last executing test programs: 4.273773292s ago: executing program 2 (id=320): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr1, 0x9378, 0x8, 0xc0000}) accept(r2, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000005c0)=0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x3000000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x379, &(0x7f0000000a00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_destroy(0x0) 1.064928068s ago: executing program 1 (id=361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, 0x10001, 0x40, 0x2, 0x1, 0x0, 0x0, 0x8}) 910.673838ms ago: executing program 3 (id=362): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0xf1c, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x40000, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_emit_ethernet(0x4a, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe801e000000000000000000000000bbfe8000000000000000000000000000aa2b"], 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x1c) 910.390788ms ago: executing program 4 (id=363): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fallocate(r0, 0x20, 0x0, 0x8000) 862.146409ms ago: executing program 0 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) 661.929308ms ago: executing program 1 (id=365): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@cb_func], &(0x7f0000000140)='syzkaller\x00', 0xa, 0xff, &(0x7f0000000340)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000200), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa6d7, @void, @value}, 0x94) 661.663848ms ago: executing program 2 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x800}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 462.650889ms ago: executing program 4 (id=367): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r1, 0x0}]) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 434.458099ms ago: executing program 2 (id=368): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000000)='./file1\x00') 370.010689ms ago: executing program 1 (id=369): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000015000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 187.006869ms ago: executing program 0 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 176.508599ms ago: executing program 1 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40485404, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}}, 0xc000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 707.63µs ago: executing program 0 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0x1, 0x4}}}}]}, 0x44}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x20}, {0x4}}]}, 0x30}}, 0x0) 0s ago: executing program 4 (id=373): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r4) kernel console output (not intermixed with test programs): ngth: 249 > 1 [ 67.531530][ T4260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.538283][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.545231][ T4260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.551552][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.566169][ T4260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.566990][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.573719][ T4260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.582161][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.588065][ T4260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.595072][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.609630][ T4260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.609831][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.617414][ T4260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.624984][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.631236][ T4260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.638578][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.644822][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.667831][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.675476][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.682744][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.690471][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.697964][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.698945][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.714948][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.122232][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 68.178386][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 68.221480][ T4258] chnl_net:caif_netlink_parms(): no params data found [ 68.280187][ T4261] chnl_net:caif_netlink_parms(): no params data found [ 68.348002][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.355244][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.363542][ T4249] device bridge_slave_0 entered promiscuous mode [ 68.376016][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.383105][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.391415][ T4249] device bridge_slave_1 entered promiscuous mode [ 68.410815][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.418081][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.426458][ T4251] device bridge_slave_0 entered promiscuous mode [ 68.442972][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 68.463548][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.470771][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.479012][ T4251] device bridge_slave_1 entered promiscuous mode [ 68.528749][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.547389][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.565302][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.588232][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.597875][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.605223][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.613051][ T4258] device bridge_slave_0 entered promiscuous mode [ 68.647570][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.654866][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.662692][ T4258] device bridge_slave_1 entered promiscuous mode [ 68.714296][ T4251] team0: Port device team_slave_0 added [ 68.720417][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.727727][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.736011][ T4261] device bridge_slave_0 entered promiscuous mode [ 68.745639][ T4249] team0: Port device team_slave_0 added [ 68.751597][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.758812][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.767244][ T4261] device bridge_slave_1 entered promiscuous mode [ 68.791446][ T4251] team0: Port device team_slave_1 added [ 68.806950][ T4249] team0: Port device team_slave_1 added [ 68.830877][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.873188][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.880517][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.888695][ T4250] device bridge_slave_0 entered promiscuous mode [ 68.898727][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.908740][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.915888][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.942224][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.956225][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.963186][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.989250][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.000871][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.008024][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.033997][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.047255][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.060661][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.070348][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.077803][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.085918][ T4250] device bridge_slave_1 entered promiscuous mode [ 69.105647][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.112607][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.138737][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.182279][ T4258] team0: Port device team_slave_0 added [ 69.204379][ T4261] team0: Port device team_slave_0 added [ 69.219058][ T4258] team0: Port device team_slave_1 added [ 69.251486][ T4261] team0: Port device team_slave_1 added [ 69.259083][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.278003][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.285161][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.311144][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.328850][ T4251] device hsr_slave_0 entered promiscuous mode [ 69.336071][ T4251] device hsr_slave_1 entered promiscuous mode [ 69.352744][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.378352][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.385576][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.411560][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.444193][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.451163][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.477342][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.512487][ T4250] team0: Port device team_slave_0 added [ 69.519022][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.526498][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.553129][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.568092][ T4249] device hsr_slave_0 entered promiscuous mode [ 69.575357][ T4249] device hsr_slave_1 entered promiscuous mode [ 69.581978][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.589920][ T4249] Cannot create hsr debugfs directory [ 69.611735][ T4250] team0: Port device team_slave_1 added [ 69.662508][ T4258] device hsr_slave_0 entered promiscuous mode [ 69.669915][ T4258] device hsr_slave_1 entered promiscuous mode [ 69.676653][ T4258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.684267][ T4258] Cannot create hsr debugfs directory [ 69.694815][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 69.715289][ T4261] device hsr_slave_0 entered promiscuous mode [ 69.722208][ T4261] device hsr_slave_1 entered promiscuous mode [ 69.729153][ T4261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.737090][ T4261] Cannot create hsr debugfs directory [ 69.756839][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.763816][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.789883][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 69.794099][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 69.802284][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 69.802408][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 69.815147][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.831511][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.838596][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.864870][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.023310][ T4250] device hsr_slave_0 entered promiscuous mode [ 70.030058][ T4250] device hsr_slave_1 entered promiscuous mode [ 70.037191][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.044826][ T4250] Cannot create hsr debugfs directory [ 70.229539][ T4251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.259945][ T4251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.275902][ T4251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.285193][ T4251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.314990][ T4258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.326199][ T4258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.349885][ T4258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.359290][ T4258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.425119][ T4249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.436178][ T4249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.462461][ T4249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.490594][ T4249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.561359][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.583464][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.606253][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.616635][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.634867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.643672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.656885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.665041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.673120][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.689315][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.702354][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.718346][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.774520][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.783632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.793198][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.800672][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.810119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.819193][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.829479][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.836648][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.850438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.858555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.866911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.875692][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.884557][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.891659][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.899592][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.913843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.922872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.931777][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.938902][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.955846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.967362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.977834][ T4261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.990879][ T4261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.001734][ T4261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.024686][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.033446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.042614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.061453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.069842][ T4261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.082284][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.092637][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.102981][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.118289][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.128077][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.139840][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.146422][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.171000][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.184779][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.193571][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.202293][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.212062][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.221134][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.230525][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.250319][ T4258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.262408][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.277843][ T4251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.289114][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.297752][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.307238][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.318276][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.326929][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.363194][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.372460][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.411822][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.451762][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.475114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.484642][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.491757][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.540210][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.564226][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.572606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.584881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.593477][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.600679][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.610288][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.621787][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.635862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.651386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.661902][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.677874][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.732880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.741787][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.750493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.760364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.769022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.778608][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.784235][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 71.787702][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.806098][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.821351][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.851574][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.858744][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 71.864814][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 71.864910][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 71.872267][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 71.892251][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.901860][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.910627][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.917773][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.926770][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.935286][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.942819][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.980116][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.990529][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.003468][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.012249][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.019403][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.027672][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.038238][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.052420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.060310][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.072724][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.082625][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.092320][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.130054][ T4261] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.148606][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.181887][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.193048][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.202383][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.210961][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.220361][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.229988][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.242182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.251734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.260791][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.267953][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.276875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.308082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.317185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.329337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.339382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.348650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.357683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.366911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.376138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.384973][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.392029][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.401354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.409390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.422351][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.434385][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.446868][ T4251] device veth0_vlan entered promiscuous mode [ 72.466430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.475127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.483412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.506241][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.525032][ T4251] device veth1_vlan entered promiscuous mode [ 72.539982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.552546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.561991][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.570809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.609824][ T4258] device veth0_vlan entered promiscuous mode [ 72.630564][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.639400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.657935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.675287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.690540][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.699721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.713640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.722296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.730851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.739508][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.753475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.763626][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.781227][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.788839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.800855][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.810382][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.828204][ T4258] device veth1_vlan entered promiscuous mode [ 72.837998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.848195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.856968][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.880299][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.899110][ T4251] device veth0_macvtap entered promiscuous mode [ 72.909095][ T4261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.921791][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.929938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.939062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.947603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.957182][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.986764][ T4251] device veth1_macvtap entered promiscuous mode [ 73.019494][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.030075][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.040293][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.056333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.070270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.089761][ T4249] device veth0_vlan entered promiscuous mode [ 73.122597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.131547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.141328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.151962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.160687][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.169343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.178840][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.187875][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.198057][ T4258] device veth0_macvtap entered promiscuous mode [ 73.212746][ T4250] device veth0_vlan entered promiscuous mode [ 73.228565][ T4249] device veth1_vlan entered promiscuous mode [ 73.243636][ T4258] device veth1_macvtap entered promiscuous mode [ 73.254808][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.278232][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.286816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.302251][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.322095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.330586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.342167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.365575][ T4250] device veth1_vlan entered promiscuous mode [ 73.383017][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.391357][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.401423][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.410212][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.419512][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.441640][ T4249] device veth0_macvtap entered promiscuous mode [ 73.463142][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.473147][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.483818][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.492882][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.502984][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.519374][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.532700][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.557698][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.567969][ T4249] device veth1_macvtap entered promiscuous mode [ 73.576508][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.590357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.599163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.607094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.615081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.623755][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.649014][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.659915][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.673406][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.690622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.700957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.711996][ T4258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.724487][ T4258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.733227][ T4258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.743673][ T4258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.775391][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.803839][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.814414][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.825714][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.838335][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.849303][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.861942][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 73.868487][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.878461][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.889135][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.900603][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.922836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.932424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.938768][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 73.943050][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 73.946649][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 73.952615][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 73.960342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.973514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.000461][ T4249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.019798][ T4249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.030366][ T4249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.043636][ T4249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.062730][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.080623][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.095895][ T4250] device veth0_macvtap entered promiscuous mode [ 74.208388][ T4250] device veth1_macvtap entered promiscuous mode [ 74.221653][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.230766][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.239803][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.250243][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.267591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.276702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.311909][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.312108][ T4261] device veth0_vlan entered promiscuous mode [ 74.326307][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.338432][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.346746][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.355968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.383861][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.395454][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.406537][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.418869][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.429043][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.440266][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.451905][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.473703][ T4261] device veth1_vlan entered promiscuous mode [ 74.481782][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.487966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.499638][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.511010][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.519844][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.531927][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.542943][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.553111][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.564806][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.576296][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.587028][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.598761][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.640045][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.644553][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.656509][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.671066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.680807][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.690940][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.693144][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.698974][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.715810][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.724860][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.733572][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.769662][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.803281][ T4261] device veth0_macvtap entered promiscuous mode [ 74.842025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.851210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.863528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.874856][ T4261] device veth1_macvtap entered promiscuous mode [ 74.931324][ T4331] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.955503][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.963457][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.001074][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.014767][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.024962][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.035913][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.046545][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.058643][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.068688][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.079444][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.091471][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.117310][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.128017][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.150990][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.164292][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.178954][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.191013][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.208603][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.255924][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.343002][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.369283][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.388983][ T4336] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 75.436499][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.496650][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.550868][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.598183][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.632637][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.644922][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.662757][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.699650][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.749146][ T4261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.756831][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.780080][ T4261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.789533][ T4261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.803107][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.809909][ T4261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.848531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.934145][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 76.015185][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 76.021303][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 76.057717][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 76.063826][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 76.110782][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.364896][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.534892][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.917304][ T4296] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.003111][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.056813][ T4352] binder_alloc: 4351: pid 4351 spamming oneway? 1 buffers allocated for a total size of 4096 [ 77.070471][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.088656][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.097243][ T4352] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 77.109778][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.139479][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.182177][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.204358][ T4296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.237540][ T4296] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.248526][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.293439][ T4358] loop1: detected capacity change from 0 to 2048 [ 77.379072][ T4358] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.456590][ T4296] usb 4-1: config 0 descriptor?? [ 77.491460][ T4353] bond1 (unregistering): Released all slaves [ 77.513107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.212092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.313447][ T4367] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.313558][ T4367] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.313590][ T4367] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.313622][ T4367] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.313716][ T4367] device vxlan0 entered promiscuous mode [ 78.556674][ T4296] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 78.582140][ T4296] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 78.672911][ T4376] loop2: detected capacity change from 0 to 512 [ 78.770593][ T4375] loop4: detected capacity change from 0 to 4096 [ 78.792968][ T4376] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.793146][ T4372] loop0: detected capacity change from 0 to 4096 [ 78.839071][ T4376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.877086][ T4372] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.882750][ T4375] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.940239][ T4376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 78.951510][ T4376] System zones: 1-12 [ 78.990260][ T4376] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.032011][ T4372] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 79.043013][ T4375] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 79.102750][ T4376] EXT4-fs (loop2): 1 truncate cleaned up [ 79.112304][ T4376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.154024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 79.162390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 79.184183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 79.375229][ T27] audit: type=1800 audit(1733696180.547:2): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 79.414087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 79.422423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 79.433949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.442241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.450549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.458858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.474926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 79.758409][ T48] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 80.144117][ T7] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 80.424226][ T7] usb 4-1: device descriptor read/64, error -32 [ 80.676948][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 81.762457][ T22] cfg80211: failed to load regulatory.db [ 81.998007][ T4297] usb 4-1: USB disconnect, device number 2 [ 82.068634][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 82.104216][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 82.223185][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 83.052197][ T4411] loop0: detected capacity change from 0 to 40427 [ 83.940208][ T4411] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 83.953349][ T4411] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 83.991852][ T4411] F2FS-fs (loop0): invalid crc value [ 84.247473][ T4411] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.311681][ T4411] F2FS-fs (loop0): Start checkpoint disabled! [ 84.563519][ T4419] loop3: detected capacity change from 0 to 256 [ 86.319821][ T4421] loop2: detected capacity change from 0 to 2048 [ 86.490611][ T4421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.832679][ T4434] process 'syz.1.20' launched './file0' with NULL argv: empty string added [ 88.870585][ T4443] loop3: detected capacity change from 0 to 4096 [ 89.084930][ T4443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.624601][ T4448] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 474: padding at end of block bitmap is not set [ 90.281334][ T4443] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 90.918232][ T4465] loop2: detected capacity change from 0 to 4096 [ 91.011156][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 91.025509][ T4465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.058828][ T4465] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 92.953017][ T4483] loop3: detected capacity change from 0 to 2048 [ 93.021130][ T4483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.079223][ T4486] loop0: detected capacity change from 0 to 512 [ 93.150087][ T4486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.343300][ T4486] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.28: bg 0: block 248: padding at end of block bitmap is not set [ 93.374223][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 93.683758][ T4486] Quota error (device loop0): write_blk: dquota write failed [ 93.709934][ T4486] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.724678][ T4486] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.28: Failed to acquire dquot type 1 [ 94.801527][ T4486] EXT4-fs (loop0): 1 truncate cleaned up [ 94.830187][ T4486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.901643][ T4486] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.095329][ T4507] device lo entered promiscuous mode [ 95.158531][ T4504] device lo left promiscuous mode [ 95.287012][ T4486] EXT4-fs: Cannot change quota options when quota turned on [ 95.919306][ T4486] syz.0.28 (4486) used greatest stack depth: 19808 bytes left [ 95.964953][ T4514] Bluetooth: MGMT ver 1.22 [ 96.144025][ T4305] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.146189][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 96.489709][ T4526] loop1: detected capacity change from 0 to 4096 [ 96.499054][ T4305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.524146][ T4305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.537943][ T4305] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 96.700500][ T4526] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.729956][ T4305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.741906][ T4305] usb 3-1: config 0 descriptor?? [ 96.801226][ T4526] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 97.643262][ T4508] loop4: detected capacity change from 0 to 32768 [ 98.310649][ T4305] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 98.391357][ T4305] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 98.621362][ T4305] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 99.733977][ T126] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 99.765380][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 99.871355][ T4363] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.921854][ T4363] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.977331][ T4363] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 100.356010][ T4562] loop4: detected capacity change from 0 to 2048 [ 100.438170][ T4567] loop0: detected capacity change from 0 to 2048 [ 100.439396][ T4562] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.575604][ T4305] usb 3-1: USB disconnect, device number 2 [ 100.625677][ T4305] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 100.685155][ T4573] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.716193][ T4570] loop2: detected capacity change from 0 to 4096 [ 100.759068][ T4570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.993593][ T4570] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 101.036548][ T4579] binder: transaction release 16 bad handle 1, ret = -22 [ 101.541676][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 101.770187][ T4587] loop1: detected capacity change from 0 to 128 [ 101.815274][ T4584] loop3: detected capacity change from 0 to 512 [ 101.846030][ T4587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.862208][ T4587] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.882749][ T4584] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 101.902318][ T4584] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.44: invalid indirect mapped block 1 (level 1) [ 101.918539][ T4584] EXT4-fs (loop3): 1 truncate cleaned up [ 101.924318][ T4584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.107714][ T4581] team0: Port device team_slave_1 removed [ 102.133741][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 102.326290][ T46] Bluetooth: Short BCSP packet [ 103.021668][ T46] Bluetooth: Error in BCSP hdr checksum [ 103.041021][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 103.165406][ T4603] loop3: detected capacity change from 0 to 4096 [ 103.198596][ T11] Bluetooth: Error in BCSP hdr checksum [ 103.202659][ T4573] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 103.224820][ T4603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.266849][ T4603] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 103.277432][ T4573] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 103.309216][ T4573] Remounting filesystem read-only [ 103.327386][ T4369] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 103.348398][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 103.370576][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aae6800: rx timeout, send abort [ 103.516552][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805aae6800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.517792][ T4369] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 103.544818][ T4369] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 103.552246][ T4369] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 103.570686][ T4589] Bluetooth: Error in BCSP hdr checksum [ 103.661288][ T4613] loop2: detected capacity change from 0 to 256 [ 105.423109][ T4253] Bluetooth: hci5: command 0x1003 tx timeout [ 105.423167][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 105.486369][ T4369] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 105.498366][ T4369] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 105.507910][ T4369] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.519095][ T4369] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.530123][ T4369] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 105.539736][ T4369] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.549446][ T4369] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 105.557516][ T4369] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 105.569680][ T4369] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.581089][ T4369] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.815827][ T4369] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.854875][ T4250] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 105.865036][ T4250] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 105.881779][ T4250] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 105.895438][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.904783][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.989864][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.328481][ T4296] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 106.382014][ T4296] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 106.398297][ T4296] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 106.459190][ T4621] loop0: detected capacity change from 0 to 256 [ 106.571686][ T4621] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 106.599370][ T4624] loop1: detected capacity change from 0 to 512 [ 106.734597][ T4624] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 106.741143][ T4624] EXT4-fs (loop1): mount failed [ 106.942903][ T4632] trusted_key: encrypted_key: master key parameter 'mngw$uR' is invalid [ 107.532848][ T4631] loop4: detected capacity change from 0 to 4096 [ 107.645943][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 107.696034][ T4631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.724816][ T4631] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 108.640274][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 108.698847][ T4647] loop0: detected capacity change from 0 to 128 [ 108.733681][ T4647] FAT-fs (loop0): Unrecognized mount option "obj_type=)" or missing value [ 108.874761][ T4647] netlink: 'syz.0.58': attribute type 3 has an invalid length. [ 108.882385][ T4647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.58'. [ 109.157731][ T4624] loop1: detected capacity change from 0 to 32768 [ 109.230013][ T4624] ======================================================= [ 109.230013][ T4624] WARNING: The mand mount option has been deprecated and [ 109.230013][ T4624] and is ignored by this kernel. Remove the mand [ 109.230013][ T4624] option from the mount to silence this warning. [ 109.230013][ T4624] ======================================================= [ 109.249762][ T4658] loop4: detected capacity change from 0 to 4096 [ 109.279490][ T4624] XFS: ikeep mount option is deprecated. [ 109.472211][ T4670] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.481213][ T4670] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.490051][ T4670] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.498784][ T4670] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.508113][ T4670] device vxlan0 entered promiscuous mode [ 110.049493][ T4624] XFS: noikeep mount option is deprecated. [ 110.071975][ T4624] xfs: Unknown parameter 'fowner' [ 110.090063][ T4672] loop0: detected capacity change from 0 to 2048 [ 110.107040][ T4658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.194427][ T4658] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 110.244365][ T4672] Alternate GPT is invalid, using primary GPT. [ 110.436251][ T4678] loop3: detected capacity change from 0 to 256 [ 110.439733][ T4672] loop0: p2 p3 p7 [ 110.638578][ T4678] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 111.199564][ T4687] trusted_key: encrypted_key: master key parameter 'mngw$uR' is invalid [ 112.945128][ T4691] SET target dimension over the limit! [ 113.527613][ T4597] udevd[4597]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 113.540074][ T4599] udevd[4599]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 113.605553][ T4345] udevd[4345]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 113.656667][ T4699] loop0: detected capacity change from 0 to 16 [ 113.732885][ T4699] erofs: (device loop0): mounted with root inode @ nid 36. [ 113.817962][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 113.915899][ T4706] vivid-000: disconnect [ 114.089341][ T4706] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 114.100392][ T4706] syz.0.69: attempt to access beyond end of device [ 114.100392][ T4706] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 114.722340][ T4698] vivid-000: reconnect [ 115.386129][ T4713] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.394920][ T4713] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.403632][ T4713] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.412406][ T4713] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.421561][ T4713] device vxlan0 entered promiscuous mode [ 117.470190][ T4728] loop0: detected capacity change from 0 to 4096 [ 117.505923][ T4735] loop4: detected capacity change from 0 to 256 [ 117.534344][ T4728] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 117.582447][ T4735] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 117.652708][ T4728] ntfs3: loop0: Failed to load $UpCase. [ 117.714550][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 117.723485][ T4737] device hsr0 entered promiscuous mode [ 117.736223][ T4737] FAULT_INJECTION: forcing a failure. [ 117.736223][ T4737] name failslab, interval 1, probability 0, space 0, times 1 [ 117.773874][ T4737] CPU: 0 PID: 4737 Comm: syz.1.80 Not tainted 6.1.119-syzkaller #0 [ 117.781914][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.792000][ T4737] Call Trace: [ 117.795330][ T4737] [ 117.798290][ T4737] dump_stack_lvl+0x1e3/0x2cb [ 117.803028][ T4737] ? nf_tcp_handle_invalid+0x642/0x642 [ 117.808523][ T4737] ? panic+0x764/0x764 [ 117.812620][ T4737] ? __might_sleep+0xb0/0xb0 [ 117.817243][ T4737] should_fail_ex+0x3a6/0x4d0 [ 117.821955][ T4737] should_failslab+0x5/0x20 [ 117.826487][ T4737] slab_pre_alloc_hook+0x59/0x300 [ 117.831540][ T4737] ? __kernel_text_address+0x9/0x40 [ 117.836774][ T4737] ? rtnl_newlink+0xe6/0x2050 [ 117.841483][ T4737] __kmem_cache_alloc_node+0x47/0x260 [ 117.846897][ T4737] ? rtnl_newlink+0xe6/0x2050 [ 117.851607][ T4737] kmalloc_trace+0x26/0xe0 [ 117.856071][ T4737] rtnl_newlink+0xe6/0x2050 [ 117.860634][ T4737] ? read_lock_is_recursive+0x10/0x10 [ 117.866085][ T4737] ? __mutex_trylock_common+0x17e/0x2e0 [ 117.871669][ T4737] ? __might_sleep+0xb0/0xb0 [ 117.876295][ T4737] ? rtnl_setlink+0x560/0x560 [ 117.881024][ T4737] ? trace_raw_output_contention_end+0xd0/0xd0 [ 117.887208][ T4737] ? rcu_is_watching+0x11/0xb0 [ 117.891988][ T4737] ? trace_contention_end+0x61/0x170 [ 117.897302][ T4737] ? __mutex_lock+0x2f7/0xd80 [ 117.902024][ T4737] ? rtnetlink_rcv_msg+0x7c1/0xff0 [ 117.907175][ T4737] ? mutex_lock_nested+0x10/0x10 [ 117.912151][ T4737] ? rtnl_setlink+0x560/0x560 [ 117.916863][ T4737] rtnetlink_rcv_msg+0x818/0xff0 [ 117.922028][ T4737] ? rtnetlink_bind+0x80/0x80 [ 117.926754][ T4737] ? __local_bh_enable_ip+0x164/0x1f0 [ 117.932179][ T4737] ? __dev_queue_xmit+0x2d6/0x3d50 [ 117.937318][ T4737] ? _local_bh_enable+0xa0/0xa0 [ 117.942213][ T4737] ? __dev_queue_xmit+0x2d6/0x3d50 [ 117.947371][ T4737] ? __dev_queue_xmit+0x173c/0x3d50 [ 117.952606][ T4737] ? __dev_queue_xmit+0x2d6/0x3d50 [ 117.957748][ T4737] ? netdev_core_pick_tx+0x320/0x320 [ 117.963083][ T4737] ? ref_tracker_free+0x638/0x7d0 [ 117.968142][ T4737] ? memcpy+0x3c/0x60 [ 117.972156][ T4737] ? refcount_inc+0x80/0x80 [ 117.976680][ T4737] ? __copy_skb_header+0x47b/0x600 [ 117.981875][ T4737] netlink_rcv_skb+0x1cd/0x410 [ 117.986716][ T4737] ? rtnetlink_bind+0x80/0x80 [ 117.991440][ T4737] ? netlink_ack+0x1290/0x1290 [ 117.993551][ T4720] loop3: detected capacity change from 0 to 32768 [ 117.996214][ T4737] ? __netlink_deliver_tap+0x73e/0x770 [ 117.996255][ T4737] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.008332][ T4720] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.73 (4720) [ 118.013337][ T4737] netlink_unicast+0x7d8/0x970 [ 118.030249][ T4737] ? netlink_detachskb+0x90/0x90 [ 118.035202][ T4737] ? __virt_addr_valid+0x45b/0x530 [ 118.040333][ T4737] ? __phys_addr_symbol+0x2b/0x70 [ 118.045385][ T4737] ? __check_object_size+0x4dd/0xa30 [ 118.050680][ T4737] ? bpf_lsm_netlink_send+0x5/0x10 [ 118.055802][ T4737] netlink_sendmsg+0xa26/0xd60 [ 118.060613][ T4737] ? netlink_getsockopt+0x580/0x580 [ 118.065831][ T4737] ? aa_sock_msg_perm+0x91/0x150 [ 118.070782][ T4737] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 118.076078][ T4737] ? security_socket_sendmsg+0x7d/0xa0 [ 118.081543][ T4737] ? netlink_getsockopt+0x580/0x580 [ 118.086749][ T4737] ____sys_sendmsg+0x5a5/0x8f0 [ 118.091528][ T4737] ? __sys_sendmsg_sock+0x30/0x30 [ 118.096568][ T4737] __sys_sendmsg+0x2a9/0x390 [ 118.101181][ T4737] ? ____sys_sendmsg+0x8f0/0x8f0 [ 118.106125][ T4737] ? vfs_write+0x6cf/0xbc0 [ 118.110566][ T4737] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 118.116569][ T4737] ? syscall_enter_from_user_mode+0x2e/0x230 [ 118.122553][ T4737] ? lockdep_hardirqs_on+0x94/0x130 [ 118.127769][ T4737] ? syscall_enter_from_user_mode+0x2e/0x230 [ 118.133757][ T4737] do_syscall_64+0x3b/0xb0 [ 118.138185][ T4737] ? clear_bhb_loop+0x45/0xa0 [ 118.142887][ T4737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.148877][ T4737] RIP: 0033:0x7fe704d7fed9 [ 118.153306][ T4737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.172942][ T4737] RSP: 002b:00007fe704bff058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.181376][ T4737] RAX: ffffffffffffffda RBX: 00007fe704f45fa0 RCX: 00007fe704d7fed9 [ 118.189450][ T4737] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000c [ 118.197423][ T4737] RBP: 00007fe704bff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 118.205392][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.213359][ T4737] R13: 0000000000000000 R14: 00007fe704f45fa0 R15: 00007fff21ef0468 [ 118.221352][ T4737] [ 118.255586][ T4739] FAULT_INJECTION: forcing a failure. [ 118.255586][ T4739] name failslab, interval 1, probability 0, space 0, times 1 [ 118.283993][ T4739] CPU: 1 PID: 4739 Comm: syz.2.79 Not tainted 6.1.119-syzkaller #0 [ 118.291960][ T4739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.302049][ T4739] Call Trace: [ 118.305361][ T4739] [ 118.308307][ T4739] dump_stack_lvl+0x1e3/0x2cb [ 118.313026][ T4739] ? nf_tcp_handle_invalid+0x642/0x642 [ 118.318526][ T4739] ? panic+0x764/0x764 [ 118.322623][ T4739] ? __might_sleep+0xb0/0xb0 [ 118.327239][ T4739] ? aa_get_newest_label+0xfb/0x6e0 [ 118.332463][ T4739] should_fail_ex+0x3a6/0x4d0 [ 118.337168][ T4739] should_failslab+0x5/0x20 [ 118.341704][ T4739] slab_pre_alloc_hook+0x59/0x300 [ 118.346776][ T4739] kmem_cache_alloc+0x4e/0x2d0 [ 118.351570][ T4739] ? skb_clone+0x1e5/0x360 [ 118.356028][ T4739] skb_clone+0x1e5/0x360 [ 118.360327][ T4739] nfnetlink_rcv+0x559/0x2600 [ 118.365036][ T4739] ? __local_bh_enable_ip+0x164/0x1f0 [ 118.370451][ T4739] ? lockdep_hardirqs_on+0x94/0x130 [ 118.375687][ T4739] ? __dev_queue_xmit+0x2d6/0x3d50 [ 118.380836][ T4739] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 118.386414][ T4739] ? netdev_core_pick_tx+0x320/0x320 [ 118.391737][ T4739] ? ref_tracker_free+0x638/0x7d0 [ 118.396777][ T4739] ? memcpy+0x3c/0x60 [ 118.400779][ T4739] ? refcount_inc+0x80/0x80 [ 118.405315][ T4739] ? __copy_skb_header+0x47b/0x600 [ 118.410478][ T4739] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.415718][ T4739] ? __lock_acquire+0x1f80/0x1f80 [ 118.420790][ T4739] ? __netlink_deliver_tap+0x73e/0x770 [ 118.426298][ T4739] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.431531][ T4739] netlink_unicast+0x7d8/0x970 [ 118.436355][ T4739] ? netlink_detachskb+0x90/0x90 [ 118.441324][ T4739] ? __virt_addr_valid+0x45b/0x530 [ 118.446488][ T4739] ? __phys_addr_symbol+0x2b/0x70 [ 118.451544][ T4739] ? __check_object_size+0x4dd/0xa30 [ 118.456855][ T4739] ? bpf_lsm_netlink_send+0x5/0x10 [ 118.462000][ T4739] netlink_sendmsg+0xa26/0xd60 [ 118.466809][ T4739] ? netlink_getsockopt+0x580/0x580 [ 118.472040][ T4739] ? aa_sock_msg_perm+0x91/0x150 [ 118.477004][ T4739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 118.482335][ T4739] ? security_socket_sendmsg+0x7d/0xa0 [ 118.487822][ T4739] ? netlink_getsockopt+0x580/0x580 [ 118.493054][ T4739] ____sys_sendmsg+0x5a5/0x8f0 [ 118.497859][ T4739] ? __sys_sendmsg_sock+0x30/0x30 [ 118.503038][ T4739] __sys_sendmsg+0x2a9/0x390 [ 118.507665][ T4739] ? ____sys_sendmsg+0x8f0/0x8f0 [ 118.512622][ T4739] ? vfs_write+0x6cf/0xbc0 [ 118.517089][ T4739] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 118.523109][ T4739] ? syscall_enter_from_user_mode+0x2e/0x230 [ 118.529109][ T4739] ? lockdep_hardirqs_on+0x94/0x130 [ 118.534343][ T4739] ? syscall_enter_from_user_mode+0x2e/0x230 [ 118.540350][ T4739] do_syscall_64+0x3b/0xb0 [ 118.544797][ T4739] ? clear_bhb_loop+0x45/0xa0 [ 118.549506][ T4739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.555422][ T4739] RIP: 0033:0x7f1d01f7fed9 [ 118.559896][ T4739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.579534][ T4739] RSP: 002b:00007f1d02d27058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.587987][ T4739] RAX: ffffffffffffffda RBX: 00007f1d02145fa0 RCX: 00007f1d01f7fed9 [ 118.595980][ T4739] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 118.603993][ T4739] RBP: 00007f1d02d270a0 R08: 0000000000000000 R09: 0000000000000000 [ 118.612000][ T4739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.620000][ T4739] R13: 0000000000000000 R14: 00007f1d02145fa0 R15: 00007ffcbd384588 [ 118.628035][ T4739] [ 118.634510][ T4740] trusted_key: encrypted_key: master key parameter 'mngw$uR' is invalid [ 118.933494][ T4720] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.944295][ T4720] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 118.954149][ T4720] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.993969][ T4720] BTRFS info (device loop3): use zstd compression, level 3 [ 119.014183][ T4720] BTRFS info (device loop3): using free space tree [ 119.252713][ T4754] Zero length message leads to an empty skb [ 119.355805][ T4720] BTRFS error (device loop3): open_ctree failed [ 121.993902][ C1] sched: RT throttling activated [ 122.546342][ T4799] loop2: detected capacity change from 0 to 256 [ 122.598125][ T4799] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 122.919151][ T4801] trusted_key: encrypted_key: master key parameter 'mngw$uR' is invalid [ 123.711443][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 123.721576][ T4805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.93'. [ 123.877182][ T4792] loop0: detected capacity change from 0 to 32768 [ 123.894722][ T4805] loop2: detected capacity change from 0 to 4096 [ 123.903037][ T4792] jfs: Unrecognized mount option "uid=Ee [ 123.903037][ T4792] k" or missing value [ 123.946861][ T4805] ntfs3: Unknown parameter '00000000000000000000006' [ 127.010628][ T4828] device vlan2 entered promiscuous mode [ 127.659445][ T4832] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.669295][ T4832] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.678168][ T4832] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.687579][ T4832] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.696414][ T4832] device vxlan0 entered promiscuous mode [ 128.030037][ T4839] loop1: detected capacity change from 0 to 4096 [ 128.169991][ T4839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.284047][ T4839] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 129.611053][ T4826] loop3: detected capacity change from 0 to 32768 [ 129.720701][ T4852] loop2: detected capacity change from 0 to 256 [ 129.810436][ T4852] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 130.115337][ T4858] trusted_key: encrypted_key: master key parameter 'mngw$uR' is invalid [ 130.880250][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 130.942404][ T4861] FAULT_INJECTION: forcing a failure. [ 130.942404][ T4861] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 130.984404][ T4861] CPU: 0 PID: 4861 Comm: syz.2.105 Not tainted 6.1.119-syzkaller #0 [ 130.992481][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.002558][ T4861] Call Trace: [ 131.005860][ T4861] [ 131.008813][ T4861] dump_stack_lvl+0x1e3/0x2cb [ 131.013550][ T4861] ? nf_tcp_handle_invalid+0x642/0x642 [ 131.019043][ T4861] ? panic+0x764/0x764 [ 131.023135][ T4861] ? kasan_set_track+0x60/0x70 [ 131.027944][ T4861] ? __kasan_kmalloc+0x97/0xb0 [ 131.032814][ T4861] ? rds_cong_get_maps+0x24/0xa0 [ 131.037807][ T4861] ? rds_conn_create_outgoing+0x3f/0x50 [ 131.043401][ T4861] should_fail_ex+0x3a6/0x4d0 [ 131.048139][ T4861] prepare_alloc_pages+0x1d9/0x5b0 [ 131.053281][ T4861] __alloc_pages+0x16a/0x770 [ 131.057879][ T4861] ? zone_statistics+0x160/0x160 [ 131.062830][ T4861] ? __init_waitqueue_head+0xaa/0x140 [ 131.068243][ T4861] get_zeroed_page+0x13/0x30 [ 131.072838][ T4861] rds_cong_from_addr+0xce/0x370 [ 131.077807][ T4861] ? rds_cong_get_maps+0x1b/0xa0 [ 131.082758][ T4861] rds_cong_get_maps+0x24/0xa0 [ 131.087532][ T4861] __rds_conn_create+0xa03/0x1f20 [ 131.092565][ T4861] ? __rds_conn_create+0x2d5/0x1f20 [ 131.097780][ T4861] ? rds_conn_create+0x50/0x50 [ 131.102562][ T4861] rds_conn_create_outgoing+0x3f/0x50 [ 131.107957][ T4861] rds_sendmsg+0x122a/0x2260 [ 131.112547][ T4861] ? __might_sleep+0xb0/0xb0 [ 131.117151][ T4861] ? rds_send_sndbuf_remove+0x230/0x230 [ 131.122701][ T4861] ? aa_sk_perm+0x92d/0xa60 [ 131.127212][ T4861] ? tomoyo_socket_bind_permission+0x330/0x330 [ 131.133374][ T4861] ? aa_af_perm+0x350/0x350 [ 131.137886][ T4861] ? __import_iovec+0x316/0x4c0 [ 131.142742][ T4861] ? __might_fault+0xa1/0x110 [ 131.147419][ T4861] ? aa_sock_msg_perm+0x91/0x150 [ 131.152365][ T4861] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 131.157658][ T4861] ? security_socket_sendmsg+0x7d/0xa0 [ 131.163119][ T4861] ? rds_send_sndbuf_remove+0x230/0x230 [ 131.168670][ T4861] ____sys_sendmsg+0x5a5/0x8f0 [ 131.173449][ T4861] ? __sys_sendmsg_sock+0x30/0x30 [ 131.178497][ T4861] __sys_sendmsg+0x2a9/0x390 [ 131.183105][ T4861] ? ____sys_sendmsg+0x8f0/0x8f0 [ 131.188153][ T4861] ? vfs_write+0x6cf/0xbc0 [ 131.192593][ T4861] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 131.198591][ T4861] ? syscall_enter_from_user_mode+0x2e/0x230 [ 131.204573][ T4861] ? lockdep_hardirqs_on+0x94/0x130 [ 131.209772][ T4861] ? syscall_enter_from_user_mode+0x2e/0x230 [ 131.215763][ T4861] do_syscall_64+0x3b/0xb0 [ 131.220204][ T4861] ? clear_bhb_loop+0x45/0xa0 [ 131.224890][ T4861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.230808][ T4861] RIP: 0033:0x7f1d01f7fed9 [ 131.235255][ T4861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.254969][ T4861] RSP: 002b:00007f1d02d27058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.263409][ T4861] RAX: ffffffffffffffda RBX: 00007f1d02145fa0 RCX: 00007f1d01f7fed9 [ 131.271392][ T4861] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000c [ 131.279398][ T4861] RBP: 00007f1d02d270a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.287376][ T4861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.295359][ T4861] R13: 0000000000000000 R14: 00007f1d02145fa0 R15: 00007ffcbd384588 [ 131.303343][ T4861] [ 132.198440][ T4868] loop2: detected capacity change from 0 to 2048 [ 132.309108][ T4868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.365685][ T4873] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 132.397206][ T4875] FAULT_INJECTION: forcing a failure. [ 132.397206][ T4875] name failslab, interval 1, probability 0, space 0, times 0 [ 132.410569][ T4875] CPU: 0 PID: 4875 Comm: syz.1.109 Not tainted 6.1.119-syzkaller #0 [ 132.418621][ T4875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.428712][ T4875] Call Trace: [ 132.432068][ T4875] [ 132.435019][ T4875] dump_stack_lvl+0x1e3/0x2cb [ 132.439738][ T4875] ? nf_tcp_handle_invalid+0x642/0x642 [ 132.445213][ T4875] ? panic+0x764/0x764 [ 132.449294][ T4875] ? memset+0x1f/0x40 [ 132.453281][ T4875] should_fail_ex+0x3a6/0x4d0 [ 132.457975][ T4875] should_failslab+0x5/0x20 [ 132.462483][ T4875] slab_pre_alloc_hook+0x59/0x300 [ 132.467520][ T4875] kmem_cache_alloc+0x4e/0x2d0 [ 132.472298][ T4875] ? security_inode_alloc+0x24/0x110 [ 132.477619][ T4875] security_inode_alloc+0x24/0x110 [ 132.482762][ T4875] inode_init_always+0x943/0xc70 [ 132.487794][ T4875] ? shmem_match+0x150/0x150 [ 132.492387][ T4875] new_inode_pseudo+0x94/0x1d0 [ 132.497176][ T4875] new_inode+0x25/0x1d0 [ 132.501337][ T4875] ? do_raw_spin_unlock+0x137/0x8a0 [ 132.506544][ T4875] shmem_get_inode+0x320/0xbd0 [ 132.511318][ T4875] __shmem_file_setup+0x109/0x290 [ 132.516343][ T4875] ? shmem_file_setup+0x13/0x30 [ 132.521199][ T4875] __se_sys_memfd_create+0x1d6/0x440 [ 132.526488][ T4875] do_syscall_64+0x3b/0xb0 [ 132.530905][ T4875] ? clear_bhb_loop+0x45/0xa0 [ 132.535584][ T4875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.541480][ T4875] RIP: 0033:0x7fe704d7fed9 [ 132.545911][ T4875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.565522][ T4875] RSP: 002b:00007fe704bfee38 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 132.573955][ T4875] RAX: ffffffffffffffda RBX: 000000000000446c RCX: 00007fe704d7fed9 [ 132.581960][ T4875] RDX: 00007fe704bfef10 RSI: 0000000000000000 RDI: 00007fe704df461b [ 132.589950][ T4875] RBP: 0000000020004780 R08: 00007fe704bfebd7 R09: 00007fe704bfee60 [ 132.597926][ T4875] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200044c0 [ 132.605914][ T4875] R13: 00007fe704bfef10 R14: 00007fe704bfeed0 R15: 0000000020000080 [ 132.613918][ T4875] [ 132.622643][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.629011][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.862472][ T4876] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.107: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=1036, rec_len=0, size=2048 fake=0 [ 132.887333][ T4876] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.107: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=1036, rec_len=0, size=2048 fake=0 [ 133.137810][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 134.060076][ T4886] 9p: Unknown uid 00000000004294967295 [ 134.273575][ T4888] loop3: detected capacity change from 0 to 4096 [ 134.384720][ T4888] ntfs3: Unknown parameter ' ' [ 134.434515][ T4253] Bluetooth: hci0: command 0x0c20 tx timeout [ 135.603984][ T4765] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.673015][ T4913] loop2: detected capacity change from 0 to 4096 [ 135.804610][ T4765] usb 1-1: Using ep0 maxpacket: 8 [ 135.816260][ T4765] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.993799][ T4765] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 136.017045][ T4765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.117399][ T4765] usb 1-1: config 0 descriptor?? [ 136.242009][ T4893] loop1: detected capacity change from 0 to 32768 [ 136.293498][ T4893] XFS (loop1): sunit and swidth options incompatible with the noalign option [ 136.435855][ T4893] loop1: detected capacity change from 0 to 256 [ 136.464499][ T4893] exfat: Deprecated parameter 'namecase' [ 136.488770][ T4893] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 136.579632][ T4765] apple 0003:05AC:0264.0006: unknown global tag 0xd [ 136.629430][ T4765] apple 0003:05AC:0264.0006: item 0 4 1 13 parsing failed [ 136.715562][ T4765] apple 0003:05AC:0264.0006: parse failed [ 136.721406][ T4765] apple: probe of 0003:05AC:0264.0006 failed with error -22 [ 137.519048][ T4904] loop0: detected capacity change from 0 to 1024 [ 137.850721][ T4909] loop3: detected capacity change from 0 to 40427 [ 137.880474][ T4909] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 137.895754][ T4909] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.971282][ T4909] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.092232][ T4298] usb 1-1: USB disconnect, device number 2 [ 138.307168][ T4909] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 138.329075][ T4909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.824978][ T4951] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.833737][ T4951] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.842518][ T4951] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.852076][ T4951] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.861382][ T4951] device vxlan0 entered promiscuous mode [ 139.396122][ T4954] loop4: detected capacity change from 0 to 8 [ 139.435061][ T4954] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 139.501186][ T4954] cramfs: bad data blocksize 4294967270 [ 139.524170][ T4954] cramfs: Error -3 while decompressing! [ 139.530220][ T4954] cramfs: ffffffff974e0582(26)->ffff88804a5eb000(4096) [ 139.645739][ T4954] cramfs: bad data blocksize 3221485902 [ 139.651364][ T4954] cramfs: bad data blocksize 4294967270 [ 139.724667][ T27] audit: type=1800 audit(1733696240.897:3): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.127" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 141.947145][ T4975] loop3: detected capacity change from 0 to 2048 [ 141.959917][ T4971] loop1: detected capacity change from 0 to 4096 [ 141.995159][ T4971] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 142.019144][ T4258] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 142.035435][ T4975] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 142.042932][ T4258] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 142.063209][ T4977] loop4: detected capacity change from 0 to 512 [ 142.077004][ T4975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.091041][ T4977] EXT4-fs: Ignoring removed orlov option [ 142.098143][ T4971] ntfs3: loop1: failed to replay log file. Can't mount rw! [ 142.120230][ T4977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.207315][ T4977] EXT4-fs (loop4): 1 orphan inode deleted [ 142.213226][ T4977] EXT4-fs (loop4): 1 truncate cleaned up [ 142.219493][ T4977] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.282965][ T4977] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 142.550098][ T4967] loop0: detected capacity change from 0 to 32768 [ 142.586659][ T4967] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.129 (4967) [ 142.725861][ T4967] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 142.809837][ T4967] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 142.993956][ T4967] BTRFS info (device loop0): using free space tree [ 144.344058][ T4967] BTRFS info (device loop0): enabling ssd optimizations [ 144.726543][ T4250] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 144.763671][ T5023] loop2: detected capacity change from 0 to 2048 [ 144.846648][ T5023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.515562][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 148.571824][ T5052] loop3: detected capacity change from 0 to 128 [ 148.633314][ T5052] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 148.683054][ T5052] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.905793][ T27] audit: type=1800 audit(1733696249.897:4): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.147" name="file1" dev="loop3" ino=104 res=0 errno=0 [ 150.991125][ T5056] loop4: detected capacity change from 0 to 128 [ 151.085070][ T4305] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 151.092544][ T4305] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 151.134785][ T4305] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 151.420622][ T5056] EXT4-fs (loop4): Test dummy encryption mode enabled [ 151.506696][ T5079] loop1: detected capacity change from 0 to 4096 [ 151.554990][ T5056] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.574028][ T5056] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.587779][ T5079] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.632442][ T5089] 9pnet_fd: Insufficient options for proto=fd [ 151.788244][ T5079] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 152.608647][ T5056] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 152.617155][ T5102] input: syz1 as /devices/virtual/input/input5 [ 152.775811][ T27] audit: type=1800 audit(1733696253.817:5): pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.148" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 153.035975][ T5108] loop2: detected capacity change from 0 to 1024 [ 153.166200][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 154.003968][ T4297] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.202445][ T4297] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 155.017403][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.076671][ T4297] usb 3-1: Product: syz [ 155.080896][ T4297] usb 3-1: Manufacturer: syz [ 155.170961][ T4297] usb 3-1: SerialNumber: syz [ 155.203291][ T4782] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.215217][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 155.224955][ T4297] usb 3-1: config 0 descriptor?? [ 155.241129][ T4782] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 155.292307][ T4782] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 155.696153][ T5139] loop3: detected capacity change from 0 to 2048 [ 155.990618][ T5139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.485785][ T5149] loop4: detected capacity change from 0 to 736 [ 156.547036][ T4305] usb 3-1: USB disconnect, device number 3 [ 156.594333][ T4297] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.671832][ T4383] hfsplus: b-tree write err: -5, ino 4 [ 156.801475][ T4297] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.826139][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.858216][ T4297] usb 1-1: config 0 descriptor?? [ 156.873061][ T4297] cp210x 1-1:0.0: cp210x converter detected [ 156.908472][ T5149] random: crng reseeded on system resumption [ 156.968193][ T5157] loop2: detected capacity change from 0 to 1024 [ 157.005277][ T5157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.019060][ T5157] EXT4-fs (loop2): unmounting filesystem. [ 157.573826][ T4297] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 157.595399][ T4297] usb 1-1: cp210x converter now attached to ttyUSB0 [ 157.724200][ T4295] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 157.944922][ T4295] usb 2-1: device descriptor read/64, error -71 [ 158.227543][ T4295] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.238589][ T4305] usb 1-1: USB disconnect, device number 3 [ 158.274428][ T4305] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.326346][ T4305] cp210x 1-1:0.0: device disconnected [ 158.418318][ T4295] usb 2-1: device descriptor read/64, error -71 [ 158.564167][ T4295] usb usb2-port1: attempt power cycle [ 159.024872][ T5176] trusted_key: encrypted_key: master key parameter 'mngw$uR' is invalid [ 159.606556][ T5174] loop3: detected capacity change from 0 to 40427 [ 159.622625][ T5174] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 159.629211][ T5174] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 159.641925][ T5174] F2FS-fs (loop3): invalid crc value [ 159.658315][ T5174] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 159.717042][ T5174] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 159.724275][ T5174] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.814113][ T4295] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.816044][ T27] audit: type=1800 audit(1733696260.987:6): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.176" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 159.856248][ T4295] usb 2-1: device descriptor read/8, error -71 [ 159.899986][ T4249] syz-executor: attempt to access beyond end of device [ 159.899986][ T4249] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.391968][ T5195] FAULT_INJECTION: forcing a failure. [ 160.391968][ T5195] name failslab, interval 1, probability 0, space 0, times 0 [ 160.404853][ T5195] CPU: 1 PID: 5195 Comm: syz.1.182 Not tainted 6.1.119-syzkaller #0 [ 160.412865][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.422936][ T5195] Call Trace: [ 160.426231][ T5195] [ 160.429177][ T5195] dump_stack_lvl+0x1e3/0x2cb [ 160.433892][ T5195] ? nf_tcp_handle_invalid+0x642/0x642 [ 160.439382][ T5195] ? panic+0x764/0x764 [ 160.443474][ T5195] ? __might_sleep+0xb0/0xb0 [ 160.448090][ T5195] should_fail_ex+0x3a6/0x4d0 [ 160.452805][ T5195] should_failslab+0x5/0x20 [ 160.457330][ T5195] slab_pre_alloc_hook+0x59/0x300 [ 160.462383][ T5195] ? cec_open+0xd2/0x800 [ 160.466650][ T5195] __kmem_cache_alloc_node+0x47/0x260 [ 160.472057][ T5195] ? cec_open+0xd2/0x800 [ 160.476316][ T5195] kmalloc_trace+0x26/0xe0 [ 160.480757][ T5195] cec_open+0xd2/0x800 [ 160.484850][ T5195] ? chrdev_open+0x376/0x630 [ 160.489472][ T5195] ? cec_ioctl+0x3380/0x3380 [ 160.494111][ T5195] ? do_raw_spin_lock+0x14a/0x370 [ 160.499171][ T5195] ? do_raw_spin_unlock+0x137/0x8a0 [ 160.504400][ T5195] chrdev_open+0x54a/0x630 [ 160.508848][ T5195] ? cd_forget+0x160/0x160 [ 160.513295][ T5195] ? do_raw_spin_unlock+0x137/0x8a0 [ 160.518517][ T5195] ? fsnotify_perm+0x472/0x590 [ 160.523302][ T5195] ? cd_forget+0x160/0x160 [ 160.527752][ T5195] do_dentry_open+0x7f9/0x10f0 [ 160.532570][ T5195] path_openat+0x2644/0x2e60 [ 160.537196][ T5195] ? mark_lock+0x9a/0x340 [ 160.541576][ T5195] ? do_filp_open+0x480/0x480 [ 160.546300][ T5195] do_filp_open+0x230/0x480 [ 160.550834][ T5195] ? vfs_tmpfile+0x4a0/0x4a0 [ 160.555473][ T5195] ? _raw_spin_unlock+0x24/0x40 [ 160.560344][ T5195] ? alloc_fd+0x5a0/0x640 [ 160.564704][ T5195] do_sys_openat2+0x13b/0x4f0 [ 160.569423][ T5195] ? do_sys_open+0x220/0x220 [ 160.574059][ T5195] __x64_sys_openat+0x243/0x290 [ 160.578978][ T5195] ? __ia32_sys_open+0x270/0x270 [ 160.583949][ T5195] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 160.589970][ T5195] ? syscall_enter_from_user_mode+0x2e/0x230 [ 160.595977][ T5195] ? lockdep_hardirqs_on+0x94/0x130 [ 160.601198][ T5195] ? syscall_enter_from_user_mode+0x2e/0x230 [ 160.607199][ T5195] do_syscall_64+0x3b/0xb0 [ 160.611639][ T5195] ? clear_bhb_loop+0x45/0xa0 [ 160.616349][ T5195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.622263][ T5195] RIP: 0033:0x7fe704d7e840 [ 160.626714][ T5195] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 160.646338][ T5195] RSP: 002b:00007fe704bbcb90 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 160.654775][ T5195] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe704d7e840 [ 160.662764][ T5195] RDX: 0000000000000000 RSI: 00007fe704bbcc30 RDI: 00000000ffffff9c [ 160.670764][ T5195] RBP: 00007fe704bbcc30 R08: 0000000000000000 R09: 00236365632f7665 [ 160.678852][ T5195] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 160.686845][ T5195] R13: 0000000000000000 R14: 00007fe704f46160 R15: 00007fff21ef0468 [ 160.694857][ T5195] [ 160.837885][ T5194] loop4: detected capacity change from 0 to 64 [ 160.936164][ T5198] loop2: detected capacity change from 0 to 64 [ 160.980535][ T5198] hfs: unable to parse mount options [ 161.098648][ T5198] loop2: detected capacity change from 0 to 512 [ 161.183064][ T5198] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.195474][ T5198] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.230409][ T5198] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz.2.185: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 161.335052][ T5198] EXT4-fs (loop2): Remounting filesystem read-only [ 161.364091][ T5198] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.185: directory missing '.' [ 161.520822][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 161.727588][ T5221] loop2: detected capacity change from 0 to 256 [ 161.772517][ T5221] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 162.152008][ T5229] trusted_key: encrypted_key: master key parameter 'mngw$uR' is invalid [ 162.968331][ T5231] loop4: detected capacity change from 0 to 47 [ 163.219425][ T5231] Trying to free block not in datazone [ 163.578617][ T5243] FAULT_INJECTION: forcing a failure. [ 163.578617][ T5243] name failslab, interval 1, probability 0, space 0, times 0 [ 163.597834][ T5243] CPU: 0 PID: 5243 Comm: syz.1.197 Not tainted 6.1.119-syzkaller #0 [ 163.605871][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.615951][ T5243] Call Trace: [ 163.619250][ T5243] [ 163.622217][ T5243] dump_stack_lvl+0x1e3/0x2cb [ 163.626937][ T5243] ? nf_tcp_handle_invalid+0x642/0x642 [ 163.632431][ T5243] ? panic+0x764/0x764 [ 163.636530][ T5243] ? __might_sleep+0xb0/0xb0 [ 163.641155][ T5243] should_fail_ex+0x3a6/0x4d0 [ 163.645862][ T5243] should_failslab+0x5/0x20 [ 163.650390][ T5243] slab_pre_alloc_hook+0x59/0x300 [ 163.655459][ T5243] ? qdisc_alloc+0x93/0xa30 [ 163.659989][ T5243] __kmem_cache_alloc_node+0x47/0x260 [ 163.665395][ T5243] ? qdisc_alloc+0x93/0xa30 [ 163.669931][ T5243] __kmalloc_node+0xa2/0x230 [ 163.674563][ T5243] qdisc_alloc+0x93/0xa30 [ 163.678932][ T5243] qdisc_create+0x185/0x1220 [ 163.683562][ T5243] ? qdisc_notify+0x390/0x390 [ 163.688281][ T5243] tc_modify_qdisc+0xa0a/0x1d70 [ 163.693183][ T5243] ? qdisc_offload_query_caps+0x170/0x170 [ 163.698965][ T5243] ? qdisc_offload_query_caps+0x170/0x170 [ 163.704714][ T5243] rtnetlink_rcv_msg+0x818/0xff0 [ 163.709711][ T5243] ? rtnetlink_bind+0x80/0x80 [ 163.714439][ T5243] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 163.720456][ T5243] ? print_irqtrace_events+0x210/0x210 [ 163.725953][ T5243] ? do_raw_spin_unlock+0x137/0x8a0 [ 163.731181][ T5243] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 163.737106][ T5243] ? lockdep_hardirqs_on+0x94/0x130 [ 163.742512][ T5243] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 163.748453][ T5243] ? _raw_spin_unlock+0x40/0x40 [ 163.753375][ T5243] ? __dev_queue_xmit+0x173c/0x3d50 [ 163.758616][ T5243] ? rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 163.765240][ T5243] ? __dev_queue_xmit+0x2d6/0x3d50 [ 163.770409][ T5243] ? rcu_read_unlock_special+0x540/0x540 [ 163.776082][ T5243] ? refcount_inc+0x80/0x80 [ 163.780608][ T5243] ? __copy_skb_header+0x47b/0x600 [ 163.785788][ T5243] netlink_rcv_skb+0x1cd/0x410 [ 163.790600][ T5243] ? rtnetlink_bind+0x80/0x80 [ 163.795317][ T5243] ? netlink_ack+0x1290/0x1290 [ 163.800111][ T5243] ? __netlink_deliver_tap+0x73e/0x770 [ 163.805612][ T5243] ? __rcu_read_unlock+0x92/0x100 [ 163.810672][ T5243] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.815908][ T5243] netlink_unicast+0x7d8/0x970 [ 163.820709][ T5243] ? netlink_detachskb+0x90/0x90 [ 163.825675][ T5243] ? __virt_addr_valid+0x45b/0x530 [ 163.830824][ T5243] ? __phys_addr_symbol+0x2b/0x70 [ 163.835882][ T5243] ? __check_object_size+0x4dd/0xa30 [ 163.841196][ T5243] ? bpf_lsm_netlink_send+0x5/0x10 [ 163.846346][ T5243] netlink_sendmsg+0xa26/0xd60 [ 163.851167][ T5243] ? netlink_getsockopt+0x580/0x580 [ 163.856403][ T5243] ? aa_sock_msg_perm+0x91/0x150 [ 163.861470][ T5243] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 163.866793][ T5243] ? security_socket_sendmsg+0x7d/0xa0 [ 163.872415][ T5243] ? netlink_getsockopt+0x580/0x580 [ 163.877656][ T5243] ____sys_sendmsg+0x5a5/0x8f0 [ 163.882459][ T5243] ? __sys_sendmsg_sock+0x30/0x30 [ 163.887528][ T5243] __sys_sendmsg+0x2a9/0x390 [ 163.892148][ T5243] ? ____sys_sendmsg+0x8f0/0x8f0 [ 163.897115][ T5243] ? vfs_write+0x6cf/0xbc0 [ 163.901585][ T5243] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 163.907610][ T5243] ? syscall_enter_from_user_mode+0x2e/0x230 [ 163.913702][ T5243] ? lockdep_hardirqs_on+0x94/0x130 [ 163.918952][ T5243] ? syscall_enter_from_user_mode+0x2e/0x230 [ 163.924984][ T5243] do_syscall_64+0x3b/0xb0 [ 163.929444][ T5243] ? clear_bhb_loop+0x45/0xa0 [ 163.934247][ T5243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.940178][ T5243] RIP: 0033:0x7fe704d7fed9 [ 163.944628][ T5243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.964257][ T5243] RSP: 002b:00007fe704bff058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.972727][ T5243] RAX: ffffffffffffffda RBX: 00007fe704f45fa0 RCX: 00007fe704d7fed9 [ 163.980732][ T5243] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 163.988736][ T5243] RBP: 00007fe704bff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.996740][ T5243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.004734][ T5243] R13: 0000000000000000 R14: 00007fe704f45fa0 R15: 00007fff21ef0468 [ 164.012740][ T5243] [ 164.079011][ T5225] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 48216 - 0 [ 164.164094][ T5225] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 48216 - 0 [ 164.226148][ T5225] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 48216 - 0 [ 164.274030][ T5225] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 48216 - 0 [ 164.324140][ T5225] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 35382 - 0 [ 164.389308][ T5225] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 35382 - 0 [ 164.428588][ T5225] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 35382 - 0 [ 164.498927][ T5225] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 35382 - 0 [ 164.525901][ T5225] device geneve2 entered promiscuous mode [ 164.738248][ T5255] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 165.409048][ T5258] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 165.435948][ T27] audit: type=1400 audit(1733696266.607:7): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5247 comm="syz.2.199" [ 165.597353][ T5271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.206'. [ 165.879897][ T5258] syz.2.199 (5258) used greatest stack depth: 19704 bytes left [ 166.072530][ T5283] loop2: detected capacity change from 0 to 2048 [ 166.132366][ T5283] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.504566][ T4305] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.521496][ T5256] loop4: detected capacity change from 0 to 32768 [ 166.550815][ T5256] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.202 (5256) [ 167.255782][ T5256] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.294655][ T5256] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 167.308287][ T5256] BTRFS info (device loop4): setting nodatacow, compression disabled [ 167.354273][ T5256] BTRFS info (device loop4): setting datacow [ 167.365946][ T4305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.384057][ T5256] BTRFS info (device loop4): doing ref verification [ 167.390789][ T5256] BTRFS info (device loop4): force clearing of disk cache [ 167.474256][ T4305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.484312][ T4305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.514135][ T4305] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.533915][ T5256] BTRFS info (device loop4): turning off barriers [ 167.540400][ T5256] BTRFS info (device loop4): enabling ssd optimizations [ 167.548610][ T4305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.575662][ T4305] usb 1-1: config 0 descriptor?? [ 167.604122][ T5256] BTRFS info (device loop4): using spread ssd allocation scheme [ 167.611883][ T5256] BTRFS info (device loop4): using free space tree [ 167.990500][ T5256] BTRFS error (device loop4): open_ctree failed [ 168.003167][ T4305] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 168.023515][ T4305] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 168.644243][ T4305] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.995938][ T4305] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 169.044627][ T4305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.131542][ T4305] usb 2-1: config 0 descriptor?? [ 169.310574][ T5335] Illegal XDP return value 4294967274 on prog (id 53) dev N/A, expect packet loss! [ 169.343168][ T5298] loop2: detected capacity change from 0 to 32768 [ 169.374089][ T22] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 169.383646][ T5333] loop3: detected capacity change from 0 to 24 [ 169.392989][ T5298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.213 (5298) [ 169.406315][ T5333] romfs: Unknown parameter './file1' [ 169.534118][ T22] usb 1-1: device descriptor read/64, error -32 [ 169.583372][ T4305] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 169.596452][ T5298] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.644030][ T5298] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 169.748898][ T5298] BTRFS info (device loop2): using free space tree [ 169.799923][ T5340] tipc: Enabling of bearer rejected, failed to enable media [ 169.813965][ T22] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 169.924121][ T5298] BTRFS info (device loop2): enabling ssd optimizations [ 169.964171][ T22] usb 1-1: device descriptor read/64, error -32 [ 169.987738][ T5362] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.221'. [ 170.004324][ T4305] usb 2-1: USB disconnect, device number 6 [ 170.293356][ T5370] loop3: detected capacity change from 0 to 1024 [ 170.322198][ T5370] ext4: Unknown parameter 'noacl' [ 170.341612][ T5373] loop4: detected capacity change from 0 to 512 [ 170.373307][ T5373] EXT4-fs: Ignoring removed orlov option [ 170.400193][ T5373] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.442483][ T5373] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.571049][ T5373] EXT4-fs (loop4): 1 orphan inode deleted [ 170.590708][ T4258] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.625192][ T5373] EXT4-fs (loop4): 1 truncate cleaned up [ 170.630890][ T5373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.659753][ T5373] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 170.725503][ T27] audit: type=1326 audit(1733696271.897:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 170.870602][ T27] audit: type=1326 audit(1733696271.897:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 170.914878][ T5316] usb 1-1: USB disconnect, device number 4 [ 171.002751][ T27] audit: type=1326 audit(1733696271.897:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 171.051030][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 171.126069][ T27] audit: type=1326 audit(1733696271.897:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 171.195530][ T27] audit: type=1326 audit(1733696271.897:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 171.254013][ T27] audit: type=1326 audit(1733696271.907:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 171.317109][ T5400] netlink: 332 bytes leftover after parsing attributes in process `syz.4.229'. [ 171.386605][ T27] audit: type=1326 audit(1733696271.907:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 171.469037][ T27] audit: type=1326 audit(1733696271.907:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 171.583934][ T27] audit: type=1326 audit(1733696271.907:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 171.647385][ T27] audit: type=1326 audit(1733696271.917:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 171.849336][ T5414] device syz_tun entered promiscuous mode [ 171.866998][ T5413] device syz_tun left promiscuous mode [ 171.879695][ T5417] loop4: detected capacity change from 0 to 512 [ 171.951451][ T5417] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.235: casefold flag without casefold feature [ 171.994588][ T5417] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.235: couldn't read orphan inode 15 (err -117) [ 172.084529][ T5417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.576915][ T5443] loop1: detected capacity change from 0 to 512 [ 172.675474][ T5443] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 172.714156][ T5443] System zones: 0-2, 18-18, 34-34 [ 172.738254][ T5443] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.241: bg 0: block 248: padding at end of block bitmap is not set [ 172.791294][ T5443] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.241: Failed to acquire dquot type 1 [ 172.797299][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 172.849468][ T5443] EXT4-fs (loop1): 1 truncate cleaned up [ 172.865725][ T5443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.909304][ T5443] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.121172][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 173.610980][ T5472] loop1: detected capacity change from 0 to 2048 [ 173.719806][ T5472] EXT4-fs (loop1): failed to initialize system zone (-117) [ 173.735165][ T5472] EXT4-fs (loop1): mount failed [ 174.300945][ T5472] loop1: detected capacity change from 0 to 128 [ 174.361535][ T5472] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.382384][ T5472] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.711829][ T5493] loop1: detected capacity change from 0 to 164 [ 174.782943][ T5493] syz.1.255: attempt to access beyond end of device [ 174.782943][ T5493] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 174.847722][ T5493] syz.1.255: attempt to access beyond end of device [ 174.847722][ T5493] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 174.962848][ T5503] loop4: detected capacity change from 0 to 2048 [ 175.044619][ T5503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 175.122657][ T5503] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.257: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 175.271708][ T5503] EXT4-fs (loop4): Remounting filesystem read-only [ 176.064796][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 176.591234][ T27] kauditd_printk_skb: 98 callbacks suppressed [ 176.591250][ T27] audit: type=1326 audit(1733696277.757:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe704d7fed9 code=0x7ffc0000 [ 176.689558][ T27] audit: type=1326 audit(1733696277.797:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe704d7fed9 code=0x7ffc0000 [ 176.711759][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.782556][ T27] audit: type=1326 audit(1733696277.797:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe704d7fed9 code=0x7ffc0000 [ 176.854289][ T27] audit: type=1326 audit(1733696277.797:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe704d7fed9 code=0x7ffc0000 [ 176.876477][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.924992][ T27] audit: type=1326 audit(1733696277.797:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe704d7fed9 code=0x7ffc0000 [ 176.947178][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.991573][ T27] audit: type=1326 audit(1733696277.807:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fe704d7fed9 code=0x7ffc0000 [ 177.013668][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.780241][ T5590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'. [ 177.839286][ T27] audit: type=1326 audit(1733696279.007:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 177.861476][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.943238][ T27] audit: type=1326 audit(1733696279.037:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 178.030417][ T27] audit: type=1326 audit(1733696279.047:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 178.123907][ T27] audit: type=1326 audit(1733696279.047:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 178.146088][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.326691][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 178.337883][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 178.347103][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.355205][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.363532][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.371694][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.382166][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.393465][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.407296][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.422832][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.431313][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.441702][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.450745][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.463963][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.471813][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.481533][ T4295] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 178.491984][ T4295] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 178.709621][ T5615] loop1: detected capacity change from 0 to 256 [ 179.035388][ T5620] loop4: detected capacity change from 0 to 2048 [ 179.085199][ T5620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 179.172766][ T5615] infiniband syz1: set active [ 179.176064][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 179.180268][ T5615] infiniband syz1: added bond_slave_1 [ 179.404845][ T5615] RDS/IB: syz1: added [ 179.424907][ T5615] smc: adding ib device syz1 with port count 1 [ 179.444412][ T5615] smc: ib device syz1 port 1 has pnetid [ 179.623319][ T5627] loop3: detected capacity change from 0 to 8192 [ 179.660234][ T5627] FAT-fs (loop3): Unrecognized mount option "S^F ]34/8vЩX"h\oC:dQ;/w*z|6ݠ/]%:neF4Ű+yꅈ=7MBfh ٠Rn"" or missing value [ 179.786145][ T5642] loop2: detected capacity change from 0 to 512 [ 179.804284][ T5642] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.875747][ T5642] EXT4-fs (loop2): 1 truncate cleaned up [ 179.881564][ T5642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.927952][ T5648] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 179.935816][ T5648] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.301'. [ 181.179844][ T5671] loop4: detected capacity change from 0 to 512 [ 181.272927][ T5671] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.309: invalid indirect mapped block 256 (level 2) [ 181.394927][ T5671] EXT4-fs (loop4): 2 truncates cleaned up [ 181.400832][ T5671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.416033][ T5677] random: crng reseeded on system resumption [ 181.594524][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 182.150885][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 182.252200][ T5689] syz.2.317[5689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.252313][ T5689] syz.2.317[5689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.469433][ T5693] mmap: syz.0.319 (5693) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.494082][ T5316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 182.643083][ T5696] loop7: detected capacity change from 0 to 16384 [ 182.700621][ T5316] usb 5-1: config 1 interface 0 has no altsetting 0 [ 182.712682][ T5316] usb 5-1: New USB device found, idVendor=046d, idProduct=101a, bcdDevice= 0.40 [ 182.752494][ T5316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.769743][ T5316] usb 5-1: Product: syz [ 182.784503][ T5316] usb 5-1: Manufacturer: 鐻락쐤幯ᇶ夥䆃韛졝눳䙓糕쇈뚰쌡ൂ늮ꤌ띵޳ⓡ恆ﱻܡ鐋霱夏꿉ᄱ힆끛자日嬏콹絻ꓐ闌想ℒ醟ে鼓 [ 182.830028][ T5687] program syz.1.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.841565][ T5316] usb 5-1: SerialNumber: syz [ 182.909805][ T5700] loop2: detected capacity change from 0 to 1764 [ 183.048705][ T4345] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.078401][ T5683] IPv4: Oversized IP packet from 127.202.26.0 [ 183.099915][ T5704] loop3: detected capacity change from 0 to 2048 [ 183.135754][ T5316] usbhid 5-1:1.0: can't add hid device: -71 [ 183.141849][ T5316] usbhid: probe of 5-1:1.0 failed with error -71 [ 183.173585][ T5316] usb 5-1: USB disconnect, device number 2 [ 183.220141][ T5704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 183.358095][ T5714] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 183.375784][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 183.512110][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 183.512137][ T27] audit: type=1326 audit(1733696284.677:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 183.512175][ T27] audit: type=1326 audit(1733696284.677:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 183.514235][ T27] audit: type=1326 audit(1733696284.677:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 183.514269][ T27] audit: type=1326 audit(1733696284.677:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 183.777212][ T5725] netlink: 64 bytes leftover after parsing attributes in process `syz.0.331'. [ 184.301794][ T27] audit: type=1326 audit(1733696285.457:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 184.301846][ T27] audit: type=1326 audit(1733696285.457:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5739 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa500f7fed9 code=0x7ffc0000 [ 184.791458][ T5760] loop1: detected capacity change from 0 to 128 [ 184.798689][ T5760] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 184.808308][ T5760] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.847035][ T5760] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #11: comm syz.1.344: No space for directory leaf checksum. Please run e2fsck -D. [ 184.847131][ T5760] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #11: comm syz.1.344: checksumming directory block 0 [ 185.015024][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 185.208272][ T5777] loop2: detected capacity change from 0 to 512 [ 185.278585][ T5777] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.349611][ T5777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.401977][ T5777] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.351: corrupted inode contents [ 185.434968][ T5777] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #2: comm syz.2.351: mark_inode_dirty error [ 185.497060][ T5777] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.351: corrupted inode contents [ 185.582012][ T5793] loop6: detected capacity change from 0 to 7 [ 185.659482][ T5793] Dev loop6: unable to read RDB block 7 [ 185.668090][ T5793] loop6: unable to read partition table [ 185.680925][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 185.694322][ T5793] loop6: partition table beyond EOD, truncated [ 185.702974][ T5793] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 185.702974][ T5793] ) failed (rc=-5) [ 185.745089][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 185.853346][ T27] audit: type=1326 audit(1733696287.017:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe704d7fed9 code=0x7ffc0000 [ 185.972156][ T27] audit: type=1326 audit(1733696287.057:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 186.004163][ T27] audit: type=1326 audit(1733696287.057:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 186.034469][ T27] audit: type=1326 audit(1733696287.057:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0db7fed9 code=0x7ffc0000 [ 186.064557][ T5811] loop4: detected capacity change from 0 to 2048 [ 186.110450][ T5813] lo speed is unknown, defaulting to 1000 [ 186.140583][ T5811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 186.160087][ T5813] lo speed is unknown, defaulting to 1000 [ 186.193795][ T5813] lo speed is unknown, defaulting to 1000 [ 186.352582][ T4261] EXT4-fs (loop4): unmounting filesystem. [ 186.508237][ T5827] loop2: detected capacity change from 0 to 512 [ 186.517777][ T5829] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.529983][ T5833] kernel read not supported for file /eth0 (pid: 5833 comm: syz.4.367) [ 186.556047][ T5827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.590440][ T5813] infiniband sz1: set active [ 186.595489][ T4297] lo speed is unknown, defaulting to 1000 [ 186.612186][ T5813] infiniband sz1: added lo [ 186.630052][ T5827] EXT4-fs (loop2): 1 truncate cleaned up [ 186.653098][ T5827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 186.698142][ T5841] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 186.725211][ T5813] RDS/IB: sz1: added [ 186.729294][ T5813] smc: adding ib device sz1 with port count 1 [ 186.751248][ T5813] smc: ib device sz1 port 1 has pnetid [ 186.804876][ T4297] lo speed is unknown, defaulting to 1000 [ 186.812482][ T5813] lo speed is unknown, defaulting to 1000 [ 186.852649][ T5827] ================================================================== [ 186.860761][ T5827] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 186.868514][ T5827] Read of size 18446744073709551572 at addr ffff888056554050 by task syz.2.368/5827 [ 186.877909][ T5827] [ 186.880259][ T5827] CPU: 1 PID: 5827 Comm: syz.2.368 Not tainted 6.1.119-syzkaller #0 [ 186.888260][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.898334][ T5827] Call Trace: [ 186.901626][ T5827] [ 186.904591][ T5827] dump_stack_lvl+0x1e3/0x2cb [ 186.909304][ T5827] ? nf_tcp_handle_invalid+0x642/0x642 [ 186.914779][ T5827] ? panic+0x764/0x764 [ 186.918851][ T5827] ? _printk+0xd1/0x111 [ 186.923011][ T5827] ? __virt_addr_valid+0x17f/0x530 [ 186.928136][ T5827] ? __virt_addr_valid+0x17f/0x530 [ 186.933270][ T5827] print_report+0x15f/0x4f0 [ 186.937777][ T5827] ? __virt_addr_valid+0x17f/0x530 [ 186.942910][ T5827] ? __virt_addr_valid+0x17f/0x530 [ 186.948043][ T5827] ? __virt_addr_valid+0x45b/0x530 [ 186.953190][ T5827] ? __phys_addr+0xb6/0x170 [ 186.957702][ T5827] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 186.963249][ T5827] kasan_report+0x136/0x160 [ 186.967768][ T5827] ? __x64_sys_unlink+0x45/0x50 [ 186.972624][ T5827] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 186.978085][ T5827] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 186.983546][ T5827] kasan_check_range+0x27f/0x290 [ 186.988490][ T5827] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 186.993961][ T5827] memmove+0x25/0x60 [ 186.997867][ T5827] ext4_xattr_set_entry+0x8ca/0x1f30 [ 187.003167][ T5827] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 187.009588][ T5827] ? ext4_xattr_block_set+0x884/0x3920 [ 187.015055][ T5827] ? kmemdup+0x41/0x60 [ 187.019121][ T5827] ? memcpy+0x3c/0x60 [ 187.023108][ T5827] ext4_xattr_block_set+0xa58/0x3920 [ 187.028404][ T5827] ? __getblk_gfp+0x50/0xa20 [ 187.032994][ T5827] ? _raw_spin_unlock+0x24/0x40 [ 187.037849][ T5827] ? ext4_xattr_block_find+0x510/0x510 [ 187.043311][ T5827] ? ext4_xattr_block_find+0x468/0x510 [ 187.048776][ T5827] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 187.054681][ T5827] ? ext4_xattr_set+0x3d0/0x3d0 [ 187.059524][ T5827] ? rwsem_write_trylock+0x166/0x210 [ 187.064811][ T5827] ? clear_nonspinnable+0x60/0x60 [ 187.069922][ T5827] ? ext4_reserve_inode_write+0x2b3/0x360 [ 187.075648][ T5827] ? dquot_initialize_needed+0x128/0x320 [ 187.081289][ T5827] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 187.086932][ T5827] __ext4_mark_inode_dirty+0x54f/0x920 [ 187.092394][ T5827] ? ext4_blocks_for_truncate+0x270/0x270 [ 187.098115][ T5827] ? current_time+0x1ba/0x300 [ 187.102802][ T5827] ? atime_needs_update+0x7b0/0x7b0 [ 187.108023][ T5827] __ext4_unlink+0x6ed/0xba0 [ 187.112638][ T5827] ? __ext4_read_dirblock+0x890/0x890 [ 187.118012][ T5827] ? rwsem_write_trylock+0x166/0x210 [ 187.123309][ T5827] ? inode_permission+0xf7/0x450 [ 187.128257][ T5827] ? clear_nonspinnable+0x60/0x60 [ 187.133290][ T5827] ext4_unlink+0x1d5/0x670 [ 187.137708][ T5827] vfs_unlink+0x359/0x5f0 [ 187.142044][ T5827] do_unlinkat+0x4a5/0x820 [ 187.146470][ T5827] ? fsnotify_link_count+0xf0/0xf0 [ 187.151600][ T5827] __x64_sys_unlink+0x45/0x50 [ 187.156282][ T5827] do_syscall_64+0x3b/0xb0 [ 187.160705][ T5827] ? clear_bhb_loop+0x45/0xa0 [ 187.165394][ T5827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.171290][ T5827] RIP: 0033:0x7f1d01f7fed9 [ 187.175704][ T5827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.195305][ T5827] RSP: 002b:00007f1d02d27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 187.203715][ T5827] RAX: ffffffffffffffda RBX: 00007f1d02145fa0 RCX: 00007f1d01f7fed9 [ 187.211684][ T5827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 187.219650][ T5827] RBP: 00007f1d01ff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 187.227621][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.235598][ T5827] R13: 0000000000000000 R14: 00007f1d02145fa0 R15: 00007ffcbd384588 [ 187.243583][ T5827] [ 187.246603][ T5827] [ 187.248922][ T5827] Allocated by task 5827: [ 187.253243][ T5827] kasan_set_track+0x4b/0x70 [ 187.257847][ T5827] __kasan_kmalloc+0x97/0xb0 [ 187.262436][ T5827] __kmalloc_node_track_caller+0xb1/0x220 [ 187.268167][ T5827] kmemdup+0x26/0x60 [ 187.272060][ T5827] ext4_xattr_block_set+0x884/0x3920 [ 187.277344][ T5827] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 187.283233][ T5827] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 187.288870][ T5827] __ext4_mark_inode_dirty+0x54f/0x920 [ 187.294333][ T5827] __ext4_unlink+0x6ed/0xba0 [ 187.298923][ T5827] ext4_unlink+0x1d5/0x670 [ 187.303336][ T5827] vfs_unlink+0x359/0x5f0 [ 187.307666][ T5827] do_unlinkat+0x4a5/0x820 [ 187.312083][ T5827] __x64_sys_unlink+0x45/0x50 [ 187.316762][ T5827] do_syscall_64+0x3b/0xb0 [ 187.321176][ T5827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.327089][ T5827] [ 187.329408][ T5827] Last potentially related work creation: [ 187.335110][ T5827] kasan_save_stack+0x3b/0x60 [ 187.339793][ T5827] __kasan_record_aux_stack+0xb0/0xc0 [ 187.345170][ T5827] kvfree_call_rcu+0x116/0x8c0 [ 187.349930][ T5827] neigh_periodic_work+0x3c5/0xd40 [ 187.355053][ T5827] process_one_work+0x8a9/0x11d0 [ 187.360001][ T5827] worker_thread+0xa47/0x1200 [ 187.364677][ T5827] kthread+0x28d/0x320 [ 187.368744][ T5827] ret_from_fork+0x1f/0x30 [ 187.373253][ T5827] [ 187.375570][ T5827] The buggy address belongs to the object at ffff888056554000 [ 187.375570][ T5827] which belongs to the cache kmalloc-1k of size 1024 [ 187.389615][ T5827] The buggy address is located 80 bytes inside of [ 187.389615][ T5827] 1024-byte region [ffff888056554000, ffff888056554400) [ 187.402897][ T5827] [ 187.405213][ T5827] The buggy address belongs to the physical page: [ 187.411620][ T5827] page:ffffea0001595400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888056557000 pfn:0x56550 [ 187.423069][ T5827] head:ffffea0001595400 order:3 compound_mapcount:0 compound_pincount:0 [ 187.431388][ T5827] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 187.439371][ T5827] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017c41dc0 [ 187.447949][ T5827] raw: ffff888056557000 000000008010000e 00000001ffffffff 0000000000000000 [ 187.456527][ T5827] page dumped because: kasan: bad access detected [ 187.462953][ T5827] page_owner tracks the page as allocated [ 187.468659][ T5827] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4249, tgid 4249 (syz-executor), ts 74937697841, free_ts 19820810268 [ 187.489320][ T5827] post_alloc_hook+0x18d/0x1b0 [ 187.494091][ T5827] get_page_from_freelist+0x3731/0x38d0 [ 187.499630][ T5827] __alloc_pages+0x28d/0x770 [ 187.504215][ T5827] alloc_slab_page+0x6a/0x150 [ 187.508889][ T5827] new_slab+0x84/0x2d0 [ 187.512965][ T5827] ___slab_alloc+0xc20/0x1270 [ 187.517646][ T5827] __kmem_cache_alloc_node+0x19f/0x260 [ 187.523104][ T5827] kmalloc_trace+0x26/0xe0 [ 187.527529][ T5827] batadv_hard_if_event+0xdab/0x1540 [ 187.532812][ T5827] raw_notifier_call_chain+0xd0/0x170 [ 187.538182][ T5827] call_netdevice_notifiers+0x145/0x1b0 [ 187.543728][ T5827] register_netdevice+0x12f2/0x1720 [ 187.548931][ T5827] cfg80211_register_netdevice+0x14e/0x2e0 [ 187.554734][ T5827] ieee80211_if_add+0xc62/0x1890 [ 187.559665][ T5827] ieee80211_register_hw+0x32ff/0x3f10 [ 187.565146][ T5827] mac80211_hwsim_new_radio+0x22d9/0x4060 [ 187.570863][ T5827] page last free stack trace: [ 187.575520][ T5827] free_unref_page_prepare+0xf63/0x1120 [ 187.581072][ T5827] free_unref_page+0x33/0x3e0 [ 187.585736][ T5827] free_contig_range+0x9a/0x150 [ 187.590578][ T5827] destroy_args+0xfe/0x997 [ 187.594996][ T5827] debug_vm_pgtable+0x416/0x46b [ 187.599843][ T5827] do_one_initcall+0x265/0x8f0 [ 187.604605][ T5827] do_initcall_level+0x157/0x207 [ 187.609540][ T5827] do_initcalls+0x49/0x86 [ 187.613868][ T5827] kernel_init_freeable+0x45c/0x60f [ 187.619065][ T5827] kernel_init+0x19/0x290 [ 187.623390][ T5827] ret_from_fork+0x1f/0x30 [ 187.627807][ T5827] [ 187.630142][ T5827] Memory state around the buggy address: [ 187.635762][ T5827] ffff888056553f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 187.643905][ T5827] ffff888056553f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 187.651959][ T5827] >ffff888056554000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 187.660006][ T5827] ^ [ 187.666665][ T5827] ffff888056554080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 187.674717][ T5827] ffff888056554100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 187.682766][ T5827] ================================================================== [ 187.693308][ T5827] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.700530][ T5827] CPU: 0 PID: 5827 Comm: syz.2.368 Not tainted 6.1.119-syzkaller #0 [ 187.708525][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.718595][ T5827] Call Trace: [ 187.721880][ T5827] [ 187.724809][ T5827] dump_stack_lvl+0x1e3/0x2cb [ 187.729498][ T5827] ? nf_tcp_handle_invalid+0x642/0x642 [ 187.734962][ T5827] ? panic+0x764/0x764 [ 187.739035][ T5827] ? preempt_schedule_common+0xa6/0xd0 [ 187.744493][ T5827] ? vscnprintf+0x59/0x80 [ 187.748826][ T5827] panic+0x318/0x764 [ 187.752740][ T5827] ? check_panic_on_warn+0x1d/0xa0 [ 187.757855][ T5827] ? memcpy_page_flushcache+0xfc/0xfc [ 187.763242][ T5827] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 187.769228][ T5827] ? _raw_spin_unlock+0x40/0x40 [ 187.774083][ T5827] check_panic_on_warn+0x7e/0xa0 [ 187.779025][ T5827] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 187.784503][ T5827] end_report+0x66/0x110 [ 187.788745][ T5827] kasan_report+0x143/0x160 [ 187.793261][ T5827] ? __x64_sys_unlink+0x45/0x50 [ 187.798123][ T5827] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 187.803581][ T5827] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 187.809037][ T5827] kasan_check_range+0x27f/0x290 [ 187.813985][ T5827] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 187.819443][ T5827] memmove+0x25/0x60 [ 187.823341][ T5827] ext4_xattr_set_entry+0x8ca/0x1f30 [ 187.828640][ T5827] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 187.835052][ T5827] ? ext4_xattr_block_set+0x884/0x3920 [ 187.840506][ T5827] ? kmemdup+0x41/0x60 [ 187.844571][ T5827] ? memcpy+0x3c/0x60 [ 187.848554][ T5827] ext4_xattr_block_set+0xa58/0x3920 [ 187.853846][ T5827] ? __getblk_gfp+0x50/0xa20 [ 187.858442][ T5827] ? _raw_spin_unlock+0x24/0x40 [ 187.863293][ T5827] ? ext4_xattr_block_find+0x510/0x510 [ 187.868756][ T5827] ? ext4_xattr_block_find+0x468/0x510 [ 187.874222][ T5827] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 187.880128][ T5827] ? ext4_xattr_set+0x3d0/0x3d0 [ 187.884973][ T5827] ? rwsem_write_trylock+0x166/0x210 [ 187.890259][ T5827] ? clear_nonspinnable+0x60/0x60 [ 187.895279][ T5827] ? ext4_reserve_inode_write+0x2b3/0x360 [ 187.900996][ T5827] ? dquot_initialize_needed+0x128/0x320 [ 187.906629][ T5827] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 187.912265][ T5827] __ext4_mark_inode_dirty+0x54f/0x920 [ 187.917726][ T5827] ? ext4_blocks_for_truncate+0x270/0x270 [ 187.923447][ T5827] ? current_time+0x1ba/0x300 [ 187.928133][ T5827] ? atime_needs_update+0x7b0/0x7b0 [ 187.933348][ T5827] __ext4_unlink+0x6ed/0xba0 [ 187.937949][ T5827] ? __ext4_read_dirblock+0x890/0x890 [ 187.943326][ T5827] ? rwsem_write_trylock+0x166/0x210 [ 187.948623][ T5827] ? inode_permission+0xf7/0x450 [ 187.953565][ T5827] ? clear_nonspinnable+0x60/0x60 [ 187.958599][ T5827] ext4_unlink+0x1d5/0x670 [ 187.963018][ T5827] vfs_unlink+0x359/0x5f0 [ 187.967354][ T5827] do_unlinkat+0x4a5/0x820 [ 187.971769][ T5827] ? fsnotify_link_count+0xf0/0xf0 [ 187.976890][ T5827] __x64_sys_unlink+0x45/0x50 [ 187.981569][ T5827] do_syscall_64+0x3b/0xb0 [ 187.985990][ T5827] ? clear_bhb_loop+0x45/0xa0 [ 187.990767][ T5827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.996663][ T5827] RIP: 0033:0x7f1d01f7fed9 [ 188.001071][ T5827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.020671][ T5827] RSP: 002b:00007f1d02d27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 188.029083][ T5827] RAX: ffffffffffffffda RBX: 00007f1d02145fa0 RCX: 00007f1d01f7fed9 [ 188.037052][ T5827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 188.045015][ T5827] RBP: 00007f1d01ff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 188.052983][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.060956][ T5827] R13: 0000000000000000 R14: 00007f1d02145fa0 R15: 00007ffcbd384588 [ 188.068930][ T5827] [ 188.072293][ T5827] Kernel Offset: disabled [ 188.076616][ T5827] Rebooting in 86400 seconds..