4367] usb 1-1: USB disconnect, device number 2 [ 62.625419][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.709'. [ 64.476644][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.477670][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.137495][ T6132] tipc: Disabling bearer [ 72.229668][ T6201] device pim6reg1 entered promiscuous mode [ 72.247655][ T6205] loop4: detected capacity change from 0 to 1024 [ 72.249149][ T6205] EXT4-fs: Ignoring removed nobh option [ 72.250077][ T6205] EXT4-fs: Ignoring removed bh option [ 72.251308][ T6205] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.304008][ T6205] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.384275][ T6221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.387192][ T6221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.388429][ T6221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.421110][ T6221] team0: Mode changed to "loadbalance" [ 72.434248][ T6223] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 72.442615][ T6223] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 72.445327][ T6223] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.452561][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.724'. [ 72.496799][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.498456][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.568689][ T1610] Bluetooth: hci2: Frame reassembly failed (-84) [ 72.628993][ T6229] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.792262][ T4327] EXT4-fs (loop4): unmounting filesystem. [ 72.801511][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 72.802671][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.803797][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.804822][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.809874][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.810962][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.813066][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.814169][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.815657][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.816751][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.817822][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.818943][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.820096][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.821192][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.822230][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.823275][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.824391][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.826893][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.827925][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.828994][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.830118][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.831167][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.832218][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.833437][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.834579][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.836201][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.837274][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.838378][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.839483][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.840599][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.841786][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.842929][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.844041][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.845626][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.846598][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.847556][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.848593][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.849842][ T4367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.853835][ T4367] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 72.901560][ T6235] fido_id[6235]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 72.917324][ T4321] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.920025][ T4321] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.921767][ T4321] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.924183][ T4321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.928859][ T4321] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.930432][ T4321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.019087][ T6241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.041789][ T4497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.126822][ T4497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.141170][ T6236] lo speed is unknown, defaulting to 1000 [ 73.229265][ T4497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.244258][ T6264] netlink: 'syz.2.741': attribute type 13 has an invalid length. [ 73.262191][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.296109][ T6264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.366459][ T4497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.431482][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 73.437575][ T6281] vcan0 speed is unknown, defaulting to 1000 [ 73.438967][ T6281] vcan0 speed is unknown, defaulting to 1000 [ 73.440073][ T6281] vcan0 speed is unknown, defaulting to 1000 [ 73.451070][ T6236] chnl_net:caif_netlink_parms(): no params data found [ 73.458456][ T6281] infiniband syz1: set active [ 73.460035][ T4436] vcan0 speed is unknown, defaulting to 1000 [ 73.461038][ T6281] infiniband syz1: added vcan0 [ 73.473671][ T6281] RDS/IB: syz1: added [ 73.479021][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.485742][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.488868][ T6236] device bridge_slave_0 entered promiscuous mode [ 73.490240][ T6281] smc: adding ib device syz1 with port count 1 [ 73.497529][ T6281] smc: ib device syz1 port 1 has pnetid [ 73.503840][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.509461][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.511107][ T6236] device bridge_slave_1 entered promiscuous mode [ 73.512728][ T4367] vcan0 speed is unknown, defaulting to 1000 [ 73.513740][ T6281] vcan0 speed is unknown, defaulting to 1000 [ 73.543370][ T6290] Falling back ldisc for ttyS3. [ 73.544491][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.552712][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.559467][ T6281] vcan0 speed is unknown, defaulting to 1000 [ 73.635790][ T6281] vcan0 speed is unknown, defaulting to 1000 [ 73.643178][ T6300] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 73.663920][ T6236] team0: Port device team_slave_0 added [ 73.676789][ T27] kauditd_printk_skb: 374 callbacks suppressed [ 73.676798][ T27] audit: type=1326 audit(73.677:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.677528][ T6236] team0: Port device team_slave_1 added [ 73.678817][ T27] audit: type=1326 audit(73.677:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.697253][ T27] audit: type=1326 audit(73.687:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.700796][ T27] audit: type=1326 audit(73.687:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.719673][ T27] audit: type=1326 audit(73.687:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.722912][ T27] audit: type=1326 audit(73.687:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.741553][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.742849][ T27] audit: type=1326 audit(73.687:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.742985][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.750220][ T27] audit: type=1326 audit(73.687:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=131 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.753859][ T27] audit: type=1326 audit(73.687:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.754885][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.762749][ T27] audit: type=1326 audit(73.687:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.754" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98f5b9e8 code=0x7ffc0000 [ 73.766229][ T6281] vcan0 speed is unknown, defaulting to 1000 [ 73.778101][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.779216][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.784165][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.918845][ T6281] vcan0 speed is unknown, defaulting to 1000 [ 73.923827][ T6316] device syzkaller0 entered promiscuous mode [ 73.966540][ T6281] vcan0 speed is unknown, defaulting to 1000 [ 74.013477][ T6236] device hsr_slave_0 entered promiscuous mode [ 74.056608][ T6236] device hsr_slave_1 entered promiscuous mode [ 74.085222][ T6236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.086539][ T6236] Cannot create hsr debugfs directory [ 74.134469][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 74.171229][ T6343] loop2: detected capacity change from 0 to 512 [ 74.182304][ T6343] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.194223][ T6343] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 74.212222][ T6343] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.767: inode #15: comm syz.2.767: iget: illegal inode # [ 74.218844][ T6343] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.767: couldn't read orphan inode 15 (err -117) [ 74.225928][ T6343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.233451][ T6343] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.767: inode #15: comm syz.2.767: iget: illegal inode # [ 74.320311][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 74.361652][ T6358] loop2: detected capacity change from 0 to 1024 [ 74.384293][ T6356] block device autoloading is deprecated and will be removed. [ 74.384318][ T4320] block device autoloading is deprecated and will be removed. [ 74.389365][ T6356] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 74.413085][ T6358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.441670][ T6236] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.466434][ T4436] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.470102][ T6236] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.471642][ T4436] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 74.535924][ T6236] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.550178][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 74.561068][ T6379] fido_id[6379]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.566723][ T6236] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.625449][ T6382] loop3: detected capacity change from 0 to 1024 [ 74.626992][ T6382] EXT4-fs: Ignoring removed bh option [ 74.627906][ T6382] EXT4-fs: inline encryption not supported [ 74.628865][ T6382] ext4: Unknown parameter 'dont_appraise' [ 74.635392][ T4336] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 74.684808][ T6391] loop3: detected capacity change from 0 to 128 [ 74.697581][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.698878][ T6385] infiniband syz1: set active [ 74.702634][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.709110][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.802455][ T6397] 9pnet_fd: Insufficient options for proto=fd [ 74.822053][ T22] vcan0 speed is unknown, defaulting to 1000 [ 74.903534][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.923076][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.924730][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.955844][ T4336] Bluetooth: hci5: command 0x0409 tx timeout [ 74.978627][ T6236] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.993724][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.996163][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.000891][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.001958][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.035640][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.041960][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.049137][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.053913][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.054986][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.075303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.077016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.078522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.080444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.081882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.083451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.084911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.095796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.346505][ T6236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.348658][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.351736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.353179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.354574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.434858][ T6460] netlink: 'syz.1.790': attribute type 3 has an invalid length. [ 75.603009][ T6480] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 75.785497][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 75.789708][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.790967][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.794764][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.068601][ T6515] lo speed is unknown, defaulting to 1000 [ 76.070964][ T6515] vcan0 speed is unknown, defaulting to 1000 [ 76.349931][ T4497] device hsr_slave_0 left promiscuous mode [ 76.376488][ T4497] device hsr_slave_1 left promiscuous mode [ 76.436425][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.437896][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.441057][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.442353][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.444981][ T4497] device bridge_slave_1 left promiscuous mode [ 76.448544][ T6534] loop0: detected capacity change from 0 to 512 [ 76.449300][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.467903][ T6534] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.510793][ T6534] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 76.512594][ T6534] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 76.513956][ T6534] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 76.519300][ T4497] device bridge_slave_0 left promiscuous mode [ 76.520404][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.616166][ T4497] device veth1_macvtap left promiscuous mode [ 76.617408][ T4497] device veth0_macvtap left promiscuous mode [ 76.618457][ T4497] device veth1_vlan left promiscuous mode [ 76.619480][ T4497] device veth0_vlan left promiscuous mode [ 76.679684][ T6559] loop0: detected capacity change from 0 to 512 [ 76.699867][ T6559] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.701480][ T6559] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.710093][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.806: corrupted inode contents [ 76.712364][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 76.713509][ T6559] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #16: comm syz.0.806: mark_inode_dirty error [ 76.717940][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 76.719252][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.806: corrupted inode contents [ 76.721251][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 76.722408][ T6559] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.806: mark_inode_dirty error [ 76.724447][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 76.728939][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.806: corrupted inode contents [ 76.731130][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 76.732248][ T6559] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 76.733811][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 76.734969][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #16: comm syz.0.806: corrupted inode contents [ 76.737490][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 76.738593][ T6559] EXT4-fs error (device loop0): ext4_truncate:4318: inode #16: comm syz.0.806: mark_inode_dirty error [ 76.740631][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 76.741757][ T6559] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 76.743365][ T6559] EXT4-fs (loop0): Remounting filesystem read-only [ 76.744683][ T6559] EXT4-fs (loop0): 1 truncate cleaned up [ 76.747976][ T1693] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:5: Failed to release dquot type 1 [ 76.759664][ T1693] EXT4-fs (loop0): Remounting filesystem read-only [ 76.770759][ T6559] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.803921][ T6566] loop3: detected capacity change from 0 to 512 [ 76.809344][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 76.817818][ T6565] loop1: detected capacity change from 0 to 2048 [ 76.821507][ T6566] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.822897][ T6566] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 76.826657][ T6566] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 76.827875][ T6566] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.808: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 76.831051][ T6566] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.808: couldn't read orphan inode 13 (err -117) [ 76.834120][ T6566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.852344][ T6565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.858646][ T6565] EXT4-fs (loop1): shut down requested (2) [ 76.863379][ T4323] EXT4-fs (loop3): unmounting filesystem. [ 76.912639][ T6575] loop3: detected capacity change from 0 to 512 [ 76.942784][ T6575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 77.035234][ T4336] Bluetooth: hci5: command 0x041b tx timeout [ 77.626099][ T6565] EXT4-fs (loop1): unmounting filesystem. [ 77.760314][ T6589] loop0: detected capacity change from 0 to 512 [ 77.761754][ T6589] EXT4-fs: Ignoring removed bh option [ 77.769097][ T6589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 77.783703][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 78.378434][ T4497] team0 (unregistering): Port device team_slave_1 removed [ 78.547008][ T4497] team0 (unregistering): Port device team_slave_0 removed [ 78.736581][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.946275][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.115160][ T4336] Bluetooth: hci5: command 0x040f tx timeout [ 81.205971][ T4321] Bluetooth: hci5: command 0x0419 tx timeout [ 81.217581][ T4497] bond0 (unregistering): Released all slaves [ 81.450194][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.451870][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.454071][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.455491][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.460791][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 81.464435][ T6575] lo speed is unknown, defaulting to 1000 [ 81.465594][ T6585] netlink: 96 bytes leftover after parsing attributes in process `syz.1.813'. [ 81.475682][ T6575] vcan0 speed is unknown, defaulting to 1000 [ 81.490458][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.492000][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.494264][ T6236] device veth0_vlan entered promiscuous mode [ 81.524553][ T6236] device veth1_vlan entered promiscuous mode [ 81.559435][ T6611] loop2: detected capacity change from 0 to 128 [ 81.562551][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.564165][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.567297][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.569003][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.596221][ T6236] device veth0_macvtap entered promiscuous mode [ 81.603085][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 81.603094][ T27] audit: type=1326 audit(81.597:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.616057][ T27] audit: type=1326 audit(81.617:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.630722][ T27] audit: type=1326 audit(81.617:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=113 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.634317][ T27] audit: type=1326 audit(81.617:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.649488][ T6236] device veth1_macvtap entered promiscuous mode [ 81.664092][ T27] audit: type=1326 audit(81.617:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=112 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.672103][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.673595][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.677794][ T27] audit: type=1326 audit(81.620:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.690372][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.691923][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.694033][ T27] audit: type=1326 audit(81.620:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.703254][ T27] audit: type=1326 audit(81.620:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.707128][ T9] kworker/u4:0: attempt to access beyond end of device [ 81.707128][ T9] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 81.710574][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.711853][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.713574][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.718611][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.720578][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.732902][ T27] audit: type=1326 audit(81.620:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.749161][ T27] audit: type=1326 audit(81.620:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6615 comm="syz.0.825" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8a55b9e8 code=0x7ffc0000 [ 81.760640][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.762225][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.763903][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.768096][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.779494][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.785689][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.787362][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.816046][ T6236] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.817437][ T6236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.818712][ T6236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.820020][ T6236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.913954][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.916030][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.918537][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.962819][ T1693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.964226][ T1693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.967458][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.171115][ T6641] device wireguard0 entered promiscuous mode [ 82.338828][ T6679] loop2: detected capacity change from 0 to 512 [ 82.363735][ T6679] [ 82.364192][ T6679] ====================================================== [ 82.365319][ T6679] WARNING: possible circular locking dependency detected [ 82.366447][ T6679] syzkaller #0 Not tainted [ 82.367100][ T6679] ------------------------------------------------------ [ 82.368177][ T6679] syz.2.843/6679 is trying to acquire lock: [ 82.369107][ T6679] ffff0000e05beb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x188/0x284c [ 82.370597][ T6679] [ 82.370597][ T6679] but task is already holding lock: [ 82.371669][ T6679] ffff0000f5ce3cf8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 82.373163][ T6679] [ 82.373163][ T6679] which lock already depends on the new lock. [ 82.373163][ T6679] [ 82.374683][ T6679] [ 82.374683][ T6679] the existing dependency chain (in reverse order) is: [ 82.376055][ T6679] [ 82.376055][ T6679] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 82.377323][ T6679] down_read+0x64/0x304 [ 82.378112][ T6679] ext4_xattr_get+0xec/0x544 [ 82.378888][ T6679] ext4_get_acl+0x94/0x5f0 [ 82.379665][ T6679] get_acl+0x160/0x33c [ 82.379775][ T6689] loop5: detected capacity change from 0 to 512 [ 82.380322][ T6679] posix_acl_create+0x104/0x3d0 [ 82.382293][ T6679] ext4_init_acl+0xac/0x340 [ 82.383129][ T6679] __ext4_new_inode+0x27b8/0x3340 [ 82.383993][ T6679] ext4_ext_migrate+0x498/0xbfc [ 82.384898][ T6679] ext4_ioctl+0x1a38/0x4198 [ 82.385717][ T6679] __arm64_sys_ioctl+0x14c/0x1c8 [ 82.386553][ T6679] invoke_syscall+0x98/0x2bc [ 82.387294][ T6679] el0_svc_common+0x138/0x258 [ 82.388094][ T6679] do_el0_svc+0x58/0x13c [ 82.388838][ T6679] el0_svc+0x58/0x138 [ 82.389506][ T6679] el0t_64_sync_handler+0x84/0xf0 [ 82.390259][ T6679] el0t_64_sync+0x18c/0x190 [ 82.390960][ T6679] [ 82.390960][ T6679] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 82.392321][ T6679] __lock_acquire+0x293c/0x6544 [ 82.393200][ T6679] lock_acquire+0x20c/0x644 [ 82.393972][ T6679] percpu_down_read+0x70/0x2a8 [ 82.394793][ T6679] ext4_writepages+0x188/0x284c [ 82.395617][ T6679] do_writepages+0x2c0/0x4fc [ 82.396396][ T6679] __writeback_single_inode+0x164/0x157c [ 82.397334][ T6679] writeback_single_inode+0x1c0/0x720 [ 82.398219][ T6679] write_inode_now+0x144/0x1b0 [ 82.398995][ T6679] iput+0x5cc/0x7f4 [ 82.399696][ T6679] ext4_xattr_block_set+0x17a4/0x2810 [ 82.400605][ T6679] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 82.401526][ T6679] __ext4_expand_extra_isize+0x298/0x358 [ 82.402455][ T6679] __ext4_mark_inode_dirty+0x3e4/0x790 [ 82.403393][ T6679] ext4_evict_inode+0xb58/0x1270 [ 82.404253][ T6679] evict+0x3c8/0x810 [ 82.404908][ T6679] iput+0x764/0x7f4 [ 82.405543][ T6679] ext4_process_orphan+0x240/0x2b4 [ 82.406347][ T6679] ext4_orphan_cleanup+0x908/0x104c [ 82.407203][ T6679] ext4_fill_super+0x6440/0x68a8 [ 82.408096][ T6679] get_tree_bdev+0x358/0x544 [ 82.408867][ T6679] ext4_get_tree+0x28/0x38 [ 82.409612][ T6679] vfs_get_tree+0x90/0x274 [ 82.410321][ T6679] do_new_mount+0x228/0x810 [ 82.411049][ T6679] path_mount+0x5b4/0xe78 [ 82.411706][ T6679] __arm64_sys_mount+0x49c/0x584 [ 82.412532][ T6679] invoke_syscall+0x98/0x2bc [ 82.413247][ T6679] el0_svc_common+0x138/0x258 [ 82.413958][ T6679] do_el0_svc+0x58/0x13c [ 82.414678][ T6679] el0_svc+0x58/0x138 [ 82.415418][ T6679] el0t_64_sync_handler+0x84/0xf0 [ 82.416261][ T6679] el0t_64_sync+0x18c/0x190 [ 82.416927][ T6679] [ 82.416927][ T6679] other info that might help us debug this: [ 82.416927][ T6679] [ 82.418426][ T6679] Possible unsafe locking scenario: [ 82.418426][ T6679] [ 82.419589][ T6679] CPU0 CPU1 [ 82.420396][ T6679] ---- ---- [ 82.421213][ T6679] lock(&ei->xattr_sem); [ 82.421903][ T6679] lock(&sbi->s_writepages_rwsem); [ 82.423037][ T6679] lock(&ei->xattr_sem); [ 82.424055][ T6679] lock(&sbi->s_writepages_rwsem); [ 82.424887][ T6679] [ 82.424887][ T6679] *** DEADLOCK *** [ 82.424887][ T6679] [ 82.426106][ T6679] 3 locks held by syz.2.843/6679: [ 82.426834][ T6679] #0: ffff0000d22380e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 82.428320][ T6679] #1: ffff0000d2238650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 82.429967][ T6679] #2: ffff0000f5ce3cf8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 82.431531][ T6679] [ 82.431531][ T6679] stack backtrace: [ 82.432434][ T6679] CPU: 1 PID: 6679 Comm: syz.2.843 Not tainted syzkaller #0 [ 82.433529][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 82.434998][ T6679] Call trace: [ 82.435454][ T6679] dump_backtrace+0x1c8/0x1f4 [ 82.436155][ T6679] show_stack+0x2c/0x3c [ 82.436765][ T6679] __dump_stack+0x30/0x40 [ 82.437378][ T6679] dump_stack_lvl+0xf8/0x160 [ 82.438032][ T6679] dump_stack+0x1c/0x5c [ 82.438655][ T6679] print_circular_bug+0x148/0x1b0 [ 82.439370][ T6679] check_noncircular+0x240/0x2d4 [ 82.440131][ T6679] __lock_acquire+0x293c/0x6544 [ 82.440879][ T6679] lock_acquire+0x20c/0x644 [ 82.441546][ T6679] percpu_down_read+0x70/0x2a8 [ 82.442277][ T6679] ext4_writepages+0x188/0x284c [ 82.443034][ T6679] do_writepages+0x2c0/0x4fc [ 82.443717][ T6679] __writeback_single_inode+0x164/0x157c [ 82.444607][ T6679] writeback_single_inode+0x1c0/0x720 [ 82.445374][ T6679] write_inode_now+0x144/0x1b0 [ 82.446068][ T6679] iput+0x5cc/0x7f4 [ 82.446599][ T6679] ext4_xattr_block_set+0x17a4/0x2810 [ 82.447372][ T6679] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 82.448226][ T6679] __ext4_expand_extra_isize+0x298/0x358 [ 82.449124][ T6679] __ext4_mark_inode_dirty+0x3e4/0x790 [ 82.449912][ T6679] ext4_evict_inode+0xb58/0x1270 [ 82.450752][ T6679] evict+0x3c8/0x810 [ 82.451314][ T6679] iput+0x764/0x7f4 [ 82.451866][ T6679] ext4_process_orphan+0x240/0x2b4 [ 82.452558][ T6679] ext4_orphan_cleanup+0x908/0x104c [ 82.453328][ T6679] ext4_fill_super+0x6440/0x68a8 [ 82.454049][ T6679] get_tree_bdev+0x358/0x544 [ 82.454687][ T6679] ext4_get_tree+0x28/0x38 [ 82.455308][ T6679] vfs_get_tree+0x90/0x274 [ 82.456016][ T6679] do_new_mount+0x228/0x810 [ 82.456650][ T6679] path_mount+0x5b4/0xe78 [ 82.457297][ T6679] __arm64_sys_mount+0x49c/0x584 [ 82.458011][ T6679] invoke_syscall+0x98/0x2bc [ 82.458668][ T6679] el0_svc_common+0x138/0x258 [ 82.459367][ T6679] do_el0_svc+0x58/0x13c [ 82.459982][ T6679] el0_svc+0x58/0x138 [ 82.460560][ T6679] el0t_64_sync_handler+0x84/0xf0 [ 82.461300][ T6679] el0t_64_sync+0x18c/0x190 [ 82.463539][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.464940][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.474445][ T6679] ------------[ cut here ]------------ [ 82.475980][ T6679] EA inode 11 i_nlink=2 [ 82.476035][ T6679] WARNING: CPU: 0 PID: 6679 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 82.478139][ T6679] Modules linked in: [ 82.478728][ T6679] CPU: 0 PID: 6679 Comm: syz.2.843 Not tainted syzkaller #0 [ 82.479801][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 82.481278][ T6679] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 82.482406][ T6679] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 82.483374][ T6679] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 82.484254][ T6679] sp : ffff800021a36e00 [ 82.484863][ T6679] x29: ffff800021a36ea0 x28: 0000000000000000 x27: dfff800000000000 [ 82.486046][ T6679] x26: 1fffe0001ebd41d6 x25: ffff700004346dc4 x24: 0000000000000000 [ 82.487345][ T6679] x23: ffff800017a8a000 x22: ffff0000f5ea0cf8 x21: 0000000000000002 [ 82.488692][ T6679] x20: 0000000000000001 x19: ffff0000f5ea0cb8 x18: ffff800011abbcc0 [ 82.490092][ T6679] x17: 0000000000000000 x16: ffff800008042d90 x15: 0000000000000002 [ 82.491331][ T6679] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 82.492457][ T6679] x11: 000000000007ffff x10: ffff80002591a000 x9 : 8f85a85458bc0500 [ 82.493691][ T6679] x8 : 8f85a85458bc0500 x7 : 0000000000000001 x6 : 0000000000000001 [ 82.494922][ T6679] x5 : ffff800021a36898 x4 : ffff8000151a4920 x3 : ffff800008311fcc [ 82.496057][ T6679] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 82.497342][ T6679] Call trace: [ 82.497800][ T6679] ext4_xattr_inode_update_ref+0x42c/0x470 [ 82.498660][ T6679] ext4_xattr_set_entry+0x918/0x15ac [ 82.499459][ T6679] ext4_xattr_ibody_set+0x204/0x600 [ 82.500213][ T6679] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 82.501030][ T6679] __ext4_expand_extra_isize+0x298/0x358 [ 82.501875][ T6679] __ext4_mark_inode_dirty+0x3e4/0x790 [ 82.502617][ T6679] ext4_evict_inode+0xb58/0x1270 [ 82.503191][ T6679] evict+0x3c8/0x810 [ 82.503739][ T6679] iput+0x764/0x7f4 [ 82.504255][ T6679] ext4_process_orphan+0x240/0x2b4 [ 82.505039][ T6679] ext4_orphan_cleanup+0x908/0x104c [ 82.505901][ T6679] ext4_fill_super+0x6440/0x68a8 [ 82.506586][ T6679] get_tree_bdev+0x358/0x544 [ 82.507332][ T6679] ext4_get_tree+0x28/0x38 [ 82.507990][ T6679] vfs_get_tree+0x90/0x274 [ 82.508672][ T6679] do_new_mount+0x228/0x810 [ 82.509372][ T6679] path_mount+0x5b4/0xe78 [ 82.510046][ T6679] __arm64_sys_mount+0x49c/0x584 [ 82.510753][ T6679] invoke_syscall+0x98/0x2bc [ 82.511494][ T6679] el0_svc_common+0x138/0x258 [ 82.512168][ T6679] do_el0_svc+0x58/0x13c [ 82.512751][ T6679] el0_svc+0x58/0x138 [ 82.513350][ T6679] el0t_64_sync_handler+0x84/0xf0 [ 82.514083][ T6679] el0t_64_sync+0x18c/0x190 [ 82.514753][ T6679] irq event stamp: 3171 [ 82.515357][ T6679] hardirqs last enabled at (3171): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 82.516835][ T6679] hardirqs last disabled at (3170): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 82.518271][ T6679] softirqs last enabled at (2048): [] local_bh_enable+0x10/0x34 [ 82.519627][ T6679] softirqs last disabled at (2046): [] local_bh_disable+0x10/0x34 [ 82.521027][ T6679] ---[ end trace 0000000000000000 ]--- [ 82.527357][ T6679] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #18: comm syz.2.843: iget: bad extra_isize 90 (inode size 256) [ 82.531195][ T6679] EXT4-fs (loop2): Remounting filesystem read-only [ 82.532714][ T6679] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.843: error while reading EA inode 18 err=-117 [ 82.535798][ T6679] EXT4-fs (loop2): Remounting filesystem read-only [ 82.537120][ T6679] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #18: comm syz.2.843: iget: bad extra_isize 90 (inode size 256) [ 82.539379][ T6679] EXT4-fs (loop2): Remounting filesystem read-only [ 82.540707][ T6679] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.843: error while reading EA inode 18 err=-117 [ 82.552691][ T6689] EXT4-fs warning (device loop5): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.555605][ T6679] EXT4-fs (loop2): Remounting filesystem read-only [ 82.557006][ T6679] EXT4-fs (loop2): 1 orphan inode deleted [ 82.558102][ T6679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.562195][ T6689] EXT4-fs (loop5): mount failed [ 82.583249][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 82.607030][ T4323] EXT4-fs (loop3): unmounting filesystem.