last executing test programs: 11.83456782s ago: executing program 3 (id=827): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fcntl$notify(0xffffffffffffffff, 0x402, 0x91ea6c12f182534) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x10) 7.094973716s ago: executing program 0 (id=901): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe8000000000", 0xe}], 0x1}, 0x0) 6.964689235s ago: executing program 0 (id=902): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 5.414048915s ago: executing program 1 (id=918): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r1 = creat(0x0, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) r2 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r2, 0x0, 0x11, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) sendmsg$kcm(r1, 0x0, 0x20010) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xfce1) fchmod(r0, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCFLSH(r0, 0x540b, 0x1) 4.536551438s ago: executing program 1 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x34, r1, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) 4.376702559s ago: executing program 1 (id=925): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x13, 0x98, 0x3, 0x6, 0x6, 0x7e, 0x6, 0xf6, 0xffffffffffffffff}) 4.376540979s ago: executing program 2 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x17}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}], 0x2}, 0x4041) 4.136534806s ago: executing program 1 (id=929): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="5b51711fa0da2d73a4b0e9c72c28379d30eb171da02c1d734fb3", 0x1a}], 0x1) 4.031232943s ago: executing program 2 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.995269457s ago: executing program 2 (id=932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.940677372s ago: executing program 0 (id=935): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) 1.864807938s ago: executing program 4 (id=936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.858612268s ago: executing program 4 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.782690493s ago: executing program 4 (id=938): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x0, 0x4}, 0x20) 1.68073775s ago: executing program 4 (id=939): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008800}, 0x20048851) 1.669327881s ago: executing program 0 (id=940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0x17}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ec", 0x1a}], 0x2}, 0x4041) 1.620548664s ago: executing program 4 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x1, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc97}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.132653729s ago: executing program 3 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.084889773s ago: executing program 2 (id=943): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x14, r0, 0x1, 0x0, 0x1}, 0x14}}, 0x80) 1.077022143s ago: executing program 1 (id=944): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 977.90412ms ago: executing program 0 (id=945): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f00000004c0)={0x3, 0x1}, &(0x7f00000004c0)) 977.67528ms ago: executing program 2 (id=946): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 908.605065ms ago: executing program 4 (id=947): r0 = socket$tipc(0x1e, 0x2, 0x0) memfd_create(0x0, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = socket(0x1e, 0x4, 0x0) unshare(0x30000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r7, 0x0, 0x0, 0x40102, 0x6, 0x3b) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16=r6], 0x14) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=r6], 0x140}}, 0xdc955a41d9e63ba0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0xfffffffd, 0x2}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r11, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140), 0x0, 0x4d9, &(0x7f0000000680)="$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") 799.644863ms ago: executing program 2 (id=948): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgsnd(0x0, 0x0, 0x2000, 0x0) 238.438563ms ago: executing program 3 (id=949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1d, 0x0, &(0x7f0000001c00)) 88.751983ms ago: executing program 1 (id=950): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x18, &(0x7f0000000e80)={[{@i_version}, {@init_itable}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@grpjquota}, {@sysvgroups}, {@inlinecrypt}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}], [{@obj_user={'obj_user', 0x3d, '?'}}, {@subj_role={'subj_role', 0x3d, 'nouid32'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'sysvgroups'}}, {@pcr={'pcr', 0x3d, 0xf}}]}, 0x1, 0x565, &(0x7f00000007c0)="$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") 88.569163ms ago: executing program 3 (id=951): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x46eb, 0x7, 0x4, 0x8, 0x7f, 0x3}, 0xc) 88.386043ms ago: executing program 3 (id=952): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 64.763475ms ago: executing program 0 (id=953): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d", 0x2}], 0x2) 0s ago: executing program 3 (id=954): socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 55.215656][ T4171] cgroup: Unknown subsys name 'net' [ 55.353624][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.673630][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.038906][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 58.113258][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 58.158585][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.181517][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 58.207161][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 58.256705][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.265649][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.275413][ T4183] device bridge_slave_0 entered promiscuous mode [ 58.291027][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.298447][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.307582][ T4184] device bridge_slave_0 entered promiscuous mode [ 58.339396][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.346583][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.355169][ T4183] device bridge_slave_1 entered promiscuous mode [ 58.363802][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.374025][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.382423][ T4184] device bridge_slave_1 entered promiscuous mode [ 58.432353][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.439808][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.448124][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.475044][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.484732][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.493129][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.502276][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.511907][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.534140][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.559572][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.570156][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.577571][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.585740][ T4192] device bridge_slave_0 entered promiscuous mode [ 58.600887][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.608491][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.616611][ T4193] device bridge_slave_0 entered promiscuous mode [ 58.637559][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.652215][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.660997][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.671800][ T4192] device bridge_slave_1 entered promiscuous mode [ 58.683254][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.691129][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.701058][ T4193] device bridge_slave_1 entered promiscuous mode [ 58.717040][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.729170][ T4184] team0: Port device team_slave_0 added [ 58.753890][ T4183] team0: Port device team_slave_0 added [ 58.761799][ T4184] team0: Port device team_slave_1 added [ 58.789334][ T4185] team0: Port device team_slave_0 added [ 58.802477][ T4183] team0: Port device team_slave_1 added [ 58.815756][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.828810][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.839676][ T4185] team0: Port device team_slave_1 added [ 58.847866][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.865230][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.873408][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.900727][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.934153][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.958288][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.965697][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.995827][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.010106][ T4192] team0: Port device team_slave_0 added [ 59.024553][ T4192] team0: Port device team_slave_1 added [ 59.032132][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.039867][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.069637][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.081811][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.089480][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.118997][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.151161][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.158658][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.186184][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.204004][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.211819][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.239990][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.257734][ T4193] team0: Port device team_slave_0 added [ 59.274413][ T4193] team0: Port device team_slave_1 added [ 59.300588][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.307748][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.335624][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.355025][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.362770][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.390893][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.426083][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.434428][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.461917][ T4184] device hsr_slave_0 entered promiscuous mode [ 59.469076][ T4184] device hsr_slave_1 entered promiscuous mode [ 59.476513][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.484565][ T4184] Cannot create hsr debugfs directory [ 59.499025][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.506544][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.536293][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.552501][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.560828][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.590240][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.604539][ T4183] device hsr_slave_0 entered promiscuous mode [ 59.612741][ T4183] device hsr_slave_1 entered promiscuous mode [ 59.620601][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.629189][ T4183] Cannot create hsr debugfs directory [ 59.682053][ T4192] device hsr_slave_0 entered promiscuous mode [ 59.689522][ T4192] device hsr_slave_1 entered promiscuous mode [ 59.696272][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.704631][ T4192] Cannot create hsr debugfs directory [ 59.758910][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 59.766121][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 59.792395][ T4193] device hsr_slave_0 entered promiscuous mode [ 59.799349][ T4193] device hsr_slave_1 entered promiscuous mode [ 59.806664][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.814996][ T4193] Cannot create hsr debugfs directory [ 59.838327][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 59.844745][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 59.858311][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 60.066772][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.090875][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.099979][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.113125][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.147510][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.166221][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.176624][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.189313][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.251398][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.261432][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.290257][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.305959][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.366029][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.375587][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.399239][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.413915][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.425634][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.445407][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.473519][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.484571][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.501641][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.517802][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.529107][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.539488][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.547064][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.556938][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.565382][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.573823][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.585055][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.596311][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.611510][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.621971][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.631406][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.642517][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.652910][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.660458][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.676055][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.707343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.716916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.727172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.739107][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.746902][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.755997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.765490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.775219][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.783380][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.793279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.822828][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.857686][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.868195][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.890888][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.901034][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.923133][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.932030][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.942466][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.951634][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.962296][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.970998][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.979780][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.988991][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.998313][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.008536][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.019974][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.033256][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.049211][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.058980][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.086871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.095835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.105993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.116685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.140368][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.152987][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.172758][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.209639][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.219610][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.226787][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.246819][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.259281][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.267838][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.285994][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.295675][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.306441][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.314113][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.327471][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.362858][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.376602][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.386656][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.398081][ T672] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.406162][ T672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.415261][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.426831][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.437746][ T672] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.445924][ T672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.455174][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.464308][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.472873][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.483056][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.493216][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.502761][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.512294][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.523980][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.533617][ T672] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.541208][ T672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.553216][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.574179][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.583585][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.595257][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.604049][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.614331][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.623305][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.632507][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.641594][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.650554][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.659392][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.669801][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.693976][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.710487][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.720001][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.729776][ T672] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.737196][ T672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.746389][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.755525][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.770654][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.793506][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.806885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.817320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.828741][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 61.832165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.835614][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 61.848800][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.857991][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.869298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.879317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.908409][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 61.915362][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 61.922290][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 61.932637][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.943034][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.952582][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.963019][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.972343][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.984055][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.014454][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.026632][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.047443][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.057808][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.068578][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.079256][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.089015][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.099452][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.108807][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.117842][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.127505][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.142063][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.151805][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.160363][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.171255][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.181559][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.192634][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.205555][ T4185] device veth0_vlan entered promiscuous mode [ 62.219448][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.237426][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.259510][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.292350][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.304351][ T4185] device veth1_vlan entered promiscuous mode [ 62.337581][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.347792][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.381021][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.423058][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.438802][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.456211][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.479545][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.510367][ T4185] device veth0_macvtap entered promiscuous mode [ 62.526919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.538505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.549686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.574383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.582624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.595243][ T4185] device veth1_macvtap entered promiscuous mode [ 62.619003][ T4183] device veth0_vlan entered promiscuous mode [ 62.627745][ T4192] device veth0_vlan entered promiscuous mode [ 62.640080][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.651744][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.661259][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.671740][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.680359][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.688999][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.699436][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.712000][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.729683][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.738985][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.746979][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.755577][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.774821][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.785543][ T4192] device veth1_vlan entered promiscuous mode [ 62.800819][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.813420][ T4183] device veth1_vlan entered promiscuous mode [ 62.827806][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.838918][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.847244][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.859954][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.870233][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.880154][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.896302][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.909943][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.922508][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.932956][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.944615][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.977713][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.989626][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.999973][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.010615][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.022482][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.034734][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.067405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.079957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.113826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.129046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.139902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.150103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.159605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.169356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.179525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.189088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.197757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.208552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.220507][ T4183] device veth0_macvtap entered promiscuous mode [ 63.233167][ T4192] device veth0_macvtap entered promiscuous mode [ 63.245373][ T4184] device veth0_vlan entered promiscuous mode [ 63.252846][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.262373][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.277829][ T4183] device veth1_macvtap entered promiscuous mode [ 63.291594][ T4192] device veth1_macvtap entered promiscuous mode [ 63.309151][ T4193] device veth0_vlan entered promiscuous mode [ 63.325901][ T4193] device veth1_vlan entered promiscuous mode [ 63.364724][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.376432][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.388878][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.410374][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.421854][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.434476][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.446425][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.462876][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.475681][ T4184] device veth1_vlan entered promiscuous mode [ 63.487644][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.497747][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.507703][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.519592][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.529881][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.540219][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.553451][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.565225][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.577846][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.589929][ T4193] device veth0_macvtap entered promiscuous mode [ 63.600387][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.612603][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.623472][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.634644][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.647352][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.671057][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.682457][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.692207][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.702995][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.713529][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.725468][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.735615][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.745868][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.755492][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.773842][ T4193] device veth1_macvtap entered promiscuous mode [ 63.810496][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.822428][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.832628][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.843119][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.873951][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.884796][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.904087][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.916173][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.919944][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 63.932613][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 63.937329][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.954278][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.965561][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.976610][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.988959][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.989151][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 64.006498][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.007242][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 64.022537][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.024731][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 64.058116][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.067370][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.089348][ T4184] device veth0_macvtap entered promiscuous mode [ 64.106288][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.118116][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.128956][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.141050][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.153067][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.164246][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.178892][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.212131][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.225749][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.235903][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.245450][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.258715][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.271478][ T4184] device veth1_macvtap entered promiscuous mode [ 64.283999][ T672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.294324][ T672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.299607][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.314398][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.326352][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.338695][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.367493][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.378616][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.397210][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.409886][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.420196][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.431791][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.442930][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.453700][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.465783][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.475336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.486742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.496200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.509251][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.520044][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.527899][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.541057][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.553552][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.564709][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.575780][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.586361][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.598119][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.608784][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.620296][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.633936][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.672289][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.692525][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.701879][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.712031][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.722542][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.733164][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.796129][ T672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.824885][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.830655][ T672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.846080][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.869905][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.885486][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.913985][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.943140][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.968423][ T672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.984471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.998761][ T672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.021683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.063831][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.076699][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.100070][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.103730][ T4274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.117490][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.149859][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.187465][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.188611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.228913][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.254699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.383579][ T4281] tipc: Started in network mode [ 65.404843][ T4281] tipc: Node identity 4, cluster identity 4711 [ 65.408601][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.447041][ T4281] tipc: Node number set to 4 [ 65.615633][ T4290] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'. [ 65.642726][ T4290] device syzkaller0 entered promiscuous mode [ 65.657875][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.665129][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.673165][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.681483][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.688744][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.696252][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.704332][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.712161][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.720601][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.728046][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.735494][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.743807][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.751482][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.758694][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.767353][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.775197][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.782350][ T4290] tc action pedit offset must be on 32 bit boundaries [ 65.789451][ T4290] 0: reclassify loop, rule prio 0, protocol 800 [ 65.807562][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.968352][ T4229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 65.988921][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 66.007233][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 66.068414][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 66.076975][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 66.081828][ T4297] device syzkaller0 entered promiscuous mode [ 66.094760][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 66.218394][ T4229] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 66.229011][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.237293][ T4229] usb 5-1: Product: syz [ 66.242174][ T4229] usb 5-1: Manufacturer: syz [ 66.247371][ T4229] usb 5-1: SerialNumber: syz [ 66.313805][ T4229] usb 5-1: selecting invalid altsetting 1 [ 66.328631][ T4232] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 66.343236][ T4229] usb 5-1: unit 6 not found! [ 66.349706][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.362172][ T4232] usb 3-1: Product: syz [ 66.366804][ T4232] usb 3-1: Manufacturer: syz [ 66.381721][ T4232] usb 3-1: SerialNumber: syz [ 66.397085][ T4302] loop0: detected capacity change from 0 to 512 [ 66.399914][ T4232] usb 3-1: config 0 descriptor?? [ 66.420848][ T4304] device syzkaller0 entered promiscuous mode [ 66.459407][ T4232] hub 3-1:0.0: bad descriptor, ignoring hub [ 66.466124][ T4232] hub: probe of 3-1:0.0 failed with error -5 [ 66.489453][ T4302] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 66.505291][ T4302] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.539262][ T4232] f81232 3-1:0.0: f81534a converter detected [ 66.818745][ T4232] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 67.819247][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 68.331021][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 69.162613][ T4232] f81534a: probe of ttyUSB0 failed with error -5 [ 69.208219][ T4229] usb 5-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 69.283096][ T4319] device syzkaller0 entered promiscuous mode [ 69.411389][ T4229] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 69.428674][ T4232] usb 3-1: USB disconnect, device number 2 [ 69.439697][ T4232] f81232 3-1:0.0: device disconnected [ 69.458177][ T4229] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 69.474728][ T4229] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 69.493429][ T4229] usb 5-1: selecting invalid altsetting 1 [ 69.517703][ T4229] usb 5-1: unit 6 not found! [ 69.538156][ T4229] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 69.556754][ T4229] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 69.588240][ T4229] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 69.624404][ T4229] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 69.658938][ T4229] usb 5-1: selecting invalid altsetting 1 [ 69.665219][ T4229] usb 5-1: unit 6 not found! [ 69.711711][ T4333] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.732627][ T4229] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 69.764503][ T4229] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 69.798181][ T4229] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 69.901253][ T4229] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 69.952850][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.971013][ T4229] usb 5-1: USB disconnect, device number 2 [ 70.058239][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.082913][ T4346] loop0: detected capacity change from 0 to 1024 [ 70.109294][ T4345] xt_hashlimit: size too large, truncated to 1048576 [ 70.130685][ T4346] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 70.308747][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 70.359407][ T4346] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 70.438115][ T4230] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.446852][ T4230] usb 2-1: config 0 has no interface number 0 [ 70.504305][ T4230] usb 2-1: config 0 interface 184 has no altsetting 0 [ 70.514646][ T4346] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.0.22: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 70.718480][ T4230] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.750790][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.777000][ T4230] usb 2-1: Product: syz [ 70.788354][ T4230] usb 2-1: Manufacturer: syz [ 70.801664][ T4230] usb 2-1: SerialNumber: syz [ 70.820247][ T4230] usb 2-1: config 0 descriptor?? [ 70.889503][ T4230] smsc75xx v1.0.0 [ 71.009947][ T4364] loop0: detected capacity change from 0 to 164 [ 71.085199][ T4364] ISOFS: Bad logical zone size 2816 [ 71.531758][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.549877][ T4230] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 71.579504][ T4230] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 71.672351][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.679131][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.962823][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.242247][ T4232] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 72.261171][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.290054][ T4232] usb 3-1: Product: syz [ 72.301522][ T4232] usb 3-1: Manufacturer: syz [ 72.315054][ T4232] usb 3-1: SerialNumber: syz [ 72.383743][ T4232] usb 3-1: selecting invalid altsetting 1 [ 72.404292][ T4232] usb 3-1: unit 6 not found! [ 73.050074][ T4232] usb 3-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 73.318142][ T4232] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 73.366343][ T4232] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 73.390321][ T4232] usb 3-1: selecting invalid altsetting 1 [ 73.396762][ T4232] usb 3-1: unit 6 not found! [ 73.408130][ T4230] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 73.431701][ T4230] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 73.453594][ T4230] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 73.458320][ T4232] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 73.473133][ T4230] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 73.483605][ T4232] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 73.494828][ T4230] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 73.523370][ T4230] usb 2-1: USB disconnect, device number 2 [ 73.538145][ T4232] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 73.565445][ T4232] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 73.580955][ T4232] usb 3-1: selecting invalid altsetting 1 [ 73.609820][ T4232] usb 3-1: unit 6 not found! [ 73.644411][ T4232] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 73.655313][ T4232] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 73.679644][ T4232] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 73.727447][ T4232] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 73.795964][ T4232] usb 3-1: USB disconnect, device number 3 [ 73.846703][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.959508][ T4379] tipc: Started in network mode [ 73.964417][ T4379] tipc: Node identity 4, cluster identity 4711 [ 73.988165][ T4379] tipc: Node number set to 4 [ 74.118596][ T4387] device syzkaller0 entered promiscuous mode [ 74.328183][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.589237][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 76.160168][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 77.128311][ T4232] usb 1-1: unable to read config index 0 descriptor/all [ 77.166353][ T4232] usb 1-1: can't read configurations, error -71 [ 77.266801][ T4412] device syzkaller0 entered promiscuous mode [ 77.296506][ T4352] Set syz1 is full, maxelem 65536 reached [ 77.482763][ T4415] loop1: detected capacity change from 0 to 512 [ 78.440872][ T4415] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 78.444442][ T4434] netlink: 'syz.2.52': attribute type 16 has an invalid length. [ 78.455693][ T4415] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.480197][ T4434] netlink: 'syz.2.52': attribute type 17 has an invalid length. [ 78.502130][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.511095][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.520975][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.535027][ T4434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.878154][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 78.905160][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 78.927871][ T4263] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.581943][ T4449] tipc: Started in network mode [ 79.601631][ T4449] tipc: Node identity 4, cluster identity 4711 [ 79.638224][ T4263] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 79.639515][ T4449] tipc: Node number set to 4 [ 79.664756][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.683747][ T4263] usb 4-1: Product: syz [ 79.710096][ T4263] usb 4-1: Manufacturer: syz [ 79.723404][ T4459] loop4: detected capacity change from 0 to 4096 [ 79.737854][ T4263] usb 4-1: SerialNumber: syz [ 79.752664][ T4466] loop2: detected capacity change from 0 to 512 [ 79.771815][ T4263] usb 4-1: config 0 descriptor?? [ 79.818847][ T4263] hub 4-1:0.0: bad descriptor, ignoring hub [ 79.831931][ T4263] hub: probe of 4-1:0.0 failed with error -5 [ 79.855102][ T4263] f81232 4-1:0.0: f81534a converter detected [ 79.891418][ T4459] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.916451][ T4466] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 79.943163][ T4466] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.028193][ T4263] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 80.036137][ T4263] f81534a: probe of ttyUSB0 failed with error -5 [ 80.309517][ T4479] sock: sock_set_timeout: `syz.2.63' (pid 4479) tries to set negative timeout [ 80.338105][ T4263] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 80.972580][ T4507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 81.158498][ T4263] usb 4-1: USB disconnect, device number 2 [ 81.178499][ T4263] f81232 4-1:0.0: device disconnected [ 81.342243][ T4533] sg_write: data in/out 426973/386 bytes for SCSI command 0x0-- guessing data in; [ 81.342243][ T4533] program syz.1.86 not setting count and/or reply_len properly [ 81.403372][ T4537] loop4: detected capacity change from 0 to 512 [ 81.424740][ T4536] netlink: 48 bytes leftover after parsing attributes in process `syz.2.87'. [ 81.458523][ T26] audit: type=1326 audit(1775857483.275:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 81.485170][ T4537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.506931][ T26] audit: type=1326 audit(1775857483.285:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 81.653160][ T4549] loop2: detected capacity change from 0 to 764 [ 81.660381][ T4537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.665468][ T26] audit: type=1326 audit(1775857483.285:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 81.699237][ T26] audit: type=1326 audit(1775857483.285:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 81.743721][ T26] audit: type=1326 audit(1775857483.285:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 81.803513][ T4537] EXT4-fs (loop4): 1 orphan inode deleted [ 81.809973][ T4537] EXT4-fs (loop4): 1 truncate cleaned up [ 81.818379][ T4537] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,nobarrier,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 81.882424][ T26] audit: type=1326 audit(1775857483.285:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 81.909468][ T26] audit: type=1326 audit(1775857483.285:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 81.910703][ T1325] cfg80211: failed to load regulatory.db [ 81.933964][ T26] audit: type=1326 audit(1775857483.285:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 82.063842][ T26] audit: type=1326 audit(1775857483.285:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 82.076278][ T4562] syz.1.98 uses obsolete (PF_INET,SOCK_PACKET) [ 82.138701][ T26] audit: type=1326 audit(1775857483.285:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26d4c1819 code=0x7ffc0000 [ 82.426496][ T4578] device syzkaller0 entered promiscuous mode [ 82.451512][ T4580] loop0: detected capacity change from 0 to 1024 [ 82.646502][ T4590] loop1: detected capacity change from 0 to 512 [ 82.666836][ T4580] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.741177][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 82.760273][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 82.865846][ T4590] ======================================================= [ 82.865846][ T4590] WARNING: The mand mount option has been deprecated and [ 82.865846][ T4590] and is ignored by this kernel. Remove the mand [ 82.865846][ T4590] option from the mount to silence this warning. [ 82.865846][ T4590] ======================================================= [ 83.445105][ T4602] loop4: detected capacity change from 0 to 512 [ 83.456588][ T4604] loop0: detected capacity change from 0 to 1024 [ 83.485679][ T4604] EXT4-fs (loop0): Ignoring removed bh option [ 83.495656][ T4590] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 83.530045][ T4590] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 83.539050][ T4590] System zones: 0-1, 15-15, 18-18, 34-34 [ 83.546501][ T4590] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.559635][ T4590] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.110: bg 0: block 40: padding at end of block bitmap is not set [ 83.560705][ T4602] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.596017][ T4590] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 83.611864][ T4604] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 83.640777][ T4590] EXT4-fs (loop1): 1 truncate cleaned up [ 83.677217][ T4590] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,sysvgroups,jqfmt=vfsv1,grpjquota=,,errors=continue. Quota mode: none. [ 83.698344][ T4604] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.113: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 83.728838][ T4602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 83.741005][ T4602] System zones: 1-12 [ 83.751573][ T4604] EXT4-fs (loop0): Remounting filesystem read-only [ 83.759544][ T4590] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 83.776837][ T4602] EXT4-fs (loop4): 1 truncate cleaned up [ 83.833159][ T4602] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 83.866031][ T4604] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 83.950176][ T4618] EXT4-fs error (device loop0): ext4_read_inline_dir:1618: inode #12: block 7: comm syz.0.113: path /23/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 83.995851][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 84.003291][ T4624] capability: warning: `syz.2.120' uses deprecated v2 capabilities in a way that may be insecure [ 84.145951][ T4627] device syzkaller0 entered promiscuous mode [ 84.626378][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 84.644246][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 85.208275][ T4652] xt_policy: too many policy elements [ 85.456826][ T4666] netlink: 192 bytes leftover after parsing attributes in process `syz.4.136'. [ 86.238769][ T4675] device syzkaller0 entered promiscuous mode [ 86.701288][ T4691] netlink: 792 bytes leftover after parsing attributes in process `syz.3.145'. [ 86.770490][ T4694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 86.781204][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 86.803638][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 86.823763][ T4694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.147'. [ 86.834368][ T4694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.147'. [ 86.853090][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 87.629029][ T4710] device syzkaller0 entered promiscuous mode [ 87.753526][ T4718] device syzkaller0 entered promiscuous mode [ 88.122965][ T4736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 88.682576][ T4738] loop1: detected capacity change from 0 to 1024 [ 88.868410][ T4738] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.880863][ T4738] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.035922][ T4754] device syzkaller0 entered promiscuous mode [ 89.446516][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 90.135106][ T4783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 90.678511][ T4807] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.863093][ T4807] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.333689][ T4822] device syzkaller0 entered promiscuous mode [ 92.113721][ T4841] loop0: detected capacity change from 0 to 1024 [ 92.200033][ T4841] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 92.443706][ T4862] tmpfs: Bad value for 'mpol' [ 92.598625][ T4869] __nla_validate_parse: 2 callbacks suppressed [ 92.598661][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 93.264771][ T4878] netlink: 'syz.0.218': attribute type 16 has an invalid length. [ 93.274341][ T4878] netlink: 'syz.0.218': attribute type 17 has an invalid length. [ 93.282691][ T4878] netlink: 'syz.0.218': attribute type 27 has an invalid length. [ 93.537339][ T4891] loop0: detected capacity change from 0 to 2048 [ 93.666239][ T4898] loop1: detected capacity change from 0 to 1024 [ 93.689518][ T4891] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 93.741239][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 93.790770][ T4898] EXT4-fs (loop1): Ignoring removed orlov option [ 93.892637][ T4898] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,journal_ioprio=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 93.959123][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 93.959137][ T26] audit: type=1800 audit(1775857495.785:39): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.225" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 94.022729][ T4913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.230'. [ 94.595431][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 95.114228][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.127502][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.212685][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.043479][ T4962] loop0: detected capacity change from 0 to 128 [ 96.166356][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.259113][ T4962] FAT-fs (loop0): Filesystem has been set read-only [ 96.266821][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.422769][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.464321][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.518245][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 96.655563][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.125152][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.156682][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.194000][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.237143][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.342233][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.352457][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.365206][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.374770][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.447128][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 97.581550][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.677720][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.792292][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.899938][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 97.967872][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.014954][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.050776][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.095906][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.106380][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.115757][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.155433][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.194534][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.216713][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.273338][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.310823][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.348929][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.412119][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.425838][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.455251][ T5003] loop1: detected capacity change from 0 to 512 [ 98.490284][ T5005] loop3: detected capacity change from 0 to 128 [ 98.508359][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.517580][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.530083][ T5003] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 98.548503][ T5003] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.561899][ T4962] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 98.630732][ T26] audit: type=1800 audit(1775857500.455:40): pid=4962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.244" name="file1" dev="loop0" ino=1048590 res=0 errno=0 [ 98.657469][ T4962] syz.0.244 (4962) used greatest stack depth: 20368 bytes left [ 98.715794][ T5010] attempt to access beyond end of device [ 98.715794][ T5010] loop3: rw=2049, want=857, limit=128 [ 98.741838][ T5003] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,dioread_nolock,abort,grpjquota=,lazytime,auto_da_alloc,mblk_io_submit,max_dir_size_kb=0x0000000000000100,min_batch_time=0x000000000000007a,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 98.848449][ T4827] attempt to access beyond end of device [ 98.848449][ T4827] loop3: rw=1, want=1041, limit=128 [ 98.866517][ T5017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.258'. [ 98.960493][ T5003] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.061119][ T5003] EXT4-fs (loop1): Cannot change journaled quota options when quota turned on [ 100.506102][ T5065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.277'. [ 100.616619][ T5069] Zero length message leads to an empty skb [ 101.774261][ T5107] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.528190][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1c0!!! [ 102.538483][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #c2!!! [ 102.670406][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 102.680858][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 102.694909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 102.707657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 102.719594][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 102.732766][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 102.743573][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 102.755925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 102.877666][ T5121] capability: warning: `syz.4.296' uses 32-bit capabilities (legacy support in use) [ 103.076879][ T5123] loop1: detected capacity change from 0 to 4096 [ 103.151377][ T5123] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 103.208523][ T5135] device syzkaller0 entered promiscuous mode [ 103.304797][ T5123] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 103.350970][ T5135] tipc: Enabled bearer , priority 0 [ 103.371141][ T5134] tipc: Resetting bearer [ 103.418997][ T5134] tipc: Disabling bearer [ 103.506577][ T26] audit: type=1800 audit(1775857505.325:41): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.297" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 103.618022][ T26] audit: type=1326 audit(1775857505.395:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ac7cb819 code=0x7ffc0000 [ 103.644643][ T5142] loop3: detected capacity change from 0 to 8192 [ 103.659276][ T5142] FAT-fs (loop3): Unrecognized mount option "000000000000000000000001844674407370955161518446744073709551615ÿÿ" or missing value [ 103.695182][ T26] audit: type=1326 audit(1775857505.395:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ac7cb819 code=0x7ffc0000 [ 103.880254][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 104.101920][ T26] audit: type=1326 audit(1775857505.425:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ac7cb819 code=0x7ffc0000 [ 104.416933][ T26] audit: type=1326 audit(1775857505.425:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ac7cb819 code=0x7ffc0000 [ 104.520305][ T26] audit: type=1326 audit(1775857505.425:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb0ac7cb819 code=0x7ffc0000 [ 104.668258][ T26] audit: type=1326 audit(1775857505.425:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ac7cb819 code=0x7ffc0000 [ 104.715687][ T5175] netlink: 'syz.2.316': attribute type 3 has an invalid length. [ 104.743388][ T26] audit: type=1326 audit(1775857505.425:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ac7cb819 code=0x7ffc0000 [ 104.815074][ T26] audit: type=1326 audit(1775857505.495:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ac7cb819 code=0x7ffc0000 [ 104.836761][ T5180] loop1: detected capacity change from 0 to 512 [ 104.852083][ T26] audit: type=1326 audit(1775857505.495:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5150 comm="syz.4.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ac7cb819 code=0x7ffc0000 [ 104.906050][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.320'. [ 104.994313][ T5180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c028, mo2=0002] [ 105.024552][ T5180] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.061558][ T5180] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 105.138082][ T5180] EXT4-fs error (device loop1): __ext4_iget:4912: inode #13: block 25: comm syz.1.318: invalid block [ 105.228138][ T5180] EXT4-fs (loop1): Remounting filesystem read-only [ 105.235238][ T5180] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.318: couldn't read orphan inode 13 (err -117) [ 105.337042][ T5180] EXT4-fs (loop1): Remounting filesystem read-only [ 105.346397][ T5180] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000005,errors=remount-ro,debug,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 105.677710][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 107.696347][ T5230] loop4: detected capacity change from 0 to 1024 [ 108.194178][ T5230] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.417918][ C0] sched: RT throttling activated [ 109.885649][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 110.566608][ T5255] loop0: detected capacity change from 0 to 1024 [ 110.671255][ T5255] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 110.686362][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.697993][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.742335][ T5255] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 110.885127][ T5255] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.344: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 110.938296][ T5255] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.344: couldn't read orphan inode 11 (err -117) [ 110.966964][ T5255] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 111.916481][ T5239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.984108][ T5239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.036055][ T5286] autofs4:pid:5286:autofs_fill_super: called with bogus options [ 112.376331][ T5239] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.386848][ T5239] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.396233][ T5239] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.405387][ T5239] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.511290][ T5241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.339'. [ 112.528915][ T5241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.538929][ T5241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.552069][ T5241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.561904][ T5241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.573925][ T5241] device geneve2 entered promiscuous mode [ 112.695797][ T5293] netlink: 44 bytes leftover after parsing attributes in process `syz.2.355'. [ 112.777702][ T5293] netlink: 44 bytes leftover after parsing attributes in process `syz.2.355'. [ 113.095818][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 113.112996][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 113.815303][ C1] sd 0:0:1:0: tag#4627 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 113.826063][ C1] sd 0:0:1:0: tag#4627 CDB: Read(6) 08 00 00 00 00 00 [ 113.930772][ T5332] loop4: detected capacity change from 0 to 512 [ 113.983015][ T5331] device syzkaller0 entered promiscuous mode [ 114.019941][ T5332] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 114.054238][ T5332] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 114.113191][ T5332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e018, mo2=0002] [ 114.204530][ T5332] System zones: 1-12 [ 114.239278][ T5332] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.270900][ T5332] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.370: bg 0: block 361: padding at end of block bitmap is not set [ 114.301637][ T5332] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 114.371116][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 114.388271][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 114.976064][ T5332] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.370: attempt to clear invalid blocks 33619980 len 1 [ 114.994662][ T5332] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.370: invalid indirect mapped block 1811939328 (level 0) [ 115.010820][ T5332] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.370: invalid indirect mapped block 2 (level 2) [ 115.044789][ T5332] EXT4-fs (loop4): 1 truncate cleaned up [ 115.106328][ T5332] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,nomblk_io_submit,discard,nolazytime,debug,errors=continue. Quota mode: none. [ 115.316918][ T5371] loop3: detected capacity change from 0 to 164 [ 115.337103][ T5376] netlink: 120 bytes leftover after parsing attributes in process `syz.0.389'. [ 115.361301][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 116.026248][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 116.046389][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 116.450512][ T5386] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 117.243213][ T5456] loop1: detected capacity change from 0 to 512 [ 117.322496][ T5456] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 117.388058][ T5456] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.409: corrupted in-inode xattr [ 117.463775][ T5456] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.409: couldn't read orphan inode 15 (err -117) [ 117.506189][ T5456] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 117.727709][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 117.748309][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 119.097329][ T5480] syz.0.415 (5480) used greatest stack depth: 18512 bytes left [ 119.329440][ T5500] device syzkaller0 entered promiscuous mode [ 119.499396][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 119.517253][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 120.276216][ T5520] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 120.459318][ T5526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.433'. [ 121.406635][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 121.427997][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 122.193792][ T5563] xt_hashlimit: size too large, truncated to 1048576 [ 122.227391][ T5565] device syzkaller0 entered promiscuous mode [ 123.317058][ T672] tipc: Subscription rejected, illegal request [ 123.394741][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 123.410887][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 124.077359][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 124.146953][ T5621] loop4: detected capacity change from 0 to 512 [ 124.372880][ T5621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c028, mo2=0002] [ 124.412046][ T5621] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.456601][ T5621] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 124.525655][ T5621] EXT4-fs (loop4): 1 truncate cleaned up [ 124.535122][ T5621] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000005,errors=remount-ro,debug,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 124.789683][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 124.798142][ T4260] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.068129][ T4260] usb 4-1: device descriptor read/64, error -71 [ 125.123463][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 125.141812][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 125.338386][ T4260] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.708024][ T4260] usb 4-1: device descriptor read/64, error -71 [ 125.828579][ T4260] usb usb4-port1: attempt power cycle [ 125.931377][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 125.974895][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 126.278102][ T4260] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.389776][ T4260] usb 4-1: device descriptor read/8, error -71 [ 126.455584][ T5708] netlink: 180 bytes leftover after parsing attributes in process `syz.4.483'. [ 126.791021][ T5724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 126.809050][ T5724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 126.823594][ T4260] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.069422][ T4260] usb 4-1: device descriptor read/8, error -71 [ 127.288955][ T4260] usb usb4-port1: unable to enumerate USB device [ 127.788470][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 128.073869][ T5726] loop4: detected capacity change from 0 to 8192 [ 128.371708][ T5741] device syzkaller0 entered promiscuous mode [ 128.593612][ T5757] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 128.658236][ T5757] netlink: 'syz.2.496': attribute type 4 has an invalid length. [ 128.671031][ T5757] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.496'. [ 129.020200][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 129.037554][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 129.955206][ T5785] loop3: detected capacity change from 0 to 512 [ 130.271182][ T5785] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.376617][ T5785] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.793144][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 131.811067][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 133.150120][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.159047][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.265402][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 133.283335][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 134.142245][ T5881] netlink: 'syz.1.539': attribute type 3 has an invalid length. [ 134.360843][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 134.815206][ T5902] loop1: detected capacity change from 0 to 512 [ 134.868232][ T5902] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.009507][ T5902] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.546: bad orphan inode 131083 [ 135.068390][ T5902] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000006,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 135.101932][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 135.119403][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 135.155890][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 135.155904][ T26] audit: type=1800 audit(1775857536.975:70): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.546" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 135.627320][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 135.716943][ T5921] device syzkaller0 entered promiscuous mode [ 135.783189][ T4317] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.998065][ T4317] usb 4-1: device descriptor read/64, error -71 [ 136.114966][ T5932] loop1: detected capacity change from 0 to 128 [ 136.265669][ T5932] FAT-fs (loop1): Directory bread(block 524322) failed [ 136.303740][ T5932] FAT-fs (loop1): Directory bread(block 524323) failed [ 136.325266][ T5932] FAT-fs (loop1): Directory bread(block 524324) failed [ 136.333752][ T4317] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.373357][ T5932] FAT-fs (loop1): Directory bread(block 524325) failed [ 136.394291][ T5932] FAT-fs (loop1): Directory bread(block 524326) failed [ 136.418155][ T5932] FAT-fs (loop1): Directory bread(block 524327) failed [ 136.453054][ T5932] FAT-fs (loop1): Directory bread(block 524328) failed [ 136.460715][ T5932] FAT-fs (loop1): Directory bread(block 524329) failed [ 136.558072][ T4317] usb 4-1: device descriptor read/64, error -71 [ 136.680913][ T4317] usb usb4-port1: attempt power cycle [ 136.820976][ T5950] xt_hashlimit: size too large, truncated to 1048576 [ 137.050916][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 137.064114][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 137.127984][ T4317] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.218267][ T4317] usb 4-1: device descriptor read/8, error -71 [ 137.500485][ T4317] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.608188][ T4317] usb 4-1: device descriptor read/8, error -71 [ 137.728268][ T4317] usb usb4-port1: unable to enumerate USB device [ 138.533683][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 139.036533][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 139.049832][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 139.076543][ T5993] loop4: detected capacity change from 0 to 512 [ 139.136475][ T5993] EXT4-fs (loop4): Ignoring removed bh option [ 139.170793][ T5993] EXT4-fs (loop4): inline encryption not supported [ 139.201673][ T5993] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.256397][ T5993] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 139.388142][ T5993] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.579: bg 0: block 248: padding at end of block bitmap is not set [ 139.497542][ T5993] Quota error (device loop4): write_blk: dquota write failed [ 139.510081][ T5993] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 139.526474][ T6012] process 'syz.2.586' launched './file0' with NULL argv: empty string added [ 139.537108][ T5993] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.579: Failed to acquire dquot type 1 [ 139.564499][ T5993] EXT4-fs (loop4): 1 truncate cleaned up [ 139.604030][ T5993] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 139.665511][ T6010] process '/newroot/132/file0' started with executable stack [ 139.736698][ T26] audit: type=1800 audit(1775857541.555:71): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.579" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 139.891232][ T154] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 139.922692][ T154] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:2: Failed to release dquot type 1 [ 140.038319][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 140.100066][ T6031] loop4: detected capacity change from 0 to 256 [ 140.163756][ T6031] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 140.203290][ T6031] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 140.229793][ T6031] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 140.264234][ T26] audit: type=1800 audit(1775857542.085:72): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.592" name="file1" dev="loop4" ino=1048592 res=0 errno=0 [ 140.396872][ T6040] loop4: detected capacity change from 0 to 2048 [ 140.531094][ T6040] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.558069][ T6040] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.712664][ T26] audit: type=1800 audit(1775857542.535:73): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.595" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 140.908584][ T6040] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 140.987834][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 140.999300][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 141.571216][ T6070] loop4: detected capacity change from 0 to 764 [ 142.367089][ T6078] loop4: detected capacity change from 0 to 1024 [ 142.452576][ T6078] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 142.491252][ T6078] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 142.508117][ T6078] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 143.309019][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 143.403128][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 143.510969][ T26] audit: type=1326 audit(1775857545.335:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.2.614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0d65ad819 code=0x0 [ 143.928475][ T6129] device syzkaller0 entered promiscuous mode [ 144.182952][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 144.194683][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 144.202754][ T6140] loop1: detected capacity change from 0 to 1024 [ 144.293037][ T6140] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.926673][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 145.041623][ T6174] tipc: Failed to remove unknown binding: 66,0,0/4:916442663/916442664 [ 145.106291][ T6184] tipc: Failed to remove unknown binding: 66,0,0/4:916442663/916442664 [ 146.067656][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 146.078256][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 146.353578][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.362355][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.690078][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.760551][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.040458][ T6177] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.051089][ T6177] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.062991][ T6177] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.073683][ T6177] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.158028][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 147.178173][ T6211] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 147.218511][ T6211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.248716][ T6216] device syzkaller0 entered promiscuous mode [ 147.284917][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 147.716777][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 148.479908][ T6255] __nla_validate_parse: 2 callbacks suppressed [ 148.479921][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.673'. [ 148.516386][ T6260] loop4: detected capacity change from 0 to 128 [ 148.620130][ T6266] device syzkaller0 entered promiscuous mode [ 149.088631][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 149.100738][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 149.492407][ T6313] device syzkaller0 entered promiscuous mode [ 149.600908][ T6321] loop4: detected capacity change from 0 to 764 [ 149.738809][ T6321] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 149.979543][ T6340] loop4: detected capacity change from 0 to 1024 [ 150.031695][ T6340] EXT4-fs (loop4): Ignoring removed bh option [ 150.183659][ T6340] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 150.621476][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 150.632042][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 150.831385][ T6380] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.858708][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062867400: rx timeout, send abort [ 150.885505][ T6380] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 151.341556][ T6406] loop1: detected capacity change from 0 to 4096 [ 151.359479][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062867800: rx timeout, send abort [ 151.370241][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062867400: abort rx timeout. Force session deactivation [ 151.383058][ T6406] EXT4-fs (loop1): Ignoring removed bh option [ 151.415326][ T6406] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,bh,usrquota,stripe=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 151.564401][ T6406] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 80: comm syz.1.729: path /138/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 151.626427][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 151.637218][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 151.870947][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062867800: abort rx timeout. Force session deactivation [ 151.942175][ T6414] loop4: detected capacity change from 0 to 8192 [ 152.000034][ T6428] loop3: detected capacity change from 0 to 128 [ 152.089039][ T6428] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.172105][ T6428] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.456876][ T6448] loop1: detected capacity change from 0 to 1024 [ 152.521861][ T6453] loop4: detected capacity change from 0 to 128 [ 152.597616][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 152.609033][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 152.700658][ T6448] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.157403][ T26] audit: type=1326 audit(1775857554.975:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5f6d4819 code=0x7ffc0000 [ 153.187092][ T6490] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 153.227185][ T26] audit: type=1326 audit(1775857554.975:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5f6d4819 code=0x7ffc0000 [ 153.287974][ T26] audit: type=1326 audit(1775857554.975:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5f6d4819 code=0x7ffc0000 [ 153.312665][ T26] audit: type=1326 audit(1775857554.975:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5f6d4819 code=0x7ffc0000 [ 153.364524][ T26] audit: type=1326 audit(1775857554.975:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0b5f6d4819 code=0x7ffc0000 [ 153.388316][ T26] audit: type=1326 audit(1775857554.975:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5f6d4819 code=0x7ffc0000 [ 153.440474][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 153.543297][ T26] audit: type=1326 audit(1775857554.985:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5f6d4819 code=0x7ffc0000 [ 153.699762][ T26] audit: type=1326 audit(1775857555.005:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b5f69504e code=0x7ffc0000 [ 153.739983][ T6512] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.766148][ T26] audit: type=1326 audit(1775857555.005:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b5f69504e code=0x7ffc0000 [ 153.791564][ T26] audit: type=1326 audit(1775857555.005:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b5f69504e code=0x7ffc0000 [ 154.296400][ T6530] __nla_validate_parse: 1 callbacks suppressed [ 154.296438][ T6530] netlink: 240 bytes leftover after parsing attributes in process `syz.2.768'. [ 154.916766][ T6541] loop4: detected capacity change from 0 to 1024 [ 155.092431][ T6541] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.271870][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 155.286683][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 155.313162][ T6561] loop1: detected capacity change from 0 to 512 [ 155.427465][ T6561] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.520128][ T6561] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.681329][ T6582] loop3: detected capacity change from 0 to 128 [ 155.812821][ T6590] loop4: detected capacity change from 0 to 512 [ 155.985954][ T6590] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.778: inode has both inline data and extents flags [ 156.105789][ T6590] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.778: couldn't read orphan inode 15 (err -117) [ 156.126101][ T6590] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 156.288739][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 156.301506][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 156.528646][ T6617] EXT4-fs (loop4): shut down requested (2) [ 156.758264][ T6628] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.778498][ T6628] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.790072][ T6628] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.803259][ T6628] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.836244][ T6628] device geneve2 left promiscuous mode [ 157.346910][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 157.437709][ T6673] netlink: 220 bytes leftover after parsing attributes in process `syz.2.814'. [ 157.536934][ T6673] device ipvlan2 entered promiscuous mode [ 157.578551][ T6673] team0: Device ipvlan2 failed to register rx_handler [ 157.737175][ T6684] loop4: detected capacity change from 0 to 512 [ 157.805998][ T6684] EXT4-fs (loop4): Ignoring removed bh option [ 157.836365][ T6684] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 157.953180][ T6684] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 159.128877][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 159.843642][ T4451] Bluetooth: hci5: Frame reassembly failed (-84) [ 159.865443][ T4451] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.967074][ T6775] loop4: detected capacity change from 0 to 128 [ 161.130060][ T6775] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.166166][ T6775] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.335874][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 161.396811][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 161.465882][ T6789] loop4: detected capacity change from 0 to 1024 [ 161.540877][ T6789] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 161.614401][ T6789] __quota_error: 110 callbacks suppressed [ 161.614420][ T6789] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 161.699302][ T6789] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 161.778030][ T6789] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.849: Failed to acquire dquot type 0 [ 161.835614][ T6789] EXT4-fs error (device loop4): mb_free_blocks:1874: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 161.860518][ T6789] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #13: comm syz.4.849: corrupted inode contents [ 161.880176][ T6789] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #13: comm syz.4.849: mark_inode_dirty error [ 161.913096][ T4260] Bluetooth: hci5: command 0x1003 tx timeout [ 161.926416][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 161.938628][ T6789] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #13: comm syz.4.849: corrupted inode contents [ 161.965873][ T6789] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #13: comm syz.4.849: mark_inode_dirty error [ 162.028638][ T6789] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #13: comm syz.4.849: corrupted inode contents [ 162.074123][ T6789] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 162.097396][ T6789] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #13: comm syz.4.849: corrupted inode contents [ 162.138626][ T6789] EXT4-fs error (device loop4): ext4_truncate:4279: inode #13: comm syz.4.849: mark_inode_dirty error [ 162.181540][ T6789] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 162.226179][ T6789] EXT4-fs (loop4): 1 truncate cleaned up [ 162.237770][ T6789] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,resuid=0x0000000000000000,grpquota,nombcache,max_dir_size_kb=0x0000000000000008,usrjquota=éq‰Y’3aK,i_version,,errors=continue. Quota mode: writeback. [ 162.353995][ T6789] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 162.385275][ T6789] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 162.415994][ T6789] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.849: Failed to acquire dquot type 0 [ 162.846714][ T6850] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 162.846714][ T6850] The task syz.0.872 (6850) triggered the difference, watch for misbehavior. [ 163.285699][ T6875] netlink: 200 bytes leftover after parsing attributes in process `syz.2.883'. [ 163.610809][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 163.987985][ T4263] Bluetooth: hci5: command 0x1001 tx timeout [ 163.994610][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 164.537348][ T6934] loop4: detected capacity change from 0 to 128 [ 164.546036][ T6933] xt_hashlimit: size too large, truncated to 1048576 [ 164.641993][ T6934] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 165.136111][ T6952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.908'. [ 165.193038][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 166.068121][ T4260] Bluetooth: hci5: command 0x1009 tx timeout [ 166.171288][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 166.188803][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 167.329303][ T7004] loop4: detected capacity change from 0 to 512 [ 167.420516][ T7004] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.477760][ T7004] EXT4-fs (loop4): 1 truncate cleaned up [ 167.514029][ T7004] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 167.549559][ T7004] EXT4-fs (loop4): shut down requested (2) [ 167.830528][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 167.847207][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 168.898717][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.907223][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.599488][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.651667][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.921837][ T7050] loop4: detected capacity change from 0 to 512 [ 169.989100][ T7050] EXT4-fs error (device loop4): ext4_fill_super:4866: inode #2: comm syz.4.941: inode has both inline data and extents flags [ 170.007039][ T7050] EXT4-fs (loop4): get root inode failed [ 170.019257][ T7050] EXT4-fs (loop4): mount failed [ 170.135513][ T7008] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.166520][ T7008] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.183447][ T7008] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.194143][ T7008] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.511314][ T4229] bond0 speed is unknown, defaulting to 1000 [ 170.611502][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 170.628231][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 171.002781][ T26] audit: type=1326 audit(1775857572.815:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.0.945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb26d4c1819 code=0x0 [ 171.286175][ T7076] loop4: detected capacity change from 0 to 512 [ 171.373955][ T7076] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.453057][ T7076] ------------[ cut here ]------------ [ 171.460964][ T7076] EA inode 11 i_nlink=0 [ 171.461204][ T7076] WARNING: CPU: 0 PID: 7076 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 171.483480][ T7088] loop1: detected capacity change from 0 to 1024 [ 171.488074][ T7076] Modules linked in: [ 171.494899][ T7076] CPU: 1 PID: 7076 Comm: syz.4.947 Not tainted syzkaller #0 [ 171.549670][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.571838][ T7088] EXT4-fs (loop1): inline encryption not supported [ 171.588061][ T7088] EXT4-fs (loop1): Ignoring removed nobh option [ 171.605156][ T7088] EXT4-fs (loop1): Unrecognized mount option "obj_user=?" or missing value [ 171.605757][ T7076] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 171.642602][ T7076] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 1a e6 a1 ff 49 8b 37 48 c7 c7 40 9b 3d 8a 89 da e8 f9 32 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 43 22 a0 07 [ 171.664274][ T7076] RSP: 0018:ffffc9000330f160 EFLAGS: 00010246 [ 171.676343][ T7076] RAX: 3ebc70058cd6cc00 RBX: 0000000000000000 RCX: 0000000000080000 [ 171.686364][ T7076] RDX: ffffc9000eceb000 RSI: 0000000000023288 RDI: 0000000000023289 [ 171.702037][ T7076] RBP: ffffc9000330f250 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 171.736213][ T7076] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff888062e72a80 [ 171.760297][ T7076] R13: 1ffff1100c5ce58f R14: dffffc0000000000 R15: ffff888062e72ac0 [ 171.768978][ T7076] FS: 00007fb0aaa046c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 171.781602][ T7076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.789043][ T7076] CR2: 00007f0b5f91f158 CR3: 0000000058286000 CR4: 00000000003506e0 [ 171.798481][ T7076] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.807679][ T7076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.816521][ T7076] Call Trace: [ 171.820226][ T7076] [ 171.823375][ T7076] ? ext4_xattr_block_csum+0x560/0x560 [ 171.829851][ T7076] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 171.835404][ T7076] ? lock_chain_count+0x20/0x20 [ 171.841631][ T7076] ext4_xattr_set_entry+0xed9/0x3ea0 [ 171.847329][ T7076] ? lockdep_hardirqs_on+0x94/0x140 [ 171.854504][ T7076] ? kfree+0xef/0x2a0 [ 171.858896][ T7076] ? ext4_xattr_block_set+0xd99/0x2d20 [ 171.864744][ T7076] ? ext4_xattr_ibody_set+0x330/0x330 [ 171.870567][ T7076] ? ext4_get_inode_loc+0x120/0x120 [ 171.875904][ T7076] ext4_xattr_ibody_set+0x112/0x330 [ 171.881650][ T7076] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 171.888081][ T7076] __ext4_expand_extra_isize+0x301/0x3e0 [ 171.894039][ T7076] __ext4_mark_inode_dirty+0x469/0x700 [ 171.900045][ T7076] ext4_evict_inode+0xa8d/0x1090 [ 171.905511][ T7076] ? _raw_spin_unlock+0x24/0x40 [ 171.911244][ T7076] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 171.917171][ T7076] ? do_raw_spin_unlock+0x11d/0x230 [ 171.922599][ T7076] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 171.928721][ T7076] evict+0x4c9/0x8d0 [ 171.932629][ T7076] ? proc_nr_inodes+0x320/0x320 [ 171.937613][ T7076] ? do_raw_spin_unlock+0x11d/0x230 [ 171.942858][ T7076] ? _raw_spin_unlock+0x24/0x40 [ 171.949379][ T7076] ? iput+0x706/0x8a0 [ 171.953428][ T7076] ext4_orphan_cleanup+0xad2/0x1320 [ 171.959518][ T7076] ? ext4_orphan_del+0xbf0/0xbf0 [ 171.964985][ T7076] ? errseq_check_and_advance+0x62/0x120 [ 171.970718][ T7076] ext4_fill_super+0x8e25/0x95a0 [ 171.975982][ T7076] ? ext4_mount+0x40/0x40 [ 171.980958][ T7076] ? set_blocksize+0x1f3/0x370 [ 171.986274][ T7076] ? sb_set_blocksize+0xa5/0xe0 [ 171.992078][ T7076] mount_bdev+0x287/0x3c0 [ 171.997049][ T7076] ? ext4_mount+0x40/0x40 [ 172.001779][ T7076] legacy_get_tree+0xe6/0x180 [ 172.006801][ T7076] ? ext4_errno_to_code+0x160/0x160 [ 172.012663][ T7076] vfs_get_tree+0x88/0x270 [ 172.017307][ T7076] do_new_mount+0x24a/0xa40 [ 172.022437][ T7076] __se_sys_mount+0x2e3/0x3d0 [ 172.027813][ T7076] ? __x64_sys_mount+0xc0/0xc0 [ 172.032934][ T7076] ? lockdep_hardirqs_on+0x94/0x140 [ 172.039021][ T7076] ? __x64_sys_mount+0x1c/0xc0 [ 172.044254][ T7076] do_syscall_64+0x4c/0xa0 [ 172.049068][ T7076] ? clear_bhb_loop+0x30/0x80 [ 172.054116][ T7076] ? clear_bhb_loop+0x30/0x80 [ 172.060334][ T7076] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.066613][ T7076] RIP: 0033:0x7fb0ac7cca8a [ 172.071323][ T7076] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.091838][ T7076] RSP: 002b:00007fb0aaa03e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.100611][ T7076] RAX: ffffffffffffffda RBX: 00007fb0aaa03ee0 RCX: 00007fb0ac7cca8a [ 172.109597][ T7076] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fb0aaa03ea0 [ 172.119395][ T7076] RBP: 0000200000000180 R08: 00007fb0aaa03ee0 R09: 0000000000000000 [ 172.128454][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 172.137147][ T7076] R13: 00007fb0aaa03ea0 R14: 000000000000047a R15: 00002000000001c0 [ 172.146235][ T7076] [ 172.149817][ T7076] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.158120][ T7076] CPU: 1 PID: 7076 Comm: syz.4.947 Not tainted syzkaller #0 [ 172.167068][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.178611][ T7076] Call Trace: [ 172.182252][ T7076] [ 172.185436][ T7076] dump_stack_lvl+0x188/0x250 [ 172.190608][ T7076] ? show_regs_print_info+0x20/0x20 [ 172.196284][ T7076] ? load_image+0x400/0x400 [ 172.201167][ T7076] panic+0x2e5/0x810 [ 172.205080][ T7076] ? bpf_jit_dump+0xd0/0xd0 [ 172.209808][ T7076] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 172.216939][ T7076] __warn+0x248/0x2b0 [ 172.221447][ T7076] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 172.227565][ T7076] report_bug+0x1b7/0x2e0 [ 172.231932][ T7076] handle_bug+0x3a/0x70 [ 172.236228][ T7076] exc_invalid_op+0x16/0x40 [ 172.240919][ T7076] asm_exc_invalid_op+0x16/0x20 [ 172.246217][ T7076] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 172.253181][ T7076] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 1a e6 a1 ff 49 8b 37 48 c7 c7 40 9b 3d 8a 89 da e8 f9 32 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 43 22 a0 07 [ 172.273863][ T7076] RSP: 0018:ffffc9000330f160 EFLAGS: 00010246 [ 172.280899][ T7076] RAX: 3ebc70058cd6cc00 RBX: 0000000000000000 RCX: 0000000000080000 [ 172.289234][ T7076] RDX: ffffc9000eceb000 RSI: 0000000000023288 RDI: 0000000000023289 [ 172.297808][ T7076] RBP: ffffc9000330f250 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 172.306170][ T7076] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff888062e72a80 [ 172.314532][ T7076] R13: 1ffff1100c5ce58f R14: dffffc0000000000 R15: ffff888062e72ac0 [ 172.323436][ T7076] ? ext4_xattr_block_csum+0x560/0x560 [ 172.329016][ T7076] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 172.334846][ T7076] ? lock_chain_count+0x20/0x20 [ 172.339992][ T7076] ext4_xattr_set_entry+0xed9/0x3ea0 [ 172.345546][ T7076] ? lockdep_hardirqs_on+0x94/0x140 [ 172.351277][ T7076] ? kfree+0xef/0x2a0 [ 172.355984][ T7076] ? ext4_xattr_block_set+0xd99/0x2d20 [ 172.361842][ T7076] ? ext4_xattr_ibody_set+0x330/0x330 [ 172.368452][ T7076] ? ext4_get_inode_loc+0x120/0x120 [ 172.375233][ T7076] ext4_xattr_ibody_set+0x112/0x330 [ 172.380738][ T7076] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 172.387015][ T7076] __ext4_expand_extra_isize+0x301/0x3e0 [ 172.392844][ T7076] __ext4_mark_inode_dirty+0x469/0x700 [ 172.398397][ T7076] ext4_evict_inode+0xa8d/0x1090 [ 172.403815][ T7076] ? _raw_spin_unlock+0x24/0x40 [ 172.408768][ T7076] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 172.414872][ T7076] ? do_raw_spin_unlock+0x11d/0x230 [ 172.420346][ T7076] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 172.426659][ T7076] evict+0x4c9/0x8d0 [ 172.430754][ T7076] ? proc_nr_inodes+0x320/0x320 [ 172.435713][ T7076] ? do_raw_spin_unlock+0x11d/0x230 [ 172.441102][ T7076] ? _raw_spin_unlock+0x24/0x40 [ 172.446332][ T7076] ? iput+0x706/0x8a0 [ 172.450805][ T7076] ext4_orphan_cleanup+0xad2/0x1320 [ 172.456295][ T7076] ? ext4_orphan_del+0xbf0/0xbf0 [ 172.461430][ T7076] ? errseq_check_and_advance+0x62/0x120 [ 172.467456][ T7076] ext4_fill_super+0x8e25/0x95a0 [ 172.473815][ T7076] ? ext4_mount+0x40/0x40 [ 172.479009][ T7076] ? set_blocksize+0x1f3/0x370 [ 172.484407][ T7076] ? sb_set_blocksize+0xa5/0xe0 [ 172.489707][ T7076] mount_bdev+0x287/0x3c0 [ 172.494588][ T7076] ? ext4_mount+0x40/0x40 [ 172.499306][ T7076] legacy_get_tree+0xe6/0x180 [ 172.504167][ T7076] ? ext4_errno_to_code+0x160/0x160 [ 172.510450][ T7076] vfs_get_tree+0x88/0x270 [ 172.515551][ T7076] do_new_mount+0x24a/0xa40 [ 172.520382][ T7076] __se_sys_mount+0x2e3/0x3d0 [ 172.525663][ T7076] ? __x64_sys_mount+0xc0/0xc0 [ 172.530552][ T7076] ? lockdep_hardirqs_on+0x94/0x140 [ 172.536100][ T7076] ? __x64_sys_mount+0x1c/0xc0 [ 172.541320][ T7076] do_syscall_64+0x4c/0xa0 [ 172.545772][ T7076] ? clear_bhb_loop+0x30/0x80 [ 172.550736][ T7076] ? clear_bhb_loop+0x30/0x80 [ 172.556067][ T7076] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.562142][ T7076] RIP: 0033:0x7fb0ac7cca8a [ 172.566953][ T7076] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.587591][ T7076] RSP: 002b:00007fb0aaa03e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.596630][ T7076] RAX: ffffffffffffffda RBX: 00007fb0aaa03ee0 RCX: 00007fb0ac7cca8a [ 172.604865][ T7076] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fb0aaa03ea0 [ 172.612932][ T7076] RBP: 0000200000000180 R08: 00007fb0aaa03ee0 R09: 0000000000000000 [ 172.621099][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 172.629457][ T7076] R13: 00007fb0aaa03ea0 R14: 000000000000047a R15: 00002000000001c0 [ 172.637992][ T7076] [ 172.641983][ T7076] Kernel Offset: disabled [ 172.646833][ T7076] Rebooting in 86400 seconds..