last executing test programs: 4.446487344s ago: executing program 1 (id=1202): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000070601030000000000000000010000050900020073797a31000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x20000080) 4.233978379s ago: executing program 0 (id=1206): mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="136f70592739bcaba6d792f812aff831f0ce25e996317d669dc5958e7856a5d269373993cd7ac94dfc0a64ff38e4aef38932084aa9ad04633c80efc5e871145f7a585915", 0x44) 4.135870942s ago: executing program 1 (id=1208): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44001}, 0x0) 4.135756842s ago: executing program 2 (id=1209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 3.942181626s ago: executing program 0 (id=1210): r0 = socket$inet6(0xa, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/215, 0x11c}], 0x1, 0x94, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x14) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000000540)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a0cbc000c00f0ff7f0000b402000033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435eeab29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a", 0xa8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xff, 0x7ff, 0xfc00, 0x10, 0x10}}) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x248, &(0x7f0000000080), 0x1, 0x4b1, &(0x7f0000000700)="$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") fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x3, 0x9, 0x60, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x20, 0x20, 0x5, 0x33ce}}) bind$inet6(r0, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) 3.938953076s ago: executing program 2 (id=1211): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fea000000071131a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 3.917955117s ago: executing program 1 (id=1212): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x12, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "032b3908bddf5408000000000000001ce1a311ef545032d71e00", "f28359738e229a4c67810000000002d300e6d602000000000000000000000001", [0x1, 0x47]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 3.900096797s ago: executing program 4 (id=1213): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000240)=ANY=[], 0x0) 2.725519745s ago: executing program 2 (id=1215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.185399718s ago: executing program 0 (id=1216): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100003050000000000070000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.09549497s ago: executing program 3 (id=1217): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000580)="18", 0x1}], 0x1) 2.000009002s ago: executing program 4 (id=1218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x5, 0x1001, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000020070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 1.790308557s ago: executing program 3 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20000080) 1.70369085s ago: executing program 1 (id=1220): mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="136f70592739bcaba6d792f812aff831f0ce25e996317d669dc5958e7856a5d269373993cd7ac94dfc0a64ff38e4aef38932084aa9ad04633c80efc5e871145f7a585915", 0x44) 1.68358108s ago: executing program 0 (id=1221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 1.633534631s ago: executing program 4 (id=1222): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') close(0x3) fchdir(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.502362674s ago: executing program 3 (id=1223): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44001}, 0x0) 1.447738776s ago: executing program 4 (id=1224): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 1.420432286s ago: executing program 0 (id=1225): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fea000000071131a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 1.322264799s ago: executing program 1 (id=1226): socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4d, 0x14, {{'sha1\x00'}, 0x8, 0x80, "cc"}}]}, 0x140}}, 0x0) 1.24522989s ago: executing program 2 (id=1227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000d042a00"/20, @ANYRES32=r2, @ANYBLOB="d98e000004000000280012800a000100767863616e000000180002801400010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) 1.188957151s ago: executing program 4 (id=1228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000240)=ANY=[], 0x0) 1.132986403s ago: executing program 3 (id=1229): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000580)="18", 0x1}], 0x1) 838.30442ms ago: executing program 1 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 393.266401ms ago: executing program 4 (id=1231): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000020c0)={0x1dc, 0x0, 0x0, 0xfffffffe, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "d9199b5a1163639bf94ab166ac2c9930e974dc807004f30463f87bb775cb11a9bdb1d39d67ad0987eef41e1b288989caf63361fe57a13499d95f19480500000085d9ba3391f6894d11549c396ff8404cb5fa442c15bf6260793522adb7bab39dab4bda686903a02ab2c884d0080a21471f04b790d7f886d6815ce3fdc02ab5e0fc"}, @ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "9acb237eccb318b686d3cd792dac38c002f64410ecacb1bbce9abd1bb100ec1850e3bca604b95d22d64aa8e0043dc7a60e0d3437707f1f9614a008931847114fe43b35251e510971a69527bb11d5c8a6053f1834915c3f954ce95521e0cacbcba362d375f5544c9e702afef850bef3fe8e2e0faa7908e678d1c7a609cce3dd4a40fcf2a279a2d0ddea1864fa56"}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x1dc}}, 0x40085) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x4000840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x201}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}]}]}}}, @IFLA_LINK={0x8}]}, 0x54}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 350.627652ms ago: executing program 2 (id=1232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x100, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x100}}, 0x0) 253.559614ms ago: executing program 0 (id=1233): syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@orlov}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 210.374835ms ago: executing program 3 (id=1234): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, 0x0) close(0x3) fchdir(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 146.443587ms ago: executing program 3 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 0s ago: executing program 2 (id=1236): mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="136f70592739bcaba6d792f812aff831f0ce25e996317d669dc5958e7856a5d269373993cd7ac94dfc0a64ff38e4aef38932084aa9ad04633c80efc5e871145f7a585915", 0x44) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 76.261676][ T4261] cgroup: Unknown subsys name 'net' [ 76.363083][ T4261] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.618353][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.625077][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.883586][ T4261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.407210][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.416491][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.425608][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.434115][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.442071][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.449904][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.450141][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.459052][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.472428][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.474722][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.480352][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.486762][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.495448][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.502997][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.510617][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.517046][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.524976][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.529959][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.536353][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.545143][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.552617][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.558017][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.571217][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.573968][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.580336][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.586008][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.599590][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.600295][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.613974][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.622404][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.054376][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 80.097250][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 80.191620][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 80.269722][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 80.323164][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.331149][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.340145][ T4280] device bridge_slave_0 entered promiscuous mode [ 80.366290][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 80.377332][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.384474][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.392860][ T4280] device bridge_slave_1 entered promiscuous mode [ 80.409601][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.416892][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.428208][ T4276] device bridge_slave_0 entered promiscuous mode [ 80.463237][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.470585][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.479621][ T4276] device bridge_slave_1 entered promiscuous mode [ 80.541782][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.560303][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.575360][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.592499][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.599794][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.608244][ T4273] device bridge_slave_0 entered promiscuous mode [ 80.630473][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.646469][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.653607][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.662494][ T4273] device bridge_slave_1 entered promiscuous mode [ 80.693958][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.701224][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.712820][ T4278] device bridge_slave_0 entered promiscuous mode [ 80.750160][ T4276] team0: Port device team_slave_0 added [ 80.761272][ T4276] team0: Port device team_slave_1 added [ 80.767813][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.776087][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.784338][ T4278] device bridge_slave_1 entered promiscuous mode [ 80.799815][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.807362][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.815976][ T4274] device bridge_slave_0 entered promiscuous mode [ 80.826095][ T4280] team0: Port device team_slave_0 added [ 80.856547][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.866848][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.873970][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.882674][ T4274] device bridge_slave_1 entered promiscuous mode [ 80.891589][ T4280] team0: Port device team_slave_1 added [ 80.905316][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.912302][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.942156][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.955835][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.982758][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.000753][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.007957][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.034207][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.068492][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.092765][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.102477][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.110723][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.137091][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.166517][ T4273] team0: Port device team_slave_0 added [ 81.175346][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.185303][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.193099][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.219602][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.233820][ T4278] team0: Port device team_slave_0 added [ 81.250623][ T4273] team0: Port device team_slave_1 added [ 81.275187][ T4278] team0: Port device team_slave_1 added [ 81.324228][ T4276] device hsr_slave_0 entered promiscuous mode [ 81.332066][ T4276] device hsr_slave_1 entered promiscuous mode [ 81.339668][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.347081][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.373178][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.386668][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.393677][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.420037][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.441861][ T4274] team0: Port device team_slave_0 added [ 81.470024][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.477257][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.503399][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.516745][ T4274] team0: Port device team_slave_1 added [ 81.523022][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.530069][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.556523][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.616055][ T4280] device hsr_slave_0 entered promiscuous mode [ 81.622935][ T4280] device hsr_slave_1 entered promiscuous mode [ 81.630184][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.638967][ T4280] Cannot create hsr debugfs directory [ 81.655514][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 81.664901][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.671897][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.698508][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.718399][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.725504][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.751604][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 81.751624][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 81.751944][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 81.758029][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 81.776887][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.838539][ T4273] device hsr_slave_0 entered promiscuous mode [ 81.847498][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.854442][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.862432][ T4273] Cannot create hsr debugfs directory [ 81.877011][ T4278] device hsr_slave_0 entered promiscuous mode [ 81.884212][ T4278] device hsr_slave_1 entered promiscuous mode [ 81.891230][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.898956][ T4278] Cannot create hsr debugfs directory [ 81.974419][ T4274] device hsr_slave_0 entered promiscuous mode [ 81.983223][ T4274] device hsr_slave_1 entered promiscuous mode [ 81.990000][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.998103][ T4274] Cannot create hsr debugfs directory [ 82.291801][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.312861][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.322662][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.333513][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.408770][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.430010][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.451881][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.475380][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.511621][ T4278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.522662][ T4278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.533029][ T4278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.544036][ T4278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.622771][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.649503][ T4280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.682127][ T4280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.692517][ T4280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.703202][ T4280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.729130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.739604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.765785][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.779296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.789426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.799001][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.806387][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.846394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.878953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.889179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.899788][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.906966][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.915898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.971940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.981487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.992383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.002228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.023457][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.051601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.061291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.073238][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.089025][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.103637][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.116148][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.131258][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.140402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.150414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.160657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.169226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.178002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.187075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.199474][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.217806][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.229308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.240079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.250374][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.257566][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.267386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.281430][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.308541][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.325824][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.342866][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.352106][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.362561][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.369780][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.378964][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.393642][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.407745][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.425605][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.440197][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.450109][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.499899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.510654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.521221][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.528554][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.543159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.552300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.562547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.573035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.584340][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.591615][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.600980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.610172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.620191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.632124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.640753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.653492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.662519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.675902][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.690988][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.715026][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.728888][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.737389][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 83.758259][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.767396][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.777406][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.800731][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.814925][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.826714][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 83.832894][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 83.843017][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 83.846204][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 83.877322][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.910908][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.941193][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.954276][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.970342][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.977572][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.992763][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.002379][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.011308][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.018504][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.027782][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.037077][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.045832][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.064196][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.116173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.129883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.156443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.171918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.208699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.225955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.233579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.255508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.276689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.293333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.302607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.341630][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.354445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.371614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.403025][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.429581][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.464065][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.473228][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.508203][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.545644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.571983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.620577][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.633692][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.648856][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.656437][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.671326][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.688173][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.706212][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.725558][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.732733][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.762339][ T4276] device veth0_vlan entered promiscuous mode [ 84.801557][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.810450][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.824720][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.832370][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.840684][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.850550][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.885565][ T4276] device veth1_vlan entered promiscuous mode [ 84.898720][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.917424][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.931685][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.942987][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.958416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.974911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.010813][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.021884][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.036944][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.051643][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.062152][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.078173][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.091436][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.110321][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.135253][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.149309][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.161236][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.173772][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.185510][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.194334][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.203859][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.245438][ T4276] device veth0_macvtap entered promiscuous mode [ 85.265683][ T4276] device veth1_macvtap entered promiscuous mode [ 85.279824][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.297006][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.317424][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.344445][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.389630][ T4278] device veth0_vlan entered promiscuous mode [ 85.400341][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.409628][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.419638][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.430252][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.439503][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.466363][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.476254][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.495165][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.527841][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.562430][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.571941][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.588714][ T4278] device veth1_vlan entered promiscuous mode [ 85.597892][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.613063][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.623279][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.633814][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.643111][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.664918][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.673356][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.683790][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.695577][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.708247][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.717287][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.730155][ T4273] device veth0_vlan entered promiscuous mode [ 85.756297][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.766801][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.786276][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.800847][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.815146][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 85.855677][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.871455][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.882833][ T4273] device veth1_vlan entered promiscuous mode [ 85.895218][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 85.895425][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 85.901297][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 85.908039][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 85.950493][ T4280] device veth0_vlan entered promiscuous mode [ 85.960346][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.970178][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.000178][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.008643][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.017792][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.036698][ T4278] device veth0_macvtap entered promiscuous mode [ 86.061091][ T4280] device veth1_vlan entered promiscuous mode [ 86.081576][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.091455][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.100739][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.110030][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.118094][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.132967][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.155641][ T4278] device veth1_macvtap entered promiscuous mode [ 86.196489][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.211454][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.257297][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.276697][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.297292][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.308894][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.318004][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.327693][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.337217][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.347594][ T4273] device veth0_macvtap entered promiscuous mode [ 86.387528][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.401531][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.416271][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.429753][ T4273] device veth1_macvtap entered promiscuous mode [ 86.447583][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.464588][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.490325][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.499517][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.509134][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.518795][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.528229][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.541218][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.550681][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.575565][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.584443][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.598660][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.608219][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.644857][ T4280] device veth0_macvtap entered promiscuous mode [ 86.672688][ T4280] device veth1_macvtap entered promiscuous mode [ 86.692343][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.711676][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.722723][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.739939][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.752315][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.769289][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.780414][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.799453][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.816836][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.832430][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.841895][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.852157][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.864311][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.894904][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.905022][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.920828][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.932634][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.970527][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.999151][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.041850][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.068768][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.084146][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.097031][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.107553][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.119287][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.146954][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.157281][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.170886][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.183437][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.192613][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.218660][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.231040][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.246986][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.275459][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.306159][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.335882][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.370281][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.392864][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.440755][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.512991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.524081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.536583][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.571786][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.581198][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.613255][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.623172][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.641217][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.682728][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.824340][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.846246][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.880320][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.900597][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 87.914506][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.961157][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.976238][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 87.976257][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 87.985973][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 87.989604][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 88.031323][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.073001][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.087325][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.096877][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.111185][ T4274] device veth0_vlan entered promiscuous mode [ 88.133583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.147841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.158021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.168483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.216264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.234164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.262741][ T4274] device veth1_vlan entered promiscuous mode [ 88.326358][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.340291][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 88.342533][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.384390][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.400766][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.409379][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.423849][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.439126][ T4274] device veth0_macvtap entered promiscuous mode [ 88.460512][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.474310][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.496052][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.536277][ T4274] device veth1_macvtap entered promiscuous mode [ 88.622446][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.684763][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.718605][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.764450][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.792013][ T4375] loop1: detected capacity change from 0 to 512 [ 88.799289][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.824192][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.865386][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.876174][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.888047][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.907950][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.918688][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.930088][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.942539][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.952651][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.963514][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.973534][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.984210][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.985927][ T4375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.002750][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.011532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.033944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.081708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.121965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.160917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.208803][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.231870][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.264854][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.287475][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.397473][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 89.579974][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.618097][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.642618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.673500][ T4396] netlink: 'syz.1.13': attribute type 39 has an invalid length. [ 89.902263][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.929814][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.950601][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.154034][ T4410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 90.268043][ T4410] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 90.323120][ T4410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 90.651204][ T4428] loop3: detected capacity change from 0 to 1024 [ 90.734164][ T4428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.957719][ T4442] netlink: 'syz.1.29': attribute type 2 has an invalid length. [ 91.046796][ T4442] device .d entered promiscuous mode [ 91.096976][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 91.322093][ T4449] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 91.396572][ T4451] netlink: 'syz.4.32': attribute type 39 has an invalid length. [ 91.525615][ T4457] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 91.976801][ T26] cfg80211: failed to load regulatory.db [ 92.069700][ T4475] mmap: syz.4.44 (4475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.155185][ T4482] Zero length message leads to an empty skb [ 92.407660][ T4488] device geneve2 entered promiscuous mode [ 92.789398][ T4497] can0: slcan on ttyS3. [ 93.198276][ T4496] netlink: 'syz.3.55': attribute type 39 has an invalid length. [ 93.382391][ T4502] loop4: detected capacity change from 0 to 7 [ 93.423285][ T4502] Dev loop4: unable to read RDB block 7 [ 93.448440][ T4502] loop4: unable to read partition table [ 93.460424][ T4502] loop4: partition table beyond EOD, truncated [ 93.467842][ T4502] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.551748][ T4489] can0 (unregistered): slcan off ttyS3. [ 94.901284][ T4529] netlink: 76 bytes leftover after parsing attributes in process `syz.3.64'. [ 95.371132][ T4546] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 96.442628][ T4558] xt_hashlimit: size too large, truncated to 1048576 [ 96.532645][ T4564] loop4: detected capacity change from 0 to 164 [ 96.544491][ T4563] netlink: 'syz.2.75': attribute type 39 has an invalid length. [ 96.722234][ T4564] ======================================================= [ 96.722234][ T4564] WARNING: The mand mount option has been deprecated and [ 96.722234][ T4564] and is ignored by this kernel. Remove the mand [ 96.722234][ T4564] option from the mount to silence this warning. [ 96.722234][ T4564] ======================================================= [ 96.806454][ T4564] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 97.798717][ T4564] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 97.992542][ T4576] loop0: detected capacity change from 0 to 512 [ 98.020100][ T4576] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.074868][ T4576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.197894][ T4576] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.287775][ T4576] EXT4-fs (loop0): 1 truncate cleaned up [ 98.309680][ T4576] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.572960][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 98.769853][ T4597] loop0: detected capacity change from 0 to 512 [ 98.871828][ T4597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.940259][ T4597] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.269008][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 100.187569][ T4610] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 100.451646][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 100.756346][ T4617] netlink: 'syz.0.93': attribute type 39 has an invalid length. [ 101.159289][ T4623] netlink: 44 bytes leftover after parsing attributes in process `syz.2.95'. [ 101.301434][ T4625] process 'syz.0.96' launched './file1' with NULL argv: empty string added [ 103.381152][ T4656] netlink: 'syz.0.106': attribute type 39 has an invalid length. [ 105.052999][ T4590] Set syz0 is full, maxelem 65536 reached [ 105.539247][ T4710] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 105.800770][ T4715] netlink: 'syz.4.130': attribute type 39 has an invalid length. [ 106.687466][ T4743] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 106.735812][ T4746] netlink: 'syz.2.142': attribute type 39 has an invalid length. [ 107.297443][ T4756] loop2: detected capacity change from 0 to 1024 [ 107.342957][ T4756] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 107.355497][ T4756] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 107.390050][ T4756] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.143: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 107.431956][ T4756] EXT4-fs (loop2): no journal found [ 107.437729][ T4756] EXT4-fs (loop2): can't get journal size [ 107.641845][ T4756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.093383][ T4756] EXT4-fs (loop2): unmounting filesystem. [ 108.559247][ T4773] netlink: 'syz.4.153': attribute type 39 has an invalid length. [ 108.681021][ T4775] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 109.233686][ T4794] netlink: 104 bytes leftover after parsing attributes in process `syz.1.158'. [ 109.937013][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 110.947574][ T4813] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 111.433753][ T4823] loop0: detected capacity change from 0 to 128 [ 111.557790][ T4823] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 111.616900][ T4823] FAT-fs (loop0): Filesystem has been set read-only [ 111.656527][ T4826] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 112.235378][ T4840] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 113.350554][ T4755] Set syz0 is full, maxelem 65536 reached [ 114.653921][ T4893] loop4: detected capacity change from 0 to 7 [ 114.673613][ T4393] Dev loop4: unable to read RDB block 7 [ 114.681154][ T4393] loop4: AHDI p1 p2 p3 [ 114.686996][ T4393] loop4: partition table partially beyond EOD, truncated [ 114.696487][ T4393] loop4: p1 start 1601398130 is beyond EOD, truncated [ 114.703428][ T4393] loop4: p2 start 1702059890 is beyond EOD, truncated [ 114.715514][ T4893] Dev loop4: unable to read RDB block 7 [ 114.731550][ T4893] loop4: AHDI p1 p2 p3 [ 114.738110][ T4893] loop4: partition table partially beyond EOD, truncated [ 114.748811][ T4893] loop4: p1 start 1601398130 is beyond EOD, truncated [ 114.765920][ T4893] loop4: p2 start 1702059890 is beyond EOD, truncated [ 115.366507][ T4910] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 115.417870][ T4910] device bond1 entered promiscuous mode [ 115.423958][ T4910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.495410][ T4910] bond1: (slave bridge1): making interface the new active one [ 115.503298][ T4910] device bridge1 entered promiscuous mode [ 115.511177][ T4910] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 115.522751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 115.801289][ T4923] loop4: detected capacity change from 0 to 7 [ 115.874721][ T4393] Dev loop4: unable to read RDB block 7 [ 115.880388][ T4393] loop4: AHDI p1 p2 p3 [ 115.939580][ T4393] loop4: partition table partially beyond EOD, truncated [ 115.986961][ T4393] loop4: p1 start 1601398130 is beyond EOD, truncated [ 116.582344][ T4393] loop4: p2 start 1702059890 is beyond EOD, truncated [ 118.210843][ T4926] Set syz1 is full, maxelem 65536 reached [ 118.457341][ T4954] loop0: detected capacity change from 0 to 4096 [ 118.677219][ T4954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.699637][ T4962] program syz.4.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.773512][ T4964] loop4: detected capacity change from 0 to 7 [ 118.802099][ T4368] Dev loop4: unable to read RDB block 7 [ 118.808361][ T27] audit: type=1800 audit(1785580827.923:2): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.226" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 118.809935][ T4368] loop4: AHDI p1 p2 p3 [ 118.929733][ T4368] loop4: partition table partially beyond EOD, truncated [ 118.972891][ T4368] loop4: p1 start 1601398130 is beyond EOD, truncated [ 118.992373][ T4368] loop4: p2 start 1702059890 is beyond EOD, truncated [ 119.013616][ T4964] Dev loop4: unable to read RDB block 7 [ 119.026642][ T4964] loop4: AHDI p1 p2 p3 [ 119.032799][ T4964] loop4: partition table partially beyond EOD, truncated [ 119.059759][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 119.065584][ T4964] loop4: p1 start 1601398130 is beyond EOD, truncated [ 119.065611][ T4964] loop4: p2 start 1702059890 is beyond EOD, truncated [ 119.211233][ T4970] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 119.371780][ T4970] device bond1 entered promiscuous mode [ 119.378176][ T4970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.520706][ T4978] bond1: (slave bridge1): making interface the new active one [ 119.575555][ T4978] device bridge1 entered promiscuous mode [ 119.582788][ T4978] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 119.645165][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 120.003063][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 120.129146][ T4998] loop4: detected capacity change from 0 to 7 [ 120.144488][ T4998] Dev loop4: unable to read RDB block 7 [ 120.183678][ T4998] loop4: unable to read partition table [ 120.210389][ T4998] loop4: partition table beyond EOD, truncated [ 120.233562][ T4998] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.362566][ T5005] loop0: detected capacity change from 0 to 128 [ 120.403330][ T5005] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.445462][ T5005] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.585268][ T5011] loop3: detected capacity change from 0 to 2048 [ 120.645962][ T5011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.718214][ T5011] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.781137][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.828325][ T5011] EXT4-fs (loop3): Remounting filesystem read-only [ 121.091255][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 121.412405][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 121.630185][ T4322] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 121.677732][ T4322] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.732894][ T5054] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 121.840973][ T5054] device bond2 entered promiscuous mode [ 121.876271][ T5054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.899311][ T5054] bond2: (slave bridge2): making interface the new active one [ 121.908588][ T5054] device bridge2 entered promiscuous mode [ 121.917211][ T5054] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 121.941768][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 122.198497][ T5055] fido_id (5055) used greatest stack depth: 20352 bytes left [ 122.819647][ T5086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 123.059533][ T5082] loop3: detected capacity change from 0 to 8192 [ 123.176879][ T5082] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.259707][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.317575][ T5082] FAT-fs (loop3): Filesystem has been set read-only [ 123.324709][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.333691][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.344387][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.353546][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.362557][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.371671][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.380650][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 123.413628][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.044383][ T5082] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 124.108604][ T27] audit: type=1800 audit(1785580833.223:3): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.275" name="file2" dev="loop3" ino=1048598 res=0 errno=0 [ 124.316540][ T5082] syz.3.275 (5082) used greatest stack depth: 20336 bytes left [ 125.398217][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 126.677524][ T5146] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 126.757809][ T5146] device bond3 entered promiscuous mode [ 126.763844][ T5146] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.918056][ T5148] bond3: (slave bridge3): making interface the new active one [ 126.944772][ T5148] device bridge3 entered promiscuous mode [ 126.951809][ T5148] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 127.006903][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 127.381324][ T5165] loop3: detected capacity change from 0 to 4096 [ 127.401497][ T5165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.632201][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 128.596826][ T5185] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 128.760110][ T5183] device syzkaller0 entered promiscuous mode [ 128.938150][ T5196] loop1: detected capacity change from 0 to 1024 [ 128.991702][ T5196] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 129.032882][ T5196] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 129.062027][ T5196] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.082497][ T5196] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.316: Inode bitmap for bg 0 marked uninitialized [ 129.097147][ T5196] EXT4-fs (loop1): Remounting filesystem read-only [ 129.104210][ T5196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 129.118886][ T5196] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.316: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 129.206770][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 130.500681][ T5225] loop4: detected capacity change from 0 to 7 [ 130.516095][ T4393] Dev loop4: unable to read RDB block 7 [ 130.521757][ T4393] loop4: unable to read partition table [ 130.529078][ T4393] loop4: partition table beyond EOD, truncated [ 130.545728][ T5225] Dev loop4: unable to read RDB block 7 [ 130.553947][ T5225] loop4: unable to read partition table [ 130.566121][ T5225] loop4: partition table beyond EOD, truncated [ 130.588454][ T5225] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 130.611999][ T3639] Dev loop4: unable to read RDB block 7 [ 130.628105][ T3639] loop4: unable to read partition table [ 130.640976][ T3639] loop4: partition table beyond EOD, truncated [ 130.854527][ T5232] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 130.919918][ T5234] futex_wake_op: syz.1.328 tries to shift op by 144; fix this program [ 131.405988][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.650208][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 131.714548][ T26] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.745731][ T26] usb 2-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 131.770656][ T26] usb 2-1: config 0 has no interface number 0 [ 131.794737][ T26] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.836067][ T26] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 131.855151][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.929839][ T26] usb 2-1: config 0 descriptor?? [ 132.006539][ T26] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 133.031801][ T5200] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 134.236443][ T26] usb 2-1: USB disconnect, device number 2 [ 134.386218][ T5264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'. [ 134.401644][ T5266] loop4: detected capacity change from 0 to 7 [ 134.425178][ T5266] Dev loop4: unable to read RDB block 7 [ 134.430966][ T5266] loop4: unable to read partition table [ 134.475089][ T5266] loop4: partition table beyond EOD, truncated [ 134.522334][ T5266] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.691388][ T5272] netlink: 44 bytes leftover after parsing attributes in process `syz.3.342'. [ 134.782462][ T5272] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.791347][ T5272] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.405508][ T5297] device syzkaller0 entered promiscuous mode [ 137.520992][ T5302] device syzkaller0 entered promiscuous mode [ 138.058560][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.065106][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.918708][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 141.465292][ T5395] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 141.715410][ T5395] device bond2 entered promiscuous mode [ 141.735316][ T5395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.819997][ T5439] netlink: 168 bytes leftover after parsing attributes in process `syz.4.399'. [ 144.087208][ T5445] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 144.160739][ T5445] device bond1 entered promiscuous mode [ 144.167384][ T5445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.257817][ T5456] capability: warning: `syz.4.408' uses deprecated v2 capabilities in a way that may be insecure [ 144.703705][ T5474] sctp: [Deprecated]: syz.4.414 (pid 5474) Use of int in max_burst socket option deprecated. [ 144.703705][ T5474] Use struct sctp_assoc_value instead [ 144.905231][ T5481] loop4: detected capacity change from 0 to 7 [ 145.005481][ T5481] Dev loop4: unable to read RDB block 7 [ 145.017310][ T5481] loop4: unable to read partition table [ 145.040154][ T5481] loop4: partition table beyond EOD, truncated [ 145.134797][ T5481] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 145.299737][ T5489] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 145.325651][ T5489] device bond4 entered promiscuous mode [ 145.332752][ T5489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.060235][ T5513] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 146.599719][ T5524] loop4: detected capacity change from 0 to 7 [ 146.640201][ T5524] Dev loop4: unable to read RDB block 7 [ 146.660549][ T5524] loop4: unable to read partition table [ 146.681004][ T5524] loop4: partition table beyond EOD, truncated [ 146.715373][ T5524] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.612752][ T5547] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 148.073660][ T5555] loop0: detected capacity change from 0 to 2048 [ 148.187854][ T5555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 148.270868][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 149.790467][ T5526] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 150.018958][ T5577] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 150.142980][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 150.199724][ T5585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 150.261476][ T5585] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.271436][ T5585] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.280420][ T5585] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.289229][ T5585] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.617456][ T5598] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 150.629357][ T5598] udc usbip-vudc.0: failed to start g1: -19 [ 150.642574][ T5598] UDC core: g1: couldn't find an available UDC or it's busy [ 152.273927][ T5620] loop0: detected capacity change from 0 to 1024 [ 152.285713][ T5620] EXT4-fs: Ignoring removed bh option [ 152.595638][ T5620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000] [ 152.605633][ T5624] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 152.619329][ T5620] System zones: 0-1, 3-12 [ 152.696858][ T5620] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #3: block 1: comm syz.0.470: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.730687][ T5620] EXT4-fs (loop0): Remounting filesystem read-only [ 152.740714][ T5620] Quota error (device loop0): write_blk: dquota write failed [ 152.752152][ T5620] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 152.768395][ T5620] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.470: Failed to acquire dquot type 0 [ 152.799352][ T5620] EXT4-fs (loop0): Remounting filesystem read-only [ 152.816167][ T5620] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.470: Freeing blocks not in datazone - block = 0, count = 4096 [ 152.834953][ T5620] EXT4-fs (loop0): Remounting filesystem read-only [ 152.847480][ T5620] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.470: Invalid inode bitmap blk 0 in block_group 0 [ 152.878283][ T30] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.024791][ T5620] EXT4-fs (loop0): Remounting filesystem read-only [ 153.033865][ T5620] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 153.060001][ T5620] EXT4-fs (loop0): Remounting filesystem read-only [ 153.085068][ T5620] EXT4-fs (loop0): 1 orphan inode deleted [ 153.092427][ T30] EXT4-fs (loop0): Remounting filesystem read-only [ 153.115285][ T5620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 153.135622][ T30] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 153.144140][ T30] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0 [ 153.198688][ T5620] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm syz.0.470: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.246250][ T30] EXT4-fs (loop0): Remounting filesystem read-only [ 153.270608][ T5620] EXT4-fs (loop0): Remounting filesystem read-only [ 153.314751][ T5620] Quota error (device loop0): find_next_id: Can't read quota tree block 1 [ 153.515777][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 153.924150][ T5648] loop0: detected capacity change from 0 to 512 [ 153.967976][ T5648] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 154.003355][ T5648] EXT4-fs (loop0): orphan cleanup on readonly fs [ 154.016057][ T5648] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.477: bad orphan inode 15 [ 154.032513][ T5648] ext4_test_bit(bit=14, block=5) = 0 [ 154.038499][ T5648] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 154.112457][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 154.518179][ T5610] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 154.899258][ T5668] loop4: detected capacity change from 0 to 7 [ 154.922869][ T5668] Dev loop4: unable to read RDB block 7 [ 154.942411][ T5668] loop4: AHDI p1 p2 p3 [ 154.953845][ T5668] loop4: partition table partially beyond EOD, truncated [ 154.990455][ T5668] loop4: p1 start 1601398130 is beyond EOD, truncated [ 155.013411][ T5668] loop4: p2 start 1702059890 is beyond EOD, truncated [ 155.089312][ T3639] Dev loop4: unable to read RDB block 7 [ 155.099825][ T3639] loop4: AHDI p1 p2 p3 [ 155.105561][ T3639] loop4: partition table partially beyond EOD, truncated [ 155.112862][ T3639] loop4: p1 start 1601398130 is beyond EOD, truncated [ 155.120009][ T3639] loop4: p2 start 1702059890 is beyond EOD, truncated [ 155.145989][ T5670] tc action pedit offset 4 out of bounds [ 155.949158][ T5688] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 156.050398][ T5688] device bond1 entered promiscuous mode [ 156.062229][ T5699] Cannot find add_set index 4 as target [ 156.088927][ T5688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.164375][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 156.188780][ T5705] syz.4.497 uses obsolete (PF_INET,SOCK_PACKET) [ 156.404931][ T5701] device syzkaller0 entered promiscuous mode [ 156.653809][ T5716] loop4: detected capacity change from 0 to 512 [ 156.673936][ T5716] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 156.744257][ T5716] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 157.013739][ T5716] EXT4-fs (loop4): orphan cleanup on readonly fs [ 157.052894][ T5716] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.500: bad orphan inode 3 [ 157.097296][ T5716] EXT4-fs (loop4): Remounting filesystem read-only [ 157.113656][ T5716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.149741][ T5716] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.500: dx entry: limit 0 != root limit 125 [ 157.174187][ T5723] loop0: detected capacity change from 0 to 1024 [ 157.191403][ T5716] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.500: Corrupt directory, running e2fsck is recommended [ 157.230923][ T5723] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 157.411418][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 157.625672][ T5736] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 157.780826][ T5728] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 157.810015][ T5741] loop3: detected capacity change from 0 to 128 [ 157.885804][ T5743] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 158.001135][ T5741] syz.3.509: attempt to access beyond end of device [ 158.001135][ T5741] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 158.084301][ T5741] syz.3.509: attempt to access beyond end of device [ 158.084301][ T5741] loop3: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 158.099427][ T5741] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 158.108492][ T5741] syz.3.509: attempt to access beyond end of device [ 158.108492][ T5741] loop3: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 158.122494][ T5741] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 158.131471][ T5741] syz.3.509: attempt to access beyond end of device [ 158.131471][ T5741] loop3: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 158.137126][ T5743] device bond2 entered promiscuous mode [ 158.166481][ T5741] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 158.185020][ T5743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.192399][ T5741] syz.3.509: attempt to access beyond end of device [ 158.192399][ T5741] loop3: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 158.249340][ T5751] syz.3.509: attempt to access beyond end of device [ 158.249340][ T5751] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 158.286661][ T5751] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 158.573891][ T5759] device syzkaller0 entered promiscuous mode [ 158.622323][ T5768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 158.656712][ T5768] netlink: 'syz.1.516': attribute type 13 has an invalid length. [ 158.711888][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 158.767532][ T5773] loop4: detected capacity change from 0 to 7 [ 158.776636][ T5269] Dev loop4: unable to read RDB block 7 [ 158.791772][ T5269] loop4: AHDI p1 p2 p3 [ 158.802031][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 158.806205][ T5269] loop4: partition table partially beyond EOD, truncated [ 158.833982][ T5269] loop4: p1 start 1601398130 is beyond EOD, truncated [ 158.843467][ T5269] loop4: p2 start 1702059890 is beyond EOD, truncated [ 158.852083][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 158.860252][ T5773] Dev loop4: unable to read RDB block 7 [ 158.884475][ T5773] loop4: AHDI p1 p2 p3 [ 158.889271][ T5773] loop4: partition table partially beyond EOD, truncated [ 158.897928][ T5773] loop4: p1 start 1601398130 is beyond EOD, truncated [ 158.925222][ T5773] loop4: p2 start 1702059890 is beyond EOD, truncated [ 158.934240][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 159.020628][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 159.046654][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 159.089628][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 159.168641][ T5779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 159.178472][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 159.199024][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 159.214435][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 159.235414][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 159.253476][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 159.264156][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 159.272872][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 159.410269][ T5789] netlink: 'syz.3.524': attribute type 1 has an invalid length. [ 159.434704][ T5789] device bond5 entered promiscuous mode [ 159.440636][ T5789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 160.112277][ T5804] device syzkaller0 entered promiscuous mode [ 160.768100][ T5819] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 160.789955][ T5819] device bond3 entered promiscuous mode [ 160.798350][ T5819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.622849][ T5851] device syzkaller0 entered promiscuous mode [ 161.691461][ T5853] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 161.713166][ T5853] device bond2 entered promiscuous mode [ 161.719248][ T5853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.356944][ T5865] loop4: detected capacity change from 0 to 512 [ 162.454952][ T5865] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.552: iget: bad extended attribute block 1 [ 162.527439][ T5865] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.552: couldn't read orphan inode 15 (err -117) [ 162.540120][ T5865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.550826][ T5865] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 13: comm syz.4.552: lblock 0 mapped to illegal pblock 13 (length 1) [ 162.573944][ T5865] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 13: comm syz.4.552: lblock 0 mapped to illegal pblock 13 (length 1) [ 162.672585][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 163.069909][ T5878] loop2: detected capacity change from 0 to 512 [ 163.340339][ T5878] EXT4-fs error (device loop2): __ext4_iget:5102: inode #11: block 16777240: comm syz.2.555: invalid block [ 163.356889][ T5878] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.555: couldn't read orphan inode 11 (err -117) [ 163.379354][ T5878] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.796304][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 164.081837][ T5892] device syzkaller0 entered promiscuous mode [ 165.364093][ T5930] device syzkaller0 entered promiscuous mode [ 165.544977][ T5933] loop2: detected capacity change from 0 to 512 [ 165.610409][ T5933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.680524][ T5933] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.711522][ T5940] loop3: detected capacity change from 0 to 1024 [ 165.738103][ T5940] EXT4-fs: Ignoring removed bh option [ 165.943322][ T5940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.020412][ T5940] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.091696][ T5940] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.579: Freeing blocks not in datazone - block = 0, count = 16 [ 166.134724][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 166.409060][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 167.160827][ T27] audit: type=1326 audit(1785580876.273:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbfb9e019 code=0x7ffc0000 [ 167.184777][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.212360][ T5960] loop4: detected capacity change from 0 to 128 [ 167.284715][ T27] audit: type=1326 audit(1785580876.283:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbfb9e019 code=0x7ffc0000 [ 167.373269][ T27] audit: type=1326 audit(1785580876.283:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbfb9e019 code=0x7ffc0000 [ 167.507804][ T27] audit: type=1326 audit(1785580876.313:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5dbfb9e019 code=0x7ffc0000 [ 167.594724][ T27] audit: type=1326 audit(1785580876.313:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5dbfb9dd82 code=0x7ffc0000 [ 167.620945][ T5970] loop3: detected capacity change from 0 to 2048 [ 167.673175][ T27] audit: type=1326 audit(1785580876.313:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5dbfb5e84e code=0x7ffc0000 [ 167.715434][ T5975] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 167.780597][ T5970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 167.817417][ T27] audit: type=1326 audit(1785580876.313:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5dbfb9de47 code=0x7ffc0000 [ 167.873039][ T5970] EXT4-fs error (device loop3): ext4_find_extent:900: inode #2: comm syz.3.590: inode has invalid extent depth: 8 [ 167.969569][ T5970] EXT4-fs (loop3): Remounting filesystem read-only [ 167.993074][ T5984] EXT4-fs error (device loop3): ext4_find_extent:900: inode #2: comm syz.3.590: inode has invalid extent depth: 8 [ 168.014704][ T27] audit: type=1326 audit(1785580876.323:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5dbfb5e84e code=0x7ffc0000 [ 168.038566][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.057831][ T5984] EXT4-fs (loop3): Remounting filesystem read-only [ 168.120180][ T27] audit: type=1326 audit(1785580876.323:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5dbfb9dcab code=0x7ffc0000 [ 168.166361][ T5976] loop2: detected capacity change from 0 to 8192 [ 168.222886][ T27] audit: type=1326 audit(1785580876.373:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.4.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbfb9e019 code=0x7ffc0000 [ 168.255406][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 168.270252][ T5976] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.338575][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 168.390577][ T5976] FAT-fs (loop2): Filesystem has been set read-only [ 168.411005][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 168.424081][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 168.433377][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 168.442717][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 168.452389][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 168.462208][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 168.546083][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 168.615736][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 168.625383][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 169.113399][ T6009] loop1: detected capacity change from 0 to 512 [ 169.564160][ T6009] EXT4-fs error (device loop1): __ext4_iget:5102: inode #11: block 16777240: comm syz.1.602: invalid block [ 169.579271][ T6009] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.602: couldn't read orphan inode 11 (err -117) [ 169.594367][ T6009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 170.026579][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 170.212877][ T6021] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 172.110987][ T6057] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 172.167754][ T6061] loop0: detected capacity change from 0 to 512 [ 172.613033][ T6071] loop2: detected capacity change from 0 to 512 [ 172.917269][ T6071] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.627: inode has both inline data and extents flags [ 172.935777][ T6071] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.627: couldn't read orphan inode 15 (err -117) [ 173.046456][ T6071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.835549][ T6084] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 173.882114][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 175.444466][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.644'. [ 175.533779][ T6117] netlink: 'syz.1.644': attribute type 13 has an invalid length. [ 175.552060][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 175.577119][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 175.610580][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 175.640700][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 175.662391][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 175.691665][ T6125] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 175.698728][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 175.723084][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 175.762483][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 175.782126][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 175.811030][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 175.839933][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 175.859356][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 175.908451][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 175.944310][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 177.060155][ T6144] loop0: detected capacity change from 0 to 2048 [ 177.298173][ T6144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 177.547292][ T6144] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.657639][ T6163] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 177.658124][ T6144] EXT4-fs (loop0): Remounting filesystem read-only [ 177.949228][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 179.623716][ T6205] loop1: detected capacity change from 0 to 128 [ 179.663033][ T6202] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 179.718204][ T6205] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 179.781433][ T6205] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.971396][ T6212] device syzkaller0 entered promiscuous mode [ 179.978471][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 181.404365][ T6224] loop3: detected capacity change from 0 to 4096 [ 181.463611][ T6232] loop4: detected capacity change from 0 to 7 [ 181.520061][ T6224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 181.576065][ T6232] Dev loop4: unable to read RDB block 7 [ 181.581714][ T6232] loop4: AHDI p1 p2 p3 [ 181.685906][ T6232] loop4: partition table partially beyond EOD, truncated [ 181.686092][ T6232] loop4: p1 start 1601398130 is beyond EOD, truncated [ 181.686115][ T6232] loop4: p2 start 1702059890 is beyond EOD, truncated [ 181.742322][ T6244] loop2: detected capacity change from 0 to 512 [ 181.810974][ T6244] EXT4-fs error (device loop2): __ext4_iget:5102: inode #11: block 16777240: comm syz.2.690: invalid block [ 181.839095][ T6244] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.690: couldn't read orphan inode 11 (err -117) [ 181.853713][ T6244] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 181.917288][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 182.199087][ T4316] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.246545][ T4316] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.485753][ T6257] device syzkaller0 entered promiscuous mode [ 184.204811][ T6237] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 186.180826][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.712'. [ 186.250997][ T6306] netlink: 'syz.0.712': attribute type 13 has an invalid length. [ 186.284251][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 186.352444][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 186.423395][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 186.495057][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 186.535259][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 186.590349][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 186.630492][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 186.710069][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 186.791312][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 186.860973][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 186.904339][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 186.923946][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 186.969938][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 187.014345][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 187.035321][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 188.134372][ T6338] loop4: detected capacity change from 0 to 7 [ 188.163905][ T6338] Dev loop4: unable to read RDB block 7 [ 188.197455][ T4325] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.210709][ T6338] loop4: unable to read partition table [ 188.255271][ T4325] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.267194][ T6338] loop4: partition table beyond EOD, truncated [ 188.304750][ T6338] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.883325][ T6389] device syzkaller0 entered promiscuous mode [ 193.140782][ T6414] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 193.304917][ T6414] udc usbip-vudc.0: failed to start g1: -19 [ 193.327510][ T6414] UDC core: g1: couldn't find an available UDC or it's busy [ 195.213867][ T6440] loop3: detected capacity change from 0 to 1024 [ 195.231767][ T6442] loop4: detected capacity change from 0 to 512 [ 195.246072][ T6440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.252741][ T6440] EXT4-fs: Ignoring removed orlov option [ 195.379831][ T6440] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.503773][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 197.197394][ T6464] loop3: detected capacity change from 0 to 128 [ 197.345698][ T6464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 197.364814][ T6464] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.607587][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 199.525725][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.525850][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.959495][ T6411] device syzkaller0 entered promiscuous mode [ 202.634011][ T6501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 202.711216][ T6501] netlink: 'syz.0.776': attribute type 13 has an invalid length. [ 202.830657][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 202.951908][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 202.974981][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 202.982677][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 203.086881][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 203.216630][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 203.331777][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 203.529896][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 203.691858][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 203.745152][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 203.815327][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 203.823589][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 203.844981][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 203.863310][ T6501] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 204.358416][ T6522] device syzkaller0 entered promiscuous mode [ 206.715820][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 206.715866][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 206.813471][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 206.819623][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 206.825730][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 207.683762][ T6573] loop4: detected capacity change from 0 to 7 [ 207.709802][ T5269] Dev loop4: unable to read RDB block 7 [ 207.821833][ T5269] loop4: unable to read partition table [ 207.892826][ T5269] loop4: partition table beyond EOD, truncated [ 208.453338][ T6573] Dev loop4: unable to read RDB block 7 [ 208.484789][ T6573] loop4: unable to read partition table [ 208.490914][ T6573] loop4: partition table beyond EOD, truncated [ 208.497800][ T6573] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.603270][ T6594] futex_wake_op: syz.0.811 tries to shift op by 144; fix this program [ 211.614893][ T955] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 211.819361][ T955] usb 1-1: Using ep0 maxpacket: 32 [ 211.826699][ T955] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.834870][ T955] usb 1-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 211.845246][ T955] usb 1-1: config 0 has no interface number 0 [ 211.851820][ T955] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.864868][ T955] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 211.873960][ T955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.888239][ T955] usb 1-1: config 0 descriptor?? [ 211.900776][ T955] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 212.303598][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 213.738107][ T4325] usb 1-1: USB disconnect, device number 2 [ 213.807671][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 213.807687][ T27] audit: type=1326 audit(1785580922.923:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 213.863602][ T6630] loop2: detected capacity change from 0 to 128 [ 213.895301][ T6633] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 213.938690][ T27] audit: type=1326 audit(1785580922.953:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 214.016529][ T6633] device bond4 entered promiscuous mode [ 214.041149][ T6633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.175010][ T27] audit: type=1326 audit(1785580922.953:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 214.284769][ T27] audit: type=1326 audit(1785580922.963:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 214.404708][ T27] audit: type=1326 audit(1785580922.963:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ac379dd82 code=0x7ffc0000 [ 214.542992][ T27] audit: type=1326 audit(1785580922.963:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ac375e84e code=0x7ffc0000 [ 214.637269][ T27] audit: type=1326 audit(1785580922.963:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8ac379de47 code=0x7ffc0000 [ 214.735209][ T27] audit: type=1326 audit(1785580922.973:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ac375e84e code=0x7ffc0000 [ 215.344772][ T27] audit: type=1326 audit(1785580922.973:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ac379dcab code=0x7ffc0000 [ 215.376062][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 215.549208][ T27] audit: type=1326 audit(1785580923.013:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.2.824" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8ac375e84e code=0x7ffc0000 [ 215.586980][ T6659] device bond6 entered promiscuous mode [ 215.592849][ T6659] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.705146][ T6668] netlink: 104 bytes leftover after parsing attributes in process `syz.0.836'. [ 215.718740][ T6660] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.748501][ T6660] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 215.783580][ T6660] bond6: (slave ip6gre1): Error -95 calling set_mac_address [ 217.983337][ T6706] loop4: detected capacity change from 0 to 128 [ 218.255337][ T6714] netlink: 104 bytes leftover after parsing attributes in process `syz.0.853'. [ 220.186051][ T6732] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 220.855395][ T6770] netlink: 104 bytes leftover after parsing attributes in process `syz.4.871'. [ 221.017325][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.874'. [ 221.042833][ T6772] netlink: 'syz.1.874': attribute type 13 has an invalid length. [ 221.062848][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 221.082795][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 221.101341][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 221.144854][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 221.153018][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 221.161800][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 221.169587][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 221.177995][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 221.210032][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 221.225212][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 221.245253][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 221.265023][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 221.272744][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 221.285106][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 221.522087][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 221.522103][ T27] audit: type=1326 audit(1785580930.633:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.2.883" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 221.645649][ T27] audit: type=1326 audit(1785580930.653:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.2.883" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 221.699406][ T27] audit: type=1326 audit(1785580930.653:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.2.883" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 221.804390][ T27] audit: type=1326 audit(1785580930.653:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.2.883" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 221.917439][ T27] audit: type=1326 audit(1785580930.653:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.2.883" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 221.966246][ T6806] loop2: detected capacity change from 0 to 128 [ 221.993415][ T6809] loop4: detected capacity change from 0 to 7 [ 222.011342][ T27] audit: type=1326 audit(1785580930.653:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.2.883" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 222.043994][ T6806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 222.047029][ T6809] Dev loop4: unable to read RDB block 7 [ 222.079218][ T6806] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.079262][ T6809] loop4: unable to read partition table [ 222.102386][ T6796] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 222.108345][ T6809] loop4: partition table beyond EOD, truncated [ 222.113020][ T27] audit: type=1326 audit(1785580930.653:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.2.883" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 222.152252][ T6809] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 222.221447][ T3639] Dev loop4: unable to read RDB block 7 [ 222.241411][ T27] audit: type=1326 audit(1785580930.653:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.2.883" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8ac379e019 code=0x7ffc0000 [ 222.243679][ T3639] loop4: unable to read partition table [ 222.304859][ T3639] loop4: partition table beyond EOD, truncated [ 222.313026][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 222.742152][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.895'. [ 222.785037][ T6829] netlink: 'syz.2.895': attribute type 13 has an invalid length. [ 222.805192][ T6830] netlink: 104 bytes leftover after parsing attributes in process `syz.4.896'. [ 222.816793][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 222.863187][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 222.881631][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 222.904993][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 222.932881][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 222.951035][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 222.966992][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 222.984934][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 223.002837][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 223.012887][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 223.033394][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 223.041326][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 223.070441][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 223.103796][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 223.222403][ T6839] netlink: 'syz.0.899': attribute type 1 has an invalid length. [ 223.305994][ T6839] device bond1 entered promiscuous mode [ 223.312019][ T6839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.421441][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 223.578940][ T6851] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.904'. [ 223.639367][ T6854] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.904'. [ 223.655450][ T6853] loop4: detected capacity change from 0 to 7 [ 223.712657][ T6853] Dev loop4: unable to read RDB block 7 [ 223.730132][ T6853] loop4: unable to read partition table [ 223.742753][ T6853] loop4: partition table beyond EOD, truncated [ 223.762239][ T6853] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.240666][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'. [ 224.276086][ T6873] netlink: 'syz.2.913': attribute type 13 has an invalid length. [ 224.310101][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 224.341084][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 224.379615][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 224.413737][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 224.441590][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 224.472809][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 224.509306][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 224.526976][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 224.534425][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 224.554161][ T6879] netlink: 104 bytes leftover after parsing attributes in process `syz.4.916'. [ 224.603622][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 224.624888][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 224.632390][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 224.657715][ T6883] loop0: detected capacity change from 0 to 128 [ 224.708433][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 224.759542][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 224.781328][ T6881] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 224.845519][ T6881] device bond7 entered promiscuous mode [ 224.896224][ T6881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.963120][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 225.089908][ T6890] loop4: detected capacity change from 0 to 7 [ 225.100364][ T6890] Dev loop4: unable to read RDB block 7 [ 225.136977][ T6890] loop4: unable to read partition table [ 225.162900][ T6890] loop4: partition table beyond EOD, truncated [ 225.187194][ T6890] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.243696][ T3639] Dev loop4: unable to read RDB block 7 [ 225.259835][ T3639] loop4: unable to read partition table [ 225.270092][ T3639] loop4: partition table beyond EOD, truncated [ 226.110195][ T6916] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 226.272140][ T6916] device bond5 entered promiscuous mode [ 226.371265][ T6916] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.488753][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.497187][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.519963][ T6928] loop4: detected capacity change from 0 to 7 [ 226.553228][ T5269] Dev loop4: unable to read RDB block 7 [ 226.580217][ T5269] loop4: unable to read partition table [ 226.602579][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 226.627014][ T5269] loop4: partition table beyond EOD, truncated [ 226.641309][ T6928] Dev loop4: unable to read RDB block 7 [ 226.654705][ T6928] loop4: unable to read partition table [ 226.667774][ T6928] loop4: partition table beyond EOD, truncated [ 226.704669][ T6928] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.728623][ T3639] Dev loop4: unable to read RDB block 7 [ 226.734278][ T3639] loop4: unable to read partition table [ 226.760315][ T3639] loop4: partition table beyond EOD, truncated [ 226.828291][ T6932] netlink: 104 bytes leftover after parsing attributes in process `syz.4.935'. [ 227.123032][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.937'. [ 227.183517][ T6937] netlink: 'syz.1.937': attribute type 13 has an invalid length. [ 227.240877][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 227.280449][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 227.319473][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 227.359350][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 227.419091][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 227.469676][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 227.573366][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 227.644337][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 227.696217][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 227.727186][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 227.735384][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 227.743055][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 227.784302][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 227.818453][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 228.436629][ T6960] loop4: detected capacity change from 0 to 512 [ 228.770023][ T6960] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 16777240: comm syz.4.946: invalid block [ 228.785294][ T6960] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.946: couldn't read orphan inode 11 (err -117) [ 228.799423][ T6960] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.238896][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 229.245517][ T6965] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 229.367440][ T6965] device bond3 entered promiscuous mode [ 229.373373][ T6965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.853279][ T6983] netlink: 104 bytes leftover after parsing attributes in process `syz.1.952'. [ 229.870404][ T6982] device syzkaller0 entered promiscuous mode [ 230.632127][ T6998] loop4: detected capacity change from 0 to 7 [ 230.669404][ T5269] Dev loop4: unable to read RDB block 7 [ 230.683819][ T5269] loop4: unable to read partition table [ 230.704760][ T5269] loop4: partition table beyond EOD, truncated [ 230.726889][ T6998] Dev loop4: unable to read RDB block 7 [ 230.773261][ T6998] loop4: unable to read partition table [ 230.830936][ T6998] loop4: partition table beyond EOD, truncated [ 230.896319][ T6998] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.315493][ T7008] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 231.526493][ T7008] device bond4 entered promiscuous mode [ 231.593313][ T7008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.214482][ T7030] netlink: 104 bytes leftover after parsing attributes in process `syz.2.972'. [ 232.787299][ T7036] loop4: detected capacity change from 0 to 7 [ 232.822221][ T5269] Dev loop4: unable to read RDB block 7 [ 232.834825][ T5269] loop4: unable to read partition table [ 232.855440][ T5269] loop4: partition table beyond EOD, truncated [ 232.902326][ T7036] Dev loop4: unable to read RDB block 7 [ 232.918007][ T7036] loop4: unable to read partition table [ 232.931057][ T7036] loop4: partition table beyond EOD, truncated [ 232.959699][ T7036] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.021670][ T3639] Dev loop4: unable to read RDB block 7 [ 233.032726][ T3639] loop4: unable to read partition table [ 233.047251][ T3639] loop4: partition table beyond EOD, truncated [ 233.251789][ T7042] loop0: detected capacity change from 0 to 512 [ 233.419596][ T7042] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.979: inode has both inline data and extents flags [ 233.540153][ T7042] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.979: couldn't read orphan inode 15 (err -117) [ 233.601823][ T7042] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.615880][ T7050] UDC core: g1: couldn't find an available UDC or it's busy [ 233.636534][ T7052] netlink: 'syz.1.982': attribute type 1 has an invalid length. [ 233.780987][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 233.787341][ T7052] device bond6 entered promiscuous mode [ 233.793216][ T7052] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.448879][ T7075] netlink: 104 bytes leftover after parsing attributes in process `syz.2.991'. [ 234.781238][ T7085] loop4: detected capacity change from 0 to 512 [ 234.940631][ T7085] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.996: inode has both inline data and extents flags [ 234.998098][ T7085] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.996: couldn't read orphan inode 15 (err -117) [ 235.028063][ T7085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.210344][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 235.644995][ T7106] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 235.744693][ T7106] device bond7 entered promiscuous mode [ 235.750675][ T7106] 8021q: adding VLAN 0 to HW filter on device bond7 [ 236.409497][ T7129] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1011'. [ 236.638325][ T7138] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 236.667328][ T7138] device bond2 entered promiscuous mode [ 236.673636][ T7138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.850190][ T7141] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1018'. [ 237.370396][ T7164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1027'. [ 237.438746][ T7166] netlink: 'syz.4.1029': attribute type 1 has an invalid length. [ 237.462502][ T7166] device bond3 entered promiscuous mode [ 237.468628][ T7166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.823440][ T7182] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1034'. [ 238.204249][ T7195] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 238.269745][ T7195] device bond4 entered promiscuous mode [ 238.276399][ T7195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.284251][ T7199] netlink: 'syz.2.1042': attribute type 12 has an invalid length. [ 238.382345][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1041'. [ 238.740123][ T7211] loop2: detected capacity change from 0 to 512 [ 238.906706][ T7211] EXT4-fs error (device loop2): __ext4_iget:5102: inode #11: block 16777240: comm syz.2.1045: invalid block [ 238.920536][ T7211] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1045: couldn't read orphan inode 11 (err -117) [ 238.936456][ T7211] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 239.437816][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 239.461647][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1047'. [ 239.656650][ T7222] loop2: detected capacity change from 0 to 2048 [ 239.761550][ T7222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 239.794434][ T7222] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 239.911687][ T7222] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 239.954711][ T7222] EXT4-fs (loop2): This should not happen!! Data will be lost [ 239.954711][ T7222] [ 239.971378][ T7222] EXT4-fs (loop2): Total free blocks count 0 [ 239.984713][ T7222] EXT4-fs (loop2): Free/Dirty block details [ 239.994965][ T7222] EXT4-fs (loop2): free_blocks=2415919104 [ 240.019218][ T7222] EXT4-fs (loop2): dirty_blocks=16 [ 240.045909][ T7222] EXT4-fs (loop2): Block reservation details [ 240.065821][ T7222] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 240.225925][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 240.518706][ T7244] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 240.626648][ T7244] device bond8 entered promiscuous mode [ 240.642832][ T7244] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.651531][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'. [ 240.754226][ T7253] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1060'. [ 241.102464][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 241.134837][ T7262] netlink: 'syz.0.1064': attribute type 13 has an invalid length. [ 241.258013][ T7262] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.309546][ T7262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.330424][ T7262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.921233][ T7298] netlink: 'syz.2.1074': attribute type 1 has an invalid length. [ 243.093353][ T7298] device bond5 entered promiscuous mode [ 243.149489][ T7298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 243.262815][ T7304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1074'. [ 243.743567][ T7289] sched: RT throttling activated [ 244.237521][ T7315] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1079'. [ 244.479507][ T7324] xt_hashlimit: size too large, truncated to 1048576 [ 244.868004][ T7336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1088'. [ 244.904105][ T7336] netlink: 'syz.2.1088': attribute type 13 has an invalid length. [ 244.995497][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.300816][ T7349] loop4: detected capacity change from 0 to 7 [ 245.331245][ T7349] Dev loop4: unable to read RDB block 7 [ 245.355547][ T7349] loop4: unable to read partition table [ 245.364264][ T7340] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 245.382390][ T7349] loop4: partition table beyond EOD, truncated [ 245.419499][ T7349] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.470092][ T7340] device bond5 entered promiscuous mode [ 245.531423][ T7340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.612841][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1090'. [ 246.163159][ T7372] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1102'. [ 246.448656][ T7382] loop4: detected capacity change from 0 to 7 [ 246.467831][ T7382] Dev loop4: unable to read RDB block 7 [ 246.473472][ T7382] loop4: unable to read partition table [ 246.490211][ T7382] loop4: partition table beyond EOD, truncated [ 246.499615][ T7382] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 246.728484][ T7390] netlink: 'syz.3.1110': attribute type 1 has an invalid length. [ 246.828938][ T7390] device bond8 entered promiscuous mode [ 246.845080][ T7390] 8021q: adding VLAN 0 to HW filter on device bond8 [ 246.894215][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 247.165465][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 247.316953][ T7404] bond9: (slave veth3): Enslaving as an active interface with an up link [ 247.637552][ T7420] loop4: detected capacity change from 0 to 7 [ 247.657162][ T7395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.665816][ T7420] Dev loop4: unable to read RDB block 7 [ 247.695107][ T7420] loop4: unable to read partition table [ 247.746722][ T7420] loop4: partition table beyond EOD, truncated [ 247.753691][ T7420] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.040928][ T7431] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 248.049371][ T7432] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1123'. [ 248.085414][ T7431] device bond9 entered promiscuous mode [ 248.093778][ T7431] 8021q: adding VLAN 0 to HW filter on device bond9 [ 248.159970][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1124'. [ 248.392360][ T7438] syz.1.1126 (7438) used greatest stack depth: 18128 bytes left [ 248.976898][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'. [ 249.032953][ T7460] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 249.110236][ T7460] device bond3 entered promiscuous mode [ 249.116865][ T7460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.183909][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 249.321505][ T7467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1136'. [ 249.370943][ T7472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1138'. [ 249.397810][ T7472] HTB: quantum of class 8001000C is small. Consider r2q change. [ 249.685192][ T7479] device syzkaller0 entered promiscuous mode [ 249.951265][ T7490] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1147'. [ 250.053084][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 250.066757][ T7492] netlink: 'syz.3.1148': attribute type 13 has an invalid length. [ 250.118752][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 250.128702][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 250.137669][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 250.145547][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 250.152991][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 250.161638][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 250.169359][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 250.177153][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 250.185109][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 250.192600][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 250.202197][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 250.239535][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 250.268220][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 250.295203][ T7492] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 250.386473][ T7501] netlink: 'syz.1.1151': attribute type 1 has an invalid length. [ 250.464529][ T7501] device bond10 entered promiscuous mode [ 250.472785][ T7501] 8021q: adding VLAN 0 to HW filter on device bond10 [ 250.481794][ T7503] device hsr0 entered promiscuous mode [ 250.492212][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 250.557865][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1151'. [ 250.686341][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 250.919283][ T7517] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 250.970407][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.978363][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.132258][ T7521] device syzkaller0 entered promiscuous mode [ 251.366162][ T7533] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 251.465003][ T7533] device bond6 entered promiscuous mode [ 251.470952][ T7533] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.514450][ T7541] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1168'. [ 252.003932][ T7559] autofs4:pid:7559:autofs_fill_super: called with bogus options [ 252.211961][ T7568] device syzkaller0 entered promiscuous mode [ 252.411416][ T7572] netlink: 'syz.1.1182': attribute type 1 has an invalid length. [ 252.569668][ T7572] device bond11 entered promiscuous mode [ 252.576379][ T7572] 8021q: adding VLAN 0 to HW filter on device bond11 [ 253.946390][ T7604] device syzkaller0 entered promiscuous mode [ 253.975122][ T7606] loop4: detected capacity change from 0 to 512 [ 253.998888][ T7606] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.084737][ T7606] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 254.174317][ T7606] EXT4-fs (loop4): 1 truncate cleaned up [ 254.211666][ T7606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 255.048959][ T7624] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 255.126439][ T7624] device bond4 entered promiscuous mode [ 255.132812][ T7624] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.156209][ T7624] __nla_validate_parse: 4 callbacks suppressed [ 255.156226][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1200'. [ 255.261693][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 255.915122][ T7649] loop1: detected capacity change from 0 to 512 [ 256.783265][ T7651] loop0: detected capacity change from 0 to 512 [ 256.986856][ T7651] EXT4-fs error (device loop0): __ext4_iget:5102: inode #11: block 16777240: comm syz.0.1210: invalid block [ 257.000293][ T7651] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1210: couldn't read orphan inode 11 (err -117) [ 257.017836][ T7651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 257.313322][ T7649] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1212: inode has both inline data and extents flags [ 257.345796][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 257.403214][ T7664] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 257.417521][ T7649] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1212: couldn't read orphan inode 15 (err -117) [ 257.463550][ T7664] device bond5 entered promiscuous mode [ 257.469632][ T7649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.512724][ T7664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.588413][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1216'. [ 257.614736][ T7649] support for cryptoloop has been removed. Use dm-crypt instead. [ 257.891128][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 259.543797][ T7710] loop0: detected capacity change from 0 to 512 [ 259.564335][ T7710] EXT4-fs: Ignoring removed orlov option [ 260.191432][ T7710] [ 260.193938][ T7710] ====================================================== [ 260.201027][ T7710] WARNING: possible circular locking dependency detected [ 260.208102][ T7710] syzkaller #0 Not tainted [ 260.212640][ T7710] ------------------------------------------------------ [ 260.219690][ T7710] syz.0.1233/7710 is trying to acquire lock: [ 260.225704][ T7710] ffff88807da50c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 260.235899][ T7710] [ 260.235899][ T7710] but task is already holding lock: [ 260.243306][ T7710] ffff888054c394d8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 260.253219][ T7710] [ 260.253219][ T7710] which lock already depends on the new lock. [ 260.253219][ T7710] [ 260.263666][ T7710] [ 260.263666][ T7710] the existing dependency chain (in reverse order) is: [ 260.272713][ T7710] [ 260.272713][ T7710] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 260.280328][ T7710] down_write+0x36/0x60 [ 260.285066][ T7710] ext4_destroy_inline_data+0x24/0xe0 [ 260.291036][ T7710] ext4_writepages+0x599/0x2e70 [ 260.296464][ T7710] do_writepages+0x3c6/0x640 [ 260.301621][ T7710] filemap_fdatawrite_wbc+0x11e/0x180 [ 260.307555][ T7710] file_write_and_wait_range+0x159/0x230 [ 260.313758][ T7710] ext4_sync_file+0x22a/0xc30 [ 260.319002][ T7710] ext4_buffered_write_iter+0x2de/0x380 [ 260.325117][ T7710] ext4_file_write_iter+0x1e3/0x17d0 [ 260.330993][ T7710] do_iter_write+0x638/0xb10 [ 260.336239][ T7710] do_pwritev+0x23e/0x3a0 [ 260.341130][ T7710] do_syscall_64+0x4c/0xa0 [ 260.346144][ T7710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.353849][ T7710] [ 260.353849][ T7710] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 260.362349][ T7710] __lock_acquire+0x2d18/0x7c40 [ 260.367780][ T7710] lock_acquire+0x1bb/0x4a0 [ 260.372864][ T7710] percpu_down_read+0x44/0x1a0 [ 260.378213][ T7710] ext4_writepages+0x213/0x2e70 [ 260.383636][ T7710] do_writepages+0x3c6/0x640 [ 260.388801][ T7710] __writeback_single_inode+0x153/0x1170 [ 260.395012][ T7710] writeback_single_inode+0x3d2/0x8e0 [ 260.400966][ T7710] write_inode_now+0x17f/0x210 [ 260.406318][ T7710] iput+0x643/0x9c0 [ 260.410748][ T7710] ext4_xattr_block_set+0x2487/0x2fe0 [ 260.416699][ T7710] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 260.423088][ T7710] __ext4_expand_extra_isize+0x301/0x3e0 [ 260.429426][ T7710] __ext4_mark_inode_dirty+0x478/0x760 [ 260.435473][ T7710] ext4_evict_inode+0xa67/0x10e0 [ 260.440994][ T7710] evict+0x4b6/0x8b0 [ 260.445455][ T7710] ext4_orphan_cleanup+0xc32/0x1470 [ 260.451233][ T7710] ext4_fill_super+0x6f0c/0x78f0 [ 260.456742][ T7710] get_tree_bdev+0x3e6/0x610 [ 260.461915][ T7710] vfs_get_tree+0x88/0x270 [ 260.466916][ T7710] do_new_mount+0x247/0xa40 [ 260.471992][ T7710] __se_sys_mount+0x2e3/0x3d0 [ 260.477244][ T7710] do_syscall_64+0x4c/0xa0 [ 260.482250][ T7710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.488733][ T7710] [ 260.488733][ T7710] other info that might help us debug this: [ 260.488733][ T7710] [ 260.499008][ T7710] Possible unsafe locking scenario: [ 260.499008][ T7710] [ 260.506508][ T7710] CPU0 CPU1 [ 260.511907][ T7710] ---- ---- [ 260.517321][ T7710] lock(&ei->xattr_sem); [ 260.521706][ T7710] lock(&sbi->s_writepages_rwsem); [ 260.529477][ T7710] lock(&ei->xattr_sem); [ 260.536376][ T7710] lock(&sbi->s_writepages_rwsem); [ 260.541654][ T7710] [ 260.541654][ T7710] *** DEADLOCK *** [ 260.541654][ T7710] [ 260.549840][ T7710] 3 locks held by syz.0.1233/7710: [ 260.554993][ T7710] #0: ffff8880507b60e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x930 [ 260.565187][ T7710] #1: ffff8880507b6650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x431/0x10e0 [ 260.574765][ T7710] #2: ffff888054c394d8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 260.585125][ T7710] [ 260.585125][ T7710] stack backtrace: [ 260.591061][ T7710] CPU: 0 PID: 7710 Comm: syz.0.1233 Not tainted syzkaller #0 [ 260.598483][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.608600][ T7710] Call Trace: [ 260.611971][ T7710] [ 260.614943][ T7710] dump_stack_lvl+0x188/0x24e [ 260.619674][ T7710] ? load_image+0x410/0x410 [ 260.624221][ T7710] ? show_regs_print_info+0x12/0x12 [ 260.629481][ T7710] ? print_circular_bug+0x12b/0x1a0 [ 260.634956][ T7710] check_noncircular+0x296/0x330 [ 260.639961][ T7710] ? look_up_lock_class+0x75/0x140 [ 260.645151][ T7710] ? add_chain_block+0x9b0/0x9b0 [ 260.650175][ T7710] ? lockdep_lock+0xf1/0x1f0 [ 260.654828][ T7710] ? _find_first_zero_bit+0xd2/0x100 [ 260.660360][ T7710] __lock_acquire+0x2d18/0x7c40 [ 260.665281][ T7710] ? verify_lock_unused+0x140/0x140 [ 260.670574][ T7710] ? mark_lock+0x94/0x320 [ 260.675043][ T7710] ? __lock_acquire+0x1465/0x7c40 [ 260.680122][ T7710] lock_acquire+0x1bb/0x4a0 [ 260.684863][ T7710] ? ext4_writepages+0x213/0x2e70 [ 260.689937][ T7710] ? __lock_acquire+0x138a/0x7c40 [ 260.695015][ T7710] ? __might_sleep+0xd0/0xd0 [ 260.699676][ T7710] ? read_lock_is_recursive+0x10/0x10 [ 260.705095][ T7710] ? mark_lock+0x94/0x320 [ 260.709520][ T7710] percpu_down_read+0x44/0x1a0 [ 260.714335][ T7710] ? ext4_writepages+0x213/0x2e70 [ 260.719445][ T7710] ext4_writepages+0x213/0x2e70 [ 260.724373][ T7710] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 260.730429][ T7710] ? verify_lock_unused+0x140/0x140 [ 260.735684][ T7710] ? ext4_read_folio+0x370/0x370 [ 260.740667][ T7710] ? mark_lock+0x94/0x320 [ 260.745057][ T7710] ? __lock_acquire+0x1465/0x7c40 [ 260.750174][ T7710] ? __lock_acquire+0x7c40/0x7c40 [ 260.755250][ T7710] ? do_raw_spin_lock+0x128/0x2f0 [ 260.760318][ T7710] ? do_raw_spin_unlock+0x11d/0x230 [ 260.765563][ T7710] ? ext4_read_folio+0x370/0x370 [ 260.770558][ T7710] do_writepages+0x3c6/0x640 [ 260.775205][ T7710] ? __writepage+0x130/0x130 [ 260.780100][ T7710] ? writeback_single_inode+0x3c7/0x8e0 [ 260.785709][ T7710] ? __lock_acquire+0x7c40/0x7c40 [ 260.790792][ T7710] ? do_raw_spin_lock+0x128/0x2f0 [ 260.795873][ T7710] __writeback_single_inode+0x153/0x1170 [ 260.801563][ T7710] writeback_single_inode+0x3d2/0x8e0 [ 260.806989][ T7710] ? write_inode_now+0x210/0x210 [ 260.811988][ T7710] write_inode_now+0x17f/0x210 [ 260.816894][ T7710] ? bdi_split_work_to_wbs+0x8f0/0x8f0 [ 260.822422][ T7710] ? rcu_is_watching+0x11/0xa0 [ 260.827252][ T7710] ? do_raw_spin_unlock+0x11d/0x230 [ 260.832499][ T7710] iput+0x643/0x9c0 [ 260.836363][ T7710] ext4_xattr_block_set+0x2487/0x2fe0 [ 260.841792][ T7710] ? __might_sleep+0xd0/0xd0 [ 260.846463][ T7710] ? ext4_xattr_block_find+0x2c0/0x2c0 [ 260.851976][ T7710] ? ext4_xattr_block_find+0x24a/0x2c0 [ 260.857491][ T7710] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 260.863363][ T7710] __ext4_expand_extra_isize+0x301/0x3e0 [ 260.869051][ T7710] __ext4_mark_inode_dirty+0x478/0x760 [ 260.874577][ T7710] ext4_evict_inode+0xa67/0x10e0 [ 260.879575][ T7710] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 260.885263][ T7710] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 260.891257][ T7710] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 260.897216][ T7710] evict+0x4b6/0x8b0 [ 260.901163][ T7710] ? proc_nr_inodes+0x2f0/0x2f0 [ 260.906062][ T7710] ? do_raw_spin_unlock+0x11d/0x230 [ 260.911345][ T7710] ? _raw_spin_unlock+0x24/0x40 [ 260.916247][ T7710] ? iput+0x79f/0x9c0 [ 260.920279][ T7710] ext4_orphan_cleanup+0xc32/0x1470 [ 260.925542][ T7710] ? ext4_orphan_del+0xc90/0xc90 [ 260.930538][ T7710] ? ext4_register_sysfs+0x27e/0x2c0 [ 260.935880][ T7710] ? errseq_check_and_advance+0x62/0x120 [ 260.941652][ T7710] ext4_fill_super+0x6f0c/0x78f0 [ 260.946655][ T7710] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 260.953035][ T7710] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 260.957210][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.958790][ T7710] ? lockdep_hardirqs_on+0x94/0x140 [ 260.966429][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.970247][ T7710] ? set_blocksize+0x1d0/0x470 [ 260.981311][ T7710] ? sb_set_blocksize+0xa5/0xe0 [ 260.986217][ T7710] get_tree_bdev+0x3e6/0x610 [ 260.990854][ T7710] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 260.997175][ T7710] vfs_get_tree+0x88/0x270 [ 261.001642][ T7710] do_new_mount+0x247/0xa40 [ 261.006244][ T7710] __se_sys_mount+0x2e3/0x3d0 [ 261.010975][ T7710] ? __x64_sys_mount+0xc0/0xc0 [ 261.015902][ T7710] ? lockdep_hardirqs_on+0x94/0x140 [ 261.021234][ T7710] ? __x64_sys_mount+0x1c/0xc0 [ 261.026134][ T7710] do_syscall_64+0x4c/0xa0 [ 261.030603][ T7710] ? clear_bhb_loop+0x60/0xb0 [ 261.035371][ T7710] ? clear_bhb_loop+0x60/0xb0 [ 261.040149][ T7710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.046112][ T7710] RIP: 0033:0x7fd45799f28a [ 261.050576][ T7710] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.070241][ T7710] RSP: 002b:00007fd458931e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.078750][ T7710] RAX: ffffffffffffffda RBX: 00007fd458931ee0 RCX: 00007fd45799f28a [ 261.086772][ T7710] RDX: 0000200000000c00 RSI: 00002000000003c0 RDI: 00007fd458931ea0 [ 261.094791][ T7710] RBP: 0000200000000c00 R08: 00007fd458931ee0 R09: 0000000000000000 [ 261.102809][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000003c0 [ 261.110829][ T7710] R13: 00007fd458931ea0 R14: 000000000000047a R15: 000000000000002c [ 261.118951][ T7710] [ 261.122074][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.140136][ T7710] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.1233: iget: bad extra_isize 90 (inode size 256) [ 261.161301][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 261.176063][ T7710] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1233: error while reading EA inode 11 err=-117 [ 261.196228][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 261.208879][ T7710] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.1233: iget: bad extra_isize 90 (inode size 256) [ 261.228361][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 261.236825][ T7710] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1233: error while reading EA inode 11 err=-117 [ 261.252368][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 261.259129][ T7710] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.1233: iget: bad extra_isize 90 (inode size 256) [ 261.273944][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 261.282452][ T7710] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1233: error while reading EA inode 18 err=-117 [ 261.297099][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 261.303738][ T7710] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.1233: iget: bad extra_isize 90 (inode size 256) [ 261.335761][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 261.342524][ T7710] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1233: error while reading EA inode 18 err=-117 [ 261.367016][ T7710] EXT4-fs (loop0): Remounting filesystem read-only [ 261.376758][ T7710] EXT4-fs (loop0): 1 orphan inode deleted [ 261.382772][ T7710] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 261.424636][ T4278] EXT4-fs (loop0): unmounting filesystem.