last executing test programs: 58.339993807s ago: executing program 3 (id=168): socket$netlink(0x10, 0x3, 0x0) setfsgid(0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x6, 0x0, 0x0) 57.118615988s ago: executing program 3 (id=172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000002c0), 0xfe, 0x4fb, &(0x7f0000000880)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 55.7193632s ago: executing program 3 (id=178): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r0}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 54.811910835s ago: executing program 3 (id=181): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) rmdir(&(0x7f0000000100)='./control\x00') 53.414772577s ago: executing program 3 (id=187): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x141341) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd09e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) dup3(0xffffffffffffffff, r0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x100000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004cc0)=[{{0x0, 0xfffffffffffffdb9, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x400000, 0x100000000000000) 52.534118049s ago: executing program 3 (id=191): getitimer(0x0, 0x0) 51.475827062s ago: executing program 32 (id=191): getitimer(0x0, 0x0) 9.991658074s ago: executing program 1 (id=339): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x0) 8.887518671s ago: executing program 1 (id=343): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 7.831033574s ago: executing program 1 (id=345): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x107) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x64000830) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x44000, 0x0) finit_module(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x35) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x15, &(0x7f00000000c0)={@local, @empty, @void, {@generic={0x7, "c04cdb70112cb8"}}}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r6, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.149425714s ago: executing program 0 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{r0}, &(0x7f0000000240), &(0x7f0000000780)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @random='\a\x00\x00 \x00'}) 3.97449628s ago: executing program 4 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c000000020601046c0000000000000000000000050005000a0000000700010006000000050004000000f4ff0900020073797a3200f8ffff15000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) 3.756109735s ago: executing program 4 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000200000000000000000003003e0000000000000000007c80000040000000000000000000000000f800000000000000003800010000000000000003"], 0x9a) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3.701656552s ago: executing program 4 (id=353): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x0) 3.137748977s ago: executing program 4 (id=354): r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}}, 0x0) 3.049450997s ago: executing program 2 (id=355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, 0x0, 0x0) 2.987690804s ago: executing program 1 (id=356): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.932107021s ago: executing program 0 (id=357): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x38, 0x3c, 0x9, 0x0, 0x0, {0x1}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}, 0x38}}, 0x0) 2.848717881s ago: executing program 4 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.842098071s ago: executing program 2 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000040a7923f8d5019091de8e2da7a8d6"], 0x20}}, 0x0) 2.751985152s ago: executing program 1 (id=360): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r0}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 2.751812562s ago: executing program 0 (id=361): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000340)={[{@nls={'nls', 0x3d, 'macroman'}}, {@nobarrier}, {@nobarrier}, {@force}, {@force}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6b4, &(0x7f0000000f00)="$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") r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0xffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x8001, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0xb0ce81821db1894f}) syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.620083487s ago: executing program 2 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000003380)={0x11, 0x1a, 0x0, 0x1, 0x5d, 0x6, @broadcast}, 0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file1\x00', 0x147842, 0x12) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 1.114143601s ago: executing program 4 (id=363): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ptrace$poke(0x5, r0, 0x0, 0x0) 1.094965124s ago: executing program 5 (id=364): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x0) 1.066572827s ago: executing program 0 (id=365): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0cb97907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0xfdef) 1.046497589s ago: executing program 1 (id=366): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x107) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0x64000830) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x44000, 0x0) finit_module(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x35) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x15, &(0x7f00000000c0)={@local, @empty, @void, {@generic={0x7, "c04cdb70112cb8"}}}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r6, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 879.537949ms ago: executing program 5 (id=367): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r4}, 0x10) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 759.997072ms ago: executing program 2 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@mb_optimize_scan}, {@nodiscard}], [{@seclabel}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") 759.747342ms ago: executing program 0 (id=369): r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}}, 0x0) 636.062387ms ago: executing program 5 (id=370): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) 461.602877ms ago: executing program 0 (id=371): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 367.932038ms ago: executing program 2 (id=372): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000040a7923f8d5019091de8e2da7a8d6"], 0x20}}, 0x0) 365.959598ms ago: executing program 5 (id=373): keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000380)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#%\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce5+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) 290.618867ms ago: executing program 2 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 85.42285ms ago: executing program 5 (id=375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x408c090}, 0x0) 0s ago: executing program 5 (id=376): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}]}}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. syzkaller login: [ 52.432037][ T4235] cgroup: Unknown subsys name 'net' [ 52.575944][ T4235] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.782636][ T4235] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.982865][ T4247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.991456][ T4247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.002147][ T4259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.009947][ T4259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.015089][ T4255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.017864][ T4259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.025669][ T4255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.032314][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.039193][ T4255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.046696][ T4259] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.060463][ T4259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.060463][ T4255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.061886][ T4259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.069081][ T4255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.076283][ T4259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.082984][ T4255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.089485][ T4259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.096156][ T4255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.103205][ T4259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.109676][ T4255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.117188][ T4261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.124897][ T4255] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.134143][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.138030][ T4255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.176260][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.186822][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.197121][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.241885][ T4255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.249482][ T4255] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.258021][ T4255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.555699][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 55.687092][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 55.738531][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 55.754299][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 55.772279][ T4245] chnl_net:caif_netlink_parms(): no params data found [ 55.796209][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.804588][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.813080][ T4253] device bridge_slave_0 entered promiscuous mode [ 55.852968][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.860128][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.867958][ T4253] device bridge_slave_1 entered promiscuous mode [ 55.919605][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.926845][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.935417][ T4257] device bridge_slave_0 entered promiscuous mode [ 55.970563][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.977880][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.985736][ T4257] device bridge_slave_1 entered promiscuous mode [ 55.995458][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.009045][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.020419][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.027663][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.035814][ T4246] device bridge_slave_0 entered promiscuous mode [ 56.074486][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.081890][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.089510][ T4246] device bridge_slave_1 entered promiscuous mode [ 56.096814][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.103952][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.112264][ T4254] device bridge_slave_0 entered promiscuous mode [ 56.131770][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.138873][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.147426][ T4245] device bridge_slave_0 entered promiscuous mode [ 56.170046][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.177552][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.185600][ T4254] device bridge_slave_1 entered promiscuous mode [ 56.194494][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.204040][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.211267][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.218937][ T4245] device bridge_slave_1 entered promiscuous mode [ 56.228079][ T4253] team0: Port device team_slave_0 added [ 56.250448][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.266413][ T4253] team0: Port device team_slave_1 added [ 56.281472][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.317397][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.335317][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.346212][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.363075][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.372884][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.379821][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.405773][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.418938][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.426067][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.452098][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.473117][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.484427][ T4257] team0: Port device team_slave_0 added [ 56.517942][ T4257] team0: Port device team_slave_1 added [ 56.546163][ T4245] team0: Port device team_slave_0 added [ 56.554336][ T4246] team0: Port device team_slave_0 added [ 56.571291][ T4254] team0: Port device team_slave_0 added [ 56.578118][ T4246] team0: Port device team_slave_1 added [ 56.585990][ T4245] team0: Port device team_slave_1 added [ 56.606207][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.613295][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.639268][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.653447][ T4254] team0: Port device team_slave_1 added [ 56.679124][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.686440][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.712659][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.752896][ T4253] device hsr_slave_0 entered promiscuous mode [ 56.759581][ T4253] device hsr_slave_1 entered promiscuous mode [ 56.778226][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.785341][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.811293][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.822769][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.829726][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.855915][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.876976][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.884061][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.910028][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.921542][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.928495][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.954452][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.969587][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.977054][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.003214][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.021300][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.028258][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.054171][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.082762][ T4257] device hsr_slave_0 entered promiscuous mode [ 57.089380][ T4257] device hsr_slave_1 entered promiscuous mode [ 57.096393][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.104278][ T4257] Cannot create hsr debugfs directory [ 57.185396][ T4254] device hsr_slave_0 entered promiscuous mode [ 57.192600][ T4254] device hsr_slave_1 entered promiscuous mode [ 57.199004][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.207003][ T4254] Cannot create hsr debugfs directory [ 57.215457][ T4245] device hsr_slave_0 entered promiscuous mode [ 57.221875][ T4255] Bluetooth: hci1: command tx timeout [ 57.221885][ T4247] Bluetooth: hci2: command tx timeout [ 57.227453][ T4255] Bluetooth: hci3: command tx timeout [ 57.232927][ T4262] Bluetooth: hci0: command tx timeout [ 57.247003][ T4245] device hsr_slave_1 entered promiscuous mode [ 57.253829][ T4245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.261503][ T4245] Cannot create hsr debugfs directory [ 57.301056][ T4247] Bluetooth: hci4: command tx timeout [ 57.301091][ T4246] device hsr_slave_0 entered promiscuous mode [ 57.315992][ T4246] device hsr_slave_1 entered promiscuous mode [ 57.322693][ T4246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.330239][ T4246] Cannot create hsr debugfs directory [ 57.602390][ T4253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.618079][ T4253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.627870][ T4253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.640021][ T4253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.670717][ T4246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.680046][ T4246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.696058][ T4246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.717725][ T4246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.764342][ T4254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.776946][ T4254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.787144][ T4254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.804133][ T4254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.887238][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.897040][ T4245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.907199][ T4245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.918347][ T4245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.946260][ T4245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.981526][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.992158][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.002518][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.053627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.063678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.074361][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.081630][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.090407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.107170][ T4257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.117144][ T4257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.130706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.142087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.150400][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.157523][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.170947][ T4257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.192475][ T4257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.206992][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.215940][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.236576][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.252599][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.262450][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.271238][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.279932][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.294162][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.312851][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.320675][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.328888][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.354563][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.363795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.375825][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.393927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.402599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.413144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.422898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.431601][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.438648][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.452805][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.465817][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.477773][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.491459][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.505513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.513990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.523061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.532669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.541773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.550078][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.557217][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.594565][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.605507][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.617799][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.627130][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.642080][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.650617][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.657752][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.675898][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.684455][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.693421][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.702681][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.709738][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.719588][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.734402][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.767729][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.793951][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.809512][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.818734][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.829309][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.837997][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.845119][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.853429][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.862497][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.871042][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.878098][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.886355][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.895713][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.904818][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.913663][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.922519][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.930767][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.967824][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.976347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.985211][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.995216][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.004240][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.013916][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.023333][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.032416][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.040759][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.050038][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.058469][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.067024][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.075705][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.084267][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.092694][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.101820][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.110331][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.118450][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.136378][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.148904][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.159116][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.169150][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.179124][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.187911][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.197034][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.206191][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.215675][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.222818][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.232858][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.249849][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.272948][ T4246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.285088][ T4246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.301009][ T4247] Bluetooth: hci0: command tx timeout [ 59.301720][ T4262] Bluetooth: hci2: command tx timeout [ 59.306442][ T4247] Bluetooth: hci3: command tx timeout [ 59.311814][ T4262] Bluetooth: hci1: command tx timeout [ 59.322104][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.331907][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.342811][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.352861][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.361707][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.369371][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.377602][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.386436][ T4247] Bluetooth: hci4: command tx timeout [ 59.393423][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.402011][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.409125][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.416830][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.434439][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.450128][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.485272][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.517808][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.528007][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.555918][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.568243][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.583365][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.597380][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.607854][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.647082][ T4257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.674881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.689829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.708511][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.731112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.738581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.762592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.783395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.824741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.847225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.868354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.888328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.917121][ T4253] device veth0_vlan entered promiscuous mode [ 59.953306][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.960359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.971333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.990354][ T4253] device veth1_vlan entered promiscuous mode [ 59.999720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.009086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.026396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.044486][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.078835][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.103151][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.115158][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.157171][ T4245] device veth0_vlan entered promiscuous mode [ 60.164773][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.173489][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.181641][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.190660][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.209704][ T4253] device veth0_macvtap entered promiscuous mode [ 60.225463][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.246137][ T4245] device veth1_vlan entered promiscuous mode [ 60.255317][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.265176][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.273970][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.285807][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.297368][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.306718][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.335831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.344665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.353937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.379400][ T4245] device veth0_macvtap entered promiscuous mode [ 60.387809][ T4253] device veth1_macvtap entered promiscuous mode [ 60.398905][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.407243][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.416644][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.425736][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.434882][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.444278][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.458221][ T4245] device veth1_macvtap entered promiscuous mode [ 60.484647][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.494219][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.503713][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.513268][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.521615][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.529916][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.538326][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.555735][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.566346][ T4257] device veth0_vlan entered promiscuous mode [ 60.578286][ T4246] device veth0_vlan entered promiscuous mode [ 60.588024][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.597106][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.606833][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.615152][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.624437][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.632735][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.643305][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.658479][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.669912][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.681054][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.691962][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.703538][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.715044][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.726583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.735640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.745676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.754432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.763494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.773231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.783800][ T4253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.793208][ T4253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.801941][ T4253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.811726][ T4253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.828224][ T4257] device veth1_vlan entered promiscuous mode [ 60.842661][ T4246] device veth1_vlan entered promiscuous mode [ 60.854176][ T4245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.863520][ T4245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.872255][ T4245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.881450][ T4245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.913587][ T4254] device veth0_vlan entered promiscuous mode [ 60.938609][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.947708][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.956962][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.965264][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.989447][ T4246] device veth0_macvtap entered promiscuous mode [ 61.007251][ T4257] device veth0_macvtap entered promiscuous mode [ 61.019688][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.036162][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.045605][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.054548][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.078204][ T4254] device veth1_vlan entered promiscuous mode [ 61.087078][ T4246] device veth1_macvtap entered promiscuous mode [ 61.097095][ T4257] device veth1_macvtap entered promiscuous mode [ 61.107133][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.116273][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.125090][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.133573][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.143273][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.191035][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.202025][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.212788][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.223826][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.236202][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.257603][ T4254] device veth0_macvtap entered promiscuous mode [ 61.287004][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.296428][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.306912][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.316319][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.325109][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.334316][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.345009][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.355854][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.366090][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.376974][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.381581][ T4247] Bluetooth: hci3: command tx timeout [ 61.388303][ T4259] Bluetooth: hci1: command tx timeout [ 61.392258][ T4247] Bluetooth: hci2: command tx timeout [ 61.397536][ T4259] Bluetooth: hci0: command tx timeout [ 61.405062][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.418101][ T4254] device veth1_macvtap entered promiscuous mode [ 61.441865][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.454409][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.462140][ T4259] Bluetooth: hci4: command tx timeout [ 61.466947][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.480168][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.490244][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.501643][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.513115][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.520477][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.528893][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.538029][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.547737][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.556330][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.572303][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.582493][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.591660][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.600353][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.622352][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.636002][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.644311][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.648391][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.668108][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.678946][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.688782][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.699557][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.713154][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.720743][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.729565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.738179][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.750687][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.761588][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.772043][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.782724][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.793634][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.804118][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.814233][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.824919][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.837695][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.868135][ T4257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.876952][ T4257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.887919][ T4257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.896910][ T4257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.908371][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.917308][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.928713][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.937315][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.947834][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.954747][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.965096][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.975738][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.985716][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.996547][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.006410][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.016860][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.029159][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.043910][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.053417][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.074575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.084597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.093502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.103985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.119734][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.128742][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.137723][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.146683][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.252286][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.275026][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.290405][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.309980][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.320570][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.375129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.390741][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.408466][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.412875][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.459465][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.468698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.494206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.563986][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.609341][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.638199][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.648910][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.651883][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.688013][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.710808][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.734448][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.767110][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.793375][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.801373][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.897493][ T4338] device bridge_slave_1 left promiscuous mode [ 62.921865][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.955100][ T4340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 62.978448][ T4338] device bridge_slave_0 left promiscuous mode [ 63.004564][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.336783][ T4353] loop1: detected capacity change from 0 to 128 [ 63.369068][ T4354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 63.447763][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 63.463908][ T4262] Bluetooth: hci0: command tx timeout [ 63.469381][ T4262] Bluetooth: hci2: command tx timeout [ 63.480481][ T4259] Bluetooth: hci1: command tx timeout [ 63.484797][ T4358] loop4: detected capacity change from 0 to 512 [ 63.491153][ T4247] Bluetooth: hci3: command tx timeout [ 63.537341][ T4358] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.541648][ T4262] Bluetooth: hci4: command tx timeout [ 63.583624][ T26] audit: type=1326 audit(1730282390.279:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 63.649458][ T4361] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 63.651005][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 63.657906][ T4361] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 63.676851][ T4358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.687735][ T4361] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 63.696816][ T26] audit: type=1326 audit(1730282390.279:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 63.763015][ T26] audit: type=1326 audit(1730282390.279:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 63.774808][ T4358] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.787384][ T26] audit: type=1326 audit(1730282390.279:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 63.821930][ T26] audit: type=1326 audit(1730282390.279:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 63.849089][ T4358] EXT4-fs (loop4): 1 truncate cleaned up [ 63.863277][ T4358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.872705][ T26] audit: type=1326 audit(1730282390.279:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 63.942515][ T26] audit: type=1326 audit(1730282390.279:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 63.995022][ T4375] loop3: detected capacity change from 0 to 1024 [ 64.010998][ T26] audit: type=1326 audit(1730282390.279:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 64.065546][ T26] audit: type=1326 audit(1730282390.279:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 64.066308][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 64.088100][ T26] audit: type=1326 audit(1730282390.279:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 64.140097][ T4375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.018713][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 65.403526][ T4409] rdma_op ffff88805d1cc1f0 conn xmit_rdma 0000000000000000 [ 65.437274][ T4408] loop0: detected capacity change from 0 to 2048 [ 65.528124][ T4408] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.713506][ T4418] loop3: detected capacity change from 0 to 1024 [ 65.808259][ T4418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.831260][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 66.073487][ T4437] syz.2.42[4437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.073581][ T4437] syz.2.42[4437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.704183][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 67.034041][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.044161][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.057554][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.370475][ T4479] netlink: 76 bytes leftover after parsing attributes in process `syz.4.56'. [ 67.436996][ T4481] loop2: detected capacity change from 0 to 1024 [ 67.505348][ T4481] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.565545][ T4489] process 'syz.1.63' launched './file0' with NULL argv: empty string added [ 68.443285][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 68.458474][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.466032][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.794155][ T4524] 9pnet_fd: Insufficient options for proto=fd [ 69.059528][ T4533] loop0: detected capacity change from 0 to 1024 [ 69.139084][ T4537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.162193][ T4533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.200274][ T4533] Zero length message leads to an empty skb [ 69.376468][ T4537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.404552][ T26] kauditd_printk_skb: 113 callbacks suppressed [ 69.404565][ T26] audit: type=1326 audit(1730282396.099:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 69.681166][ T26] audit: type=1326 audit(1730282396.129:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 69.963217][ T26] audit: type=1326 audit(1730282396.129:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 70.029447][ T26] audit: type=1326 audit(1730282396.129:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 70.097284][ T26] audit: type=1326 audit(1730282396.129:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 70.142119][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 70.295347][ T26] audit: type=1326 audit(1730282396.129:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 70.296228][ T4559] loop3: detected capacity change from 0 to 1024 [ 70.325574][ T4559] ======================================================= [ 70.325574][ T4559] WARNING: The mand mount option has been deprecated and [ 70.325574][ T4559] and is ignored by this kernel. Remove the mand [ 70.325574][ T4559] option from the mount to silence this warning. [ 70.325574][ T4559] ======================================================= [ 70.372962][ T26] audit: type=1326 audit(1730282396.129:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 70.463730][ T4559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 70.507398][ T4559] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.702046][ T4570] syz.4.91[4570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.702149][ T4570] syz.4.91[4570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.750353][ T4573] loop0: detected capacity change from 0 to 512 [ 70.750428][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 70.845856][ T4573] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.903698][ T4573] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.059150][ T4583] loop4: detected capacity change from 0 to 1024 [ 71.174764][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 71.231810][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.238351][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.307672][ T4579] loop1: detected capacity change from 0 to 4096 [ 71.373529][ T4591] loop2: detected capacity change from 0 to 2048 [ 71.433178][ T4314] hfsplus: b-tree write err: -5, ino 4 [ 71.464066][ T4591] loop2: p1 < > p4 [ 71.477504][ T4591] loop2: p4 size 8388608 extends beyond EOD, truncated [ 71.597353][ T4598] loop4: detected capacity change from 0 to 16 [ 71.723201][ T4598] erofs: (device loop4): mounted with root inode @ nid 36. [ 73.205949][ T4622] loop1: detected capacity change from 0 to 128 [ 73.213078][ T4620] loop4: detected capacity change from 0 to 512 [ 73.273338][ T4620] EXT4-fs: Ignoring removed bh option [ 73.345749][ T4620] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 73.446416][ T4620] EXT4-fs (loop4): 1 truncate cleaned up [ 73.463698][ T4620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 73.489995][ T4627] loop0: detected capacity change from 0 to 1024 [ 73.517733][ T4622] syz.1.110: attempt to access beyond end of device [ 73.517733][ T4622] loop1: rw=2049, sector=145, nr_sectors = 240 limit=128 [ 73.693194][ T4621] syz.1.110: attempt to access beyond end of device [ 73.693194][ T4621] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 73.731498][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 73.831759][ T4622] syz.1.110: attempt to access beyond end of device [ 73.831759][ T4622] loop1: rw=0, sector=177, nr_sectors = 1 limit=128 [ 73.949519][ T4634] loop4: detected capacity change from 0 to 2048 [ 74.074446][ T4634] loop4: p1 < > p4 [ 74.090762][ T4634] loop4: p4 size 8388608 extends beyond EOD, truncated [ 74.356362][ T34] hfsplus: b-tree write err: -5, ino 4 [ 74.401869][ T4254] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 74.405558][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.419049][ T4370] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.466504][ T4370] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.474289][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.495598][ T4370] Buffer I/O error on dev loop4p4, logical block 1, async page read [ 74.526765][ T4373] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 74.527186][ T4641] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.555466][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.595349][ T4373] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 74.634062][ T4643] loop0: detected capacity change from 0 to 4096 [ 74.646515][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.656902][ T4373] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 74.853123][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.922141][ T4373] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 74.964778][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.201371][ T4373] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 75.452303][ T4656] loop1: detected capacity change from 0 to 256 [ 75.517774][ T4656] FAT-fs (loop1): Unrecognized mount option "do‡s" or missing value [ 75.754905][ T4370] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.779319][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 75.793429][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 76.444406][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.458330][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 76.504057][ T1167] cfg80211: failed to load regulatory.db [ 76.619874][ T4675] syz.3.126[4675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.619978][ T4675] syz.3.126[4675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.837435][ T4679] loop1: detected capacity change from 0 to 1024 [ 78.141632][ T4695] hfsplus: b-tree write err: -5, ino 4 [ 78.156655][ T4697] xt_CT: No such helper "snmp_trap" [ 78.610174][ T4705] netlink: 'syz.3.135': attribute type 3 has an invalid length. [ 78.643047][ T4705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.135'. [ 79.759006][ T4733] loop3: detected capacity change from 0 to 1024 [ 79.788476][ T26] audit: type=1326 audit(1730282406.479:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 79.851832][ T4738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 79.905516][ T4733] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.918534][ T26] audit: type=1326 audit(1730282406.509:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 79.943119][ T4738] netlink: 124 bytes leftover after parsing attributes in process `syz.1.148'. [ 80.155470][ T26] audit: type=1326 audit(1730282406.509:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 80.345797][ T26] audit: type=1326 audit(1730282406.509:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 80.813348][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 80.934786][ T26] audit: type=1326 audit(1730282406.509:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 81.004048][ T26] audit: type=1326 audit(1730282406.509:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 81.130840][ C1] sched: RT throttling activated [ 81.161069][ T26] audit: type=1326 audit(1730282406.509:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 81.202907][ T26] audit: type=1326 audit(1730282406.509:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 81.302722][ T26] audit: type=1326 audit(1730282406.509:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 81.414921][ T4764] mmap: syz.1.153 (4764) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.430884][ T26] audit: type=1326 audit(1730282406.509:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 82.128097][ T4782] loop3: detected capacity change from 0 to 4096 [ 83.569395][ T4800] loop0: detected capacity change from 0 to 1024 [ 83.938897][ T4800] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.311049][ T4810] loop2: detected capacity change from 0 to 512 [ 84.555730][ T4810] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.605882][ T4810] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.169: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 84.727132][ T4810] EXT4-fs error (device loop2): ext4_quota_enable:6995: comm syz.2.169: Bad quota inode: 4, type: 1 [ 84.773439][ T4810] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.823279][ T4818] loop3: detected capacity change from 0 to 512 [ 84.840683][ T4810] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 84.866339][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 84.915191][ T4818] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.921946][ T4821] loop4: detected capacity change from 0 to 2048 [ 84.930618][ T4810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.990327][ T4818] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.027838][ T4821] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 85.094901][ T4818] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.146569][ T4827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 85.149320][ T4818] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 85.161799][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 85.161812][ T26] audit: type=1800 audit(1730282411.859:149): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 85.193726][ T4818] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #16: comm syz.3.172: corrupted xattr block 31 [ 85.588980][ T4818] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 85.852143][ T4818] EXT4-fs (loop3): 1 orphan inode deleted [ 85.942194][ T26] audit: type=1800 audit(1730282411.889:150): pid=4821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 85.975405][ T4823] loop0: detected capacity change from 0 to 8192 [ 86.040736][ T4818] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.057140][ T4818] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 86.084594][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 86.118926][ T4823] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.152407][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 86.181826][ T26] audit: type=1326 audit(1730282412.879:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 86.280511][ T4833] loop1: detected capacity change from 0 to 4096 [ 86.365504][ T26] audit: type=1326 audit(1730282412.879:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 86.428789][ T26] audit: type=1326 audit(1730282412.899:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccad57d0b0 code=0x7ffc0000 [ 86.465257][ T26] audit: type=1326 audit(1730282412.899:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fccad57ff47 code=0x7ffc0000 [ 86.505703][ T26] audit: type=1326 audit(1730282412.899:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 86.624615][ T26] audit: type=1326 audit(1730282412.899:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fccad57ff47 code=0x7ffc0000 [ 86.652902][ T26] audit: type=1326 audit(1730282412.899:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fccad57d3aa code=0x7ffc0000 [ 86.683181][ T26] audit: type=1326 audit(1730282412.899:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 86.924776][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 87.197236][ T4846] loop3: detected capacity change from 0 to 1024 [ 87.224686][ T4846] EXT4-fs: Ignoring removed orlov option [ 87.261311][ T4846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.437355][ T4846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.447615][ T4850] loop2: detected capacity change from 0 to 1024 [ 87.685463][ T4850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.768409][ T4846] loop3: detected capacity change from 1024 to 64 [ 87.826475][ T4860] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #18: lblock 0: comm syz.3.181: error -12 reading directory block [ 88.425665][ T4257] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.546505][ T4257] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.588531][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 88.622456][ T4872] loop4: detected capacity change from 0 to 1024 [ 88.630655][ T4257] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.644659][ T4257] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.659927][ T4257] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.673873][ T4257] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.687670][ T4257] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.702117][ T4257] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 88.717495][ T4257] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 89.206853][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 89.236785][ T4847] kmmpd-loop3: attempt to access beyond end of device [ 89.236785][ T4847] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 89.264324][ T4847] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 89.288827][ T4257] syz-executor (4257) used greatest stack depth: 19576 bytes left [ 89.298963][ T4314] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.573794][ T4314] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.593583][ T4551] hfsplus: b-tree write err: -5, ino 4 [ 90.223262][ T4314] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.482651][ T4314] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.500477][ T4948] loop2: detected capacity change from 0 to 512 [ 90.709820][ T4948] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.194: invalid block [ 90.760484][ T4948] EXT4-fs (loop2): Remounting filesystem read-only [ 90.788936][ T4948] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.194: invalid indirect mapped block 1024 (level 0) [ 90.885010][ T4948] EXT4-fs (loop2): Remounting filesystem read-only [ 90.911487][ T4948] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.194: bg 0: block 35: padding at end of block bitmap is not set [ 90.926523][ T4948] EXT4-fs (loop2): Remounting filesystem read-only [ 90.936927][ T4948] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 90.977424][ T4948] EXT4-fs (loop2): Remounting filesystem read-only [ 90.998974][ T4948] EXT4-fs (loop2): 1 truncate cleaned up [ 91.012714][ T4948] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.160029][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 91.188502][ T4259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.198159][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.216443][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.237366][ T4259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.246144][ T4255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.259755][ T4255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.484605][ T4972] loop4: detected capacity change from 0 to 1024 [ 91.528915][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 91.528949][ T26] audit: type=1326 audit(1730282418.219:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 91.572924][ T4972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.672468][ T26] audit: type=1326 audit(1730282418.219:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 91.696199][ T26] audit: type=1326 audit(1730282418.219:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 91.729583][ T26] audit: type=1326 audit(1730282418.219:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 91.762295][ T26] audit: type=1326 audit(1730282418.219:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4976 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 92.063622][ T4985] loop1: detected capacity change from 0 to 1024 [ 92.518343][ T4934] hfsplus: b-tree write err: -5, ino 4 [ 92.532753][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 92.761544][ T4934] hfsplus: b-tree write err: -5, ino 4 [ 93.301951][ T4262] Bluetooth: hci3: command tx timeout [ 93.701102][ T26] audit: type=1326 audit(1730282420.329:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 93.902480][ T5007] netlink: 36 bytes leftover after parsing attributes in process `syz.4.208'. [ 93.917121][ T26] audit: type=1326 audit(1730282420.339:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 93.975518][ T26] audit: type=1326 audit(1730282420.339:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 94.007525][ T26] audit: type=1326 audit(1730282420.339:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 94.036201][ T26] audit: type=1326 audit(1730282420.339:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 94.065618][ T4962] chnl_net:caif_netlink_parms(): no params data found [ 94.698302][ T4314] device hsr_slave_0 left promiscuous mode [ 94.718829][ T4314] device hsr_slave_1 left promiscuous mode [ 94.749779][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.779541][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.903383][ T4314] device bridge_slave_1 left promiscuous mode [ 94.926932][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.015790][ T4314] device bridge_slave_0 left promiscuous mode [ 95.050292][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.380924][ T4255] Bluetooth: hci3: command tx timeout [ 95.513711][ T4314] device veth1_macvtap left promiscuous mode [ 95.542365][ T4314] device veth0_macvtap left promiscuous mode [ 95.548512][ T4314] device veth1_vlan left promiscuous mode [ 95.584332][ T4314] device veth0_vlan left promiscuous mode [ 95.746564][ T5032] loop1: detected capacity change from 0 to 1024 [ 95.763917][ T5031] loop4: detected capacity change from 0 to 1024 [ 96.005686][ T5031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.637178][ T4933] hfsplus: b-tree write err: -5, ino 4 [ 96.982603][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 97.125142][ T5042] loop1: detected capacity change from 0 to 512 [ 97.136845][ T5042] EXT4-fs: Ignoring removed orlov option [ 97.157158][ T5042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.273242][ T5042] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.300532][ T5042] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.217: bg 0: block 248: padding at end of block bitmap is not set [ 97.327427][ T5042] __quota_error: 17 callbacks suppressed [ 97.327466][ T5042] Quota error (device loop1): write_blk: dquota write failed [ 97.341132][ T5042] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 97.351216][ T5042] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.217: Failed to acquire dquot type 1 [ 97.377681][ T5042] EXT4-fs (loop1): 1 truncate cleaned up [ 97.388576][ T5042] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.465095][ T4255] Bluetooth: hci3: command tx timeout [ 97.727923][ T26] audit: type=1326 audit(1730282424.399:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 97.804225][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 97.810737][ T26] audit: type=1326 audit(1730282424.399:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 97.890002][ T26] audit: type=1326 audit(1730282424.399:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 97.947368][ T26] audit: type=1326 audit(1730282424.399:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 97.961596][ T5050] loop0: detected capacity change from 0 to 512 [ 97.994460][ T26] audit: type=1326 audit(1730282424.399:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5046 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 98.043215][ T5050] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.159618][ T5050] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.320758][ T5060] loop4: detected capacity change from 0 to 2048 [ 98.345657][ T5060] loop4: p1 < > p4 [ 98.378703][ T5060] loop4: p4 size 8388608 extends beyond EOD, truncated [ 98.408637][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 98.602459][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 98.722417][ T4314] team0 (unregistering): Port device team_slave_1 removed [ 98.819279][ T4314] team0 (unregistering): Port device team_slave_0 removed [ 98.909640][ T4314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.018595][ T4314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.278328][ T5079] loop2: detected capacity change from 0 to 1024 [ 99.543557][ T4255] Bluetooth: hci3: command tx timeout [ 99.625723][ T4314] bond0 (unregistering): Released all slaves [ 99.767627][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.790964][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.799258][ T4962] device bridge_slave_0 entered promiscuous mode [ 99.829827][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.861890][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.889071][ T4962] device bridge_slave_1 entered promiscuous mode [ 100.019298][ T4962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.031920][ T5089] loop4: detected capacity change from 0 to 512 [ 100.048025][ T4962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.069306][ T5090] loop1: detected capacity change from 0 to 1024 [ 100.209505][ T5089] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.239138][ T5089] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.229: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 100.276944][ T4922] hfsplus: b-tree write err: -5, ino 4 [ 100.477220][ T5090] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.752386][ T4962] team0: Port device team_slave_0 added [ 100.774270][ T4962] team0: Port device team_slave_1 added [ 100.781811][ T5089] EXT4-fs error (device loop4): ext4_quota_enable:6995: comm syz.4.229: Bad quota inode: 4, type: 1 [ 100.971068][ T5089] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.002465][ T5089] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 101.129192][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.141269][ T5089] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.165497][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.458383][ T4962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.608464][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 102.017652][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.169907][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.177991][ T5104] loop0: detected capacity change from 0 to 128 [ 102.204729][ T4962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.343097][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 102.376372][ T5108] syz.0.231: attempt to access beyond end of device [ 102.376372][ T5108] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 102.398682][ T5104] syz.0.231: attempt to access beyond end of device [ 102.398682][ T5104] loop0: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 102.507668][ T5121] loop2: detected capacity change from 0 to 2048 [ 102.564128][ T4962] device hsr_slave_0 entered promiscuous mode [ 102.572944][ T5121] loop2: p1 < > p4 [ 102.578884][ T5121] loop2: p4 size 8388608 extends beyond EOD, truncated [ 102.623089][ T4962] device hsr_slave_1 entered promiscuous mode [ 102.656044][ T4962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.670116][ T4962] Cannot create hsr debugfs directory [ 102.682328][ T4325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.911244][ T4325] usb 2-1: device descriptor read/64, error -71 [ 102.918712][ T26] audit: type=1326 audit(1730282429.609:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 102.985462][ T5137] loop2: detected capacity change from 0 to 1024 [ 102.996297][ T26] audit: type=1326 audit(1730282429.609:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 103.091808][ T5137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 103.096577][ T26] audit: type=1326 audit(1730282429.609:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 103.176725][ T4962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.186921][ T4962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.196790][ T4962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.206724][ T4962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.222109][ T4325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.301795][ T26] audit: type=1326 audit(1730282429.609:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 103.317718][ T5142] device syzkaller0 entered promiscuous mode [ 103.340940][ T26] audit: type=1326 audit(1730282429.609:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 103.578811][ T26] audit: type=1326 audit(1730282429.609:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 103.776120][ T26] audit: type=1326 audit(1730282429.609:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 103.836239][ T26] audit: type=1326 audit(1730282429.609:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 103.899668][ T26] audit: type=1326 audit(1730282429.609:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 103.957958][ T26] audit: type=1326 audit(1730282429.609:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5134 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 104.027450][ T4325] usb 2-1: device descriptor read/64, error -71 [ 104.051876][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 104.161116][ T4325] usb usb2-port1: attempt power cycle [ 104.220672][ T5155] loop2: detected capacity change from 0 to 512 [ 104.256732][ T5157] loop0: detected capacity change from 0 to 16 [ 104.278840][ T5157] erofs: (device loop0): mounted with root inode @ nid 36. [ 104.303253][ T5155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.336591][ T5155] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.358197][ T4962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.441098][ T5162] loop4: detected capacity change from 0 to 128 [ 104.469187][ T5162] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 104.479689][ T5162] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 104.579211][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.921784][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.155672][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.531600][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 105.569310][ T4962] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.639671][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.661009][ T4325] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.686457][ T5173] loop0: detected capacity change from 0 to 512 [ 105.708643][ T5173] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.711812][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.726186][ T5173] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.243: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 105.753196][ T5173] EXT4-fs error (device loop0): ext4_quota_enable:6995: comm syz.0.243: Bad quota inode: 4, type: 1 [ 105.778856][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.786062][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.795971][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.855688][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.871633][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.881092][ T4941] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.888206][ T4941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.891226][ T5173] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.912046][ T4325] usb 2-1: device not accepting address 4, error -71 [ 105.966139][ T5173] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 105.983869][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.987514][ T5173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.991323][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.061025][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.069653][ T5184] loop1: detected capacity change from 0 to 2048 [ 106.086824][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.109947][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.148000][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.167312][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.188555][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.214170][ T5184] loop1: p1 < > p4 [ 106.225477][ T5184] loop1: p4 size 8388608 extends beyond EOD, truncated [ 106.258843][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.268042][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.276642][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.311010][ T5186] device bridge_slave_1 left promiscuous mode [ 106.444282][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.906599][ T5186] device bridge_slave_0 left promiscuous mode [ 106.979748][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.032973][ T4373] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.175228][ T4962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.197181][ T4956] udevd[4956]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 107.208539][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.211774][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 107.239765][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.251957][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 107.273073][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.468056][ T5205] loop0: detected capacity change from 0 to 1024 [ 107.582180][ T5205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.711452][ T5207] device syzkaller0 entered promiscuous mode [ 108.308381][ T5222] loop4: detected capacity change from 0 to 16 [ 108.367719][ T5222] erofs: (device loop4): mounted with root inode @ nid 36. [ 108.493225][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 109.466996][ T4255] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 109.482679][ T4255] Bluetooth: hci4: Injecting HCI hardware error event [ 109.491197][ T4262] Bluetooth: hci4: hardware error 0x00 [ 109.651169][ T125] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.883673][ T125] usb 1-1: device descriptor read/64, error -71 [ 110.181353][ T125] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.380577][ T125] usb 1-1: device descriptor read/64, error -71 [ 110.506366][ T125] usb usb1-port1: attempt power cycle [ 110.921094][ T125] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.021145][ T125] usb 1-1: device descriptor read/8, error -71 [ 111.293016][ T125] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.391866][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.395842][ T125] usb 1-1: device descriptor read/8, error -71 [ 111.399314][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.447981][ T5252] device bridge_slave_1 left promiscuous mode [ 111.464864][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.505827][ T5252] device bridge_slave_0 left promiscuous mode [ 111.525695][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.542023][ T125] usb usb1-port1: unable to enumerate USB device [ 111.543058][ T4262] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 111.648266][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.665014][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.708664][ T5261] loop2: detected capacity change from 0 to 1024 [ 111.722698][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 111.752073][ T4962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.821579][ T5261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.543508][ T5283] loop4: detected capacity change from 0 to 512 [ 112.631044][ T5283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.769087][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 112.805175][ T5283] EXT4-fs (loop4): 1 truncate cleaned up [ 112.812765][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 112.812778][ T26] audit: type=1326 audit(1730282439.509:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 112.841084][ T5283] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.979971][ T26] audit: type=1326 audit(1730282439.509:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 113.002879][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 113.092373][ T26] audit: type=1326 audit(1730282439.509:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 113.180718][ T26] audit: type=1326 audit(1730282439.509:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 113.238860][ T26] audit: type=1326 audit(1730282439.509:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 113.286889][ T5299] device syzkaller0 entered promiscuous mode [ 113.288102][ T5305] loop4: detected capacity change from 0 to 2048 [ 113.332954][ T26] audit: type=1326 audit(1730282439.539:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.1.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7757e719 code=0x7ffc0000 [ 113.345469][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.397769][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.411557][ T26] audit: type=1326 audit(1730282439.849:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 113.437001][ T5305] loop4: p1 < > p4 [ 113.442312][ T5305] loop4: p4 size 8388608 extends beyond EOD, truncated [ 113.510150][ T26] audit: type=1326 audit(1730282439.849:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 113.512979][ T5312] loop2: detected capacity change from 0 to 512 [ 113.604165][ T26] audit: type=1326 audit(1730282439.859:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 113.670316][ T5312] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 113.688754][ T5312] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 113.699569][ T26] audit: type=1326 audit(1730282439.859:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaad77e719 code=0x7ffc0000 [ 113.719957][ T5312] System zones: 0-1, 15-15, 18-18, 34-34 [ 113.845225][ T5312] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.881284][ T5312] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 113.904626][ T5312] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 113.921116][ T5312] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.274: bg 0: block 40: padding at end of block bitmap is not set [ 113.944651][ T5312] EXT4-fs (loop2): Remounting filesystem read-only [ 113.956890][ T5312] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 113.966279][ T5312] EXT4-fs (loop2): Remounting filesystem read-only [ 113.978599][ T5312] EXT4-fs (loop2): 1 truncate cleaned up [ 113.984655][ T5312] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.162396][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.352518][ T14] usb 1-1: device descriptor read/64, error -71 [ 115.419265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.428000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.487969][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 115.523022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.556359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.587421][ T5335] loop2: detected capacity change from 0 to 1024 [ 115.596874][ T4962] device veth0_vlan entered promiscuous mode [ 115.621622][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.639478][ T4962] device veth1_vlan entered promiscuous mode [ 115.657791][ T5335] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.753393][ T4962] device veth0_macvtap entered promiscuous mode [ 115.767414][ T4962] device veth1_macvtap entered promiscuous mode [ 115.797121][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.885510][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.951096][ T14] usb 1-1: device descriptor read/64, error -71 [ 115.983630][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.082291][ T14] usb usb1-port1: attempt power cycle [ 116.243765][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.457690][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.520993][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.552954][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.606392][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.621243][ T14] usb 1-1: device descriptor read/8, error -71 [ 116.640723][ T5344] loop1: detected capacity change from 0 to 4096 [ 116.657809][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.672719][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 116.675605][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.685922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.695879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.704610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.714893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.725394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.741694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.809606][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.832051][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.905354][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 117.002954][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.014071][ T14] usb 1-1: device descriptor read/8, error -71 [ 117.062398][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.369754][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.430925][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.481551][ T4962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.537476][ T4962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.605693][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.662988][ T14] usb usb1-port1: unable to enumerate USB device [ 117.674684][ T4962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.683764][ T4962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.693254][ T4962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.710949][ T4962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.732525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.757074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.977124][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 117.977138][ T26] audit: type=1326 audit(1730282444.669:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 118.063180][ T5375] device syzkaller0 entered promiscuous mode [ 118.070886][ T26] audit: type=1326 audit(1730282444.669:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 118.131276][ T26] audit: type=1326 audit(1730282444.669:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 118.167476][ T26] audit: type=1326 audit(1730282444.669:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 118.190372][ T26] audit: type=1326 audit(1730282444.669:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 118.223332][ T26] audit: type=1326 audit(1730282444.669:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 118.250972][ T26] audit: type=1326 audit(1730282444.719:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 118.273471][ T26] audit: type=1326 audit(1730282444.739:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccad57d0b0 code=0x7ffc0000 [ 118.295925][ T26] audit: type=1326 audit(1730282444.739:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccad57e719 code=0x7ffc0000 [ 118.327798][ T26] audit: type=1326 audit(1730282444.739:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5376 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fccad57d3aa code=0x7ffc0000 [ 118.916370][ T5391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.295'. [ 119.158625][ T5397] loop0: detected capacity change from 0 to 4096 [ 120.564375][ T4289] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 120.784656][ T4289] usb 1-1: device descriptor read/64, error -71 [ 120.800738][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.829968][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.851895][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.919476][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 120.968636][ T4933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.994627][ T4933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.028126][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.080967][ T4289] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.270964][ T4289] usb 1-1: device descriptor read/64, error -71 [ 121.411429][ T4289] usb usb1-port1: attempt power cycle [ 121.645669][ T5430] loop2: detected capacity change from 0 to 4096 [ 121.762234][ T5443] loop4: detected capacity change from 0 to 1024 [ 121.841051][ T4289] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 121.997689][ T5442] device syzkaller0 entered promiscuous mode [ 123.665941][ T4933] hfsplus: b-tree write err: -5, ino 4 [ 123.721446][ T4289] usb 1-1: device descriptor read/8, error -71 [ 123.952189][ T5460] loop2: detected capacity change from 0 to 16 [ 123.970099][ T5460] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.003042][ T4289] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 124.146109][ T4289] usb 1-1: device descriptor read/8, error -71 [ 124.978500][ T4289] usb usb1-port1: unable to enumerate USB device [ 125.007641][ T5466] loop0: detected capacity change from 0 to 512 [ 125.078049][ T5466] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.316: corrupted xattr block 255 [ 125.130013][ T5466] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 125.138509][ T5466] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.149885][ T5466] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.316: corrupted xattr block 255 [ 125.244254][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 125.327974][ T5474] loop2: detected capacity change from 0 to 2048 [ 125.495326][ T5474] loop2: p1 < > p4 [ 125.504038][ T5474] loop2: p4 size 8388608 extends beyond EOD, truncated [ 126.434949][ T5485] loop0: detected capacity change from 0 to 1024 [ 126.745481][ T5489] loop2: detected capacity change from 0 to 4096 [ 127.666588][ T4695] hfsplus: b-tree write err: -5, ino 4 [ 128.304063][ T4289] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 128.530965][ T4289] usb 1-1: device descriptor read/64, error -71 [ 128.831611][ T4289] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 129.023943][ T5501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.051481][ T5501] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.061066][ T4289] usb 1-1: device descriptor read/64, error -71 [ 129.080479][ T5501] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 129.099155][ T5501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.274701][ T5501] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.289079][ T4289] usb usb1-port1: attempt power cycle [ 129.295277][ T5501] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 129.303606][ T5501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.322994][ T5501] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.329464][ T5501] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 130.448250][ T5501] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.496417][ T5501] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.731172][ T5501] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 130.990701][ T4262] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.221332][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.382356][ T4255] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.491946][ T5520] loop1: detected capacity change from 0 to 2048 [ 131.853700][ T3622] loop1: p1 < > p4 [ 131.896134][ T3622] loop1: p4 size 8388608 extends beyond EOD, truncated [ 131.903635][ T5535] loop2: detected capacity change from 0 to 1024 [ 131.909670][ T5536] loop0: detected capacity change from 0 to 1024 [ 131.968132][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 131.994375][ T5536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.018955][ T5536] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.142489][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 132.154912][ T5536] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814e01c, mo2=0003] [ 132.168851][ T5541] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.185057][ T5536] System zones: 0-1, 3-36 [ 132.438321][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 132.521438][ T4255] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.579146][ T5536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.695541][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.701976][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.885849][ T4934] hfsplus: b-tree write err: -5, ino 4 [ 132.918002][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 133.016730][ T5541] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.069415][ T5553] loop4: detected capacity change from 0 to 1024 [ 133.070998][ T4262] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.118052][ T5553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.173596][ T5541] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.301879][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.531060][ T4262] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.930457][ T5559] device syzkaller0 entered promiscuous mode [ 133.947919][ T5572] loop0: detected capacity change from 0 to 128 [ 133.956387][ T5572] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 133.965769][ T5572] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 134.052943][ T5541] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.073208][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 134.082839][ T4373] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.427011][ T4255] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 134.833073][ T5583] loop4: detected capacity change from 0 to 512 [ 134.979428][ T4255] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.039023][ T5583] __quota_error: 3 callbacks suppressed [ 135.039042][ T5583] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 135.076405][ T5583] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 135.100035][ T5583] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.346: Failed to acquire dquot type 0 [ 135.245982][ T4294] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.259556][ T5583] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 135.284434][ T5583] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 135.296235][ T5583] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.346: Failed to acquire dquot type 0 [ 135.675311][ T5583] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 135.703758][ T5583] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 135.736072][ T5583] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.346: Failed to acquire dquot type 0 [ 135.767556][ T5583] EXT4-fs (loop4): 1 orphan inode deleted [ 135.795076][ T5583] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.811005][ T5583] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.861319][ T4294] usb 2-1: device descriptor read/64, error -71 [ 136.172695][ T5591] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 136.183636][ T5591] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 136.193186][ T5591] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.346: Failed to acquire dquot type 0 [ 136.288987][ T5592] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 136.299857][ T5592] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 136.309424][ T5592] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.346: Failed to acquire dquot type 0 [ 136.371157][ T5591] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.346: Failed to acquire dquot type 0 [ 136.414609][ T5592] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.346: Failed to acquire dquot type 0 [ 136.725768][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 136.796214][ T4294] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.840255][ T5599] loop4: detected capacity change from 0 to 1024 [ 137.105393][ T4294] usb 2-1: device descriptor read/64, error -71 [ 137.269219][ T4294] usb usb2-port1: attempt power cycle [ 137.708442][ T4294] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.901593][ T4695] hfsplus: b-tree write err: -5, ino 4 [ 137.998468][ T5603] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 138.506221][ T4262] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 138.516448][ T4262] Bluetooth: hci1: Injecting HCI hardware error event [ 138.527912][ T4255] Bluetooth: hci1: hardware error 0x00 [ 138.861517][ T4294] usb 2-1: device descriptor read/8, error -71 [ 138.862974][ T5541] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.958483][ T5541] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.002045][ T5541] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.048412][ T5541] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.141454][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 139.211054][ T5625] loop0: detected capacity change from 0 to 1024 [ 140.799572][ T4255] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 140.872762][ T4930] hfsplus: b-tree write err: -5, ino 4 [ 141.069718][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 141.069733][ T26] audit: type=1326 audit(1730282467.759:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.189452][ T26] audit: type=1326 audit(1730282467.759:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.200077][ T5650] loop2: detected capacity change from 0 to 512 [ 141.260915][ T26] audit: type=1326 audit(1730282467.759:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.283398][ T4294] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.297840][ T5650] ext4: Unknown parameter 'seclabel' [ 141.333560][ T26] audit: type=1326 audit(1730282467.759:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.372661][ T4373] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.411084][ T4294] usb 2-1: device descriptor read/8, error -71 [ 141.469537][ T26] audit: type=1326 audit(1730282467.759:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.531150][ T4294] usb usb2-port1: unable to enumerate USB device [ 141.559371][ T5662] loop0: detected capacity change from 0 to 512 [ 141.586570][ T26] audit: type=1326 audit(1730282467.759:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.631062][ T5662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.669990][ T26] audit: type=1326 audit(1730282467.759:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.693127][ T26] audit: type=1326 audit(1730282467.759:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.716100][ T26] audit: type=1326 audit(1730282467.769:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.739030][ T26] audit: type=1326 audit(1730282467.769:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz.5.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6737e719 code=0x7ffc0000 [ 141.741317][ T5662] EXT4-fs (loop0): 1 truncate cleaned up [ 141.831008][ T5662] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.129492][ T5662] ================================================================== [ 142.137603][ T5662] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 142.145352][ T5662] Read of size 18446744073709551572 at addr ffff888059bc7050 by task syz.0.371/5662 [ 142.154722][ T5662] [ 142.157092][ T5662] CPU: 0 PID: 5662 Comm: syz.0.371 Not tainted 6.1.114-syzkaller #0 [ 142.165082][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.175148][ T5662] Call Trace: [ 142.178428][ T5662] [ 142.181366][ T5662] dump_stack_lvl+0x1e3/0x2cb [ 142.186051][ T5662] ? nf_tcp_handle_invalid+0x642/0x642 [ 142.191514][ T5662] ? panic+0x764/0x764 [ 142.195587][ T5662] ? _printk+0xd1/0x111 [ 142.199747][ T5662] ? __virt_addr_valid+0x17f/0x530 [ 142.204866][ T5662] ? __virt_addr_valid+0x17f/0x530 [ 142.209986][ T5662] print_report+0x15f/0x4f0 [ 142.214498][ T5662] ? __virt_addr_valid+0x17f/0x530 [ 142.219614][ T5662] ? __virt_addr_valid+0x17f/0x530 [ 142.224728][ T5662] ? __virt_addr_valid+0x45b/0x530 [ 142.229842][ T5662] ? __phys_addr+0xb6/0x170 [ 142.234351][ T5662] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 142.239811][ T5662] kasan_report+0x136/0x160 [ 142.244317][ T5662] ? __x64_sys_unlink+0x45/0x50 [ 142.249175][ T5662] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 142.254635][ T5662] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 142.260095][ T5662] kasan_check_range+0x27f/0x290 [ 142.265043][ T5662] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 142.270510][ T5662] memmove+0x25/0x60 [ 142.274414][ T5662] ext4_xattr_set_entry+0x8ca/0x1f30 [ 142.279714][ T5662] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 142.286148][ T5662] ? ext4_xattr_block_set+0x884/0x3920 [ 142.291622][ T5662] ? kmemdup+0x41/0x60 [ 142.295698][ T5662] ? memcpy+0x3c/0x60 [ 142.299689][ T5662] ext4_xattr_block_set+0xa58/0x3920 [ 142.304990][ T5662] ? __getblk_gfp+0x50/0xa20 [ 142.309594][ T5662] ? _raw_spin_unlock+0x24/0x40 [ 142.314450][ T5662] ? ext4_xattr_block_find+0x510/0x510 [ 142.319920][ T5662] ? ext4_xattr_block_find+0x468/0x510 [ 142.325384][ T5662] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 142.331296][ T5662] ? ext4_xattr_set+0x3d0/0x3d0 [ 142.336147][ T5662] ? rwsem_write_trylock+0x166/0x210 [ 142.341441][ T5662] ? clear_nonspinnable+0x60/0x60 [ 142.346542][ T5662] ? ext4_reserve_inode_write+0x2b3/0x360 [ 142.352414][ T5662] ? dquot_initialize_needed+0x128/0x320 [ 142.358086][ T5662] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 142.363737][ T5662] __ext4_mark_inode_dirty+0x54f/0x920 [ 142.369207][ T5662] ? ext4_blocks_for_truncate+0x270/0x270 [ 142.374935][ T5662] ? current_time+0x1ba/0x300 [ 142.379622][ T5662] ? atime_needs_update+0x7b0/0x7b0 [ 142.384831][ T5662] __ext4_unlink+0x6ed/0xba0 [ 142.389434][ T5662] ? __ext4_read_dirblock+0x890/0x890 [ 142.394812][ T5662] ? rwsem_write_trylock+0x166/0x210 [ 142.400103][ T5662] ? inode_permission+0xf7/0x450 [ 142.405047][ T5662] ? clear_nonspinnable+0x60/0x60 [ 142.410087][ T5662] ext4_unlink+0x1d5/0x670 [ 142.414510][ T5662] vfs_unlink+0x359/0x5f0 [ 142.418849][ T5662] do_unlinkat+0x4a5/0x820 [ 142.423377][ T5662] ? fsnotify_link_count+0xf0/0xf0 [ 142.428516][ T5662] __x64_sys_unlink+0x45/0x50 [ 142.433213][ T5662] do_syscall_64+0x3b/0xb0 [ 142.437662][ T5662] ? clear_bhb_loop+0x45/0xa0 [ 142.442340][ T5662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.448241][ T5662] RIP: 0033:0x7fccad57e719 [ 142.452671][ T5662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.472289][ T5662] RSP: 002b:00007fccae3f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 142.480708][ T5662] RAX: ffffffffffffffda RBX: 00007fccad735f80 RCX: 00007fccad57e719 [ 142.488684][ T5662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 142.496667][ T5662] RBP: 00007fccad5f132e R08: 0000000000000000 R09: 0000000000000000 [ 142.504652][ T5662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.512628][ T5662] R13: 0000000000000000 R14: 00007fccad735f80 R15: 00007ffd910cb758 [ 142.520605][ T5662] [ 142.523616][ T5662] [ 142.525926][ T5662] Allocated by task 5662: [ 142.530241][ T5662] kasan_set_track+0x4b/0x70 [ 142.534838][ T5662] __kasan_kmalloc+0x97/0xb0 [ 142.539416][ T5662] __kmalloc_node_track_caller+0xb1/0x220 [ 142.545123][ T5662] kmemdup+0x26/0x60 [ 142.549007][ T5662] ext4_xattr_block_set+0x884/0x3920 [ 142.554280][ T5662] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 142.560165][ T5662] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 142.565788][ T5662] __ext4_mark_inode_dirty+0x54f/0x920 [ 142.571238][ T5662] __ext4_unlink+0x6ed/0xba0 [ 142.576252][ T5662] ext4_unlink+0x1d5/0x670 [ 142.580660][ T5662] vfs_unlink+0x359/0x5f0 [ 142.585069][ T5662] do_unlinkat+0x4a5/0x820 [ 142.589479][ T5662] __x64_sys_unlink+0x45/0x50 [ 142.594147][ T5662] do_syscall_64+0x3b/0xb0 [ 142.598553][ T5662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.604437][ T5662] [ 142.606748][ T5662] The buggy address belongs to the object at ffff888059bc7000 [ 142.606748][ T5662] which belongs to the cache kmalloc-1k of size 1024 [ 142.620876][ T5662] The buggy address is located 80 bytes inside of [ 142.620876][ T5662] 1024-byte region [ffff888059bc7000, ffff888059bc7400) [ 142.634139][ T5662] [ 142.636449][ T5662] The buggy address belongs to the physical page: [ 142.642864][ T5662] page:ffffea000166f000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59bc0 [ 142.653006][ T5662] head:ffffea000166f000 order:3 compound_mapcount:0 compound_pincount:0 [ 142.661327][ T5662] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 142.669304][ T5662] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c41dc0 [ 142.677874][ T5662] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 142.686437][ T5662] page dumped because: kasan: bad access detected [ 142.692840][ T5662] page_owner tracks the page as allocated [ 142.698537][ T5662] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4245, tgid 4245 (syz-executor), ts 60150648933, free_ts 12192030152 [ 142.719881][ T5662] post_alloc_hook+0x18d/0x1b0 [ 142.724635][ T5662] get_page_from_freelist+0x322e/0x33b0 [ 142.730202][ T5662] __alloc_pages+0x28d/0x770 [ 142.734779][ T5662] alloc_slab_page+0x6a/0x150 [ 142.739443][ T5662] new_slab+0x84/0x2d0 [ 142.743498][ T5662] ___slab_alloc+0xc20/0x1270 [ 142.748161][ T5662] __kmem_cache_alloc_node+0x19f/0x260 [ 142.753622][ T5662] __kmalloc_node_track_caller+0xa0/0x220 [ 142.759329][ T5662] __alloc_skb+0x135/0x670 [ 142.763733][ T5662] rtmsg_fib+0x140/0x620 [ 142.767960][ T5662] fib_table_insert+0xfb6/0x1f20 [ 142.772884][ T5662] fib_add_ifaddr+0xf4c/0x1730 [ 142.777633][ T5662] fib_netdev_event+0x620/0x730 [ 142.782470][ T5662] raw_notifier_call_chain+0xd0/0x170 [ 142.787829][ T5662] __dev_notify_flags+0x304/0x610 [ 142.792843][ T5662] dev_change_flags+0xe7/0x190 [ 142.797594][ T5662] page last free stack trace: [ 142.802254][ T5662] free_unref_page_prepare+0xf63/0x1120 [ 142.807785][ T5662] free_unref_page+0x33/0x3e0 [ 142.812448][ T5662] free_contig_range+0x9a/0x150 [ 142.817285][ T5662] destroy_args+0xfe/0x997 [ 142.821696][ T5662] debug_vm_pgtable+0x416/0x46b [ 142.826530][ T5662] do_one_initcall+0x265/0x8f0 [ 142.831281][ T5662] do_initcall_level+0x157/0x207 [ 142.836202][ T5662] do_initcalls+0x49/0x86 [ 142.840515][ T5662] kernel_init_freeable+0x45c/0x60f [ 142.845698][ T5662] kernel_init+0x19/0x290 [ 142.850016][ T5662] ret_from_fork+0x1f/0x30 [ 142.854422][ T5662] [ 142.856731][ T5662] Memory state around the buggy address: [ 142.862344][ T5662] ffff888059bc6f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.870391][ T5662] ffff888059bc6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.878454][ T5662] >ffff888059bc7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 142.886498][ T5662] ^ [ 142.893153][ T5662] ffff888059bc7080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 142.901399][ T5662] ffff888059bc7100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 142.909455][ T5662] ================================================================== [ 142.963467][ T5662] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.970698][ T5662] CPU: 1 PID: 5662 Comm: syz.0.371 Not tainted 6.1.114-syzkaller #0 [ 142.978681][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.988744][ T5662] Call Trace: [ 142.992025][ T5662] [ 142.994952][ T5662] dump_stack_lvl+0x1e3/0x2cb [ 142.999639][ T5662] ? nf_tcp_handle_invalid+0x642/0x642 [ 143.005110][ T5662] ? panic+0x764/0x764 [ 143.009184][ T5662] ? preempt_schedule_common+0xa6/0xd0 [ 143.014649][ T5662] ? vscnprintf+0x59/0x80 [ 143.018993][ T5662] panic+0x318/0x764 [ 143.022910][ T5662] ? check_panic_on_warn+0x1d/0xa0 [ 143.028032][ T5662] ? memcpy_page_flushcache+0xfc/0xfc [ 143.033415][ T5662] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 143.039403][ T5662] ? _raw_spin_unlock+0x40/0x40 [ 143.044263][ T5662] check_panic_on_warn+0x7e/0xa0 [ 143.049203][ T5662] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 143.054666][ T5662] end_report+0x66/0x110 [ 143.058910][ T5662] kasan_report+0x143/0x160 [ 143.063418][ T5662] ? __x64_sys_unlink+0x45/0x50 [ 143.068280][ T5662] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 143.073751][ T5662] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 143.079219][ T5662] kasan_check_range+0x27f/0x290 [ 143.084162][ T5662] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 143.089631][ T5662] memmove+0x25/0x60 [ 143.093543][ T5662] ext4_xattr_set_entry+0x8ca/0x1f30 [ 143.098852][ T5662] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 143.105287][ T5662] ? ext4_xattr_block_set+0x884/0x3920 [ 143.110761][ T5662] ? kmemdup+0x41/0x60 [ 143.114847][ T5662] ? memcpy+0x3c/0x60 [ 143.118844][ T5662] ext4_xattr_block_set+0xa58/0x3920 [ 143.124147][ T5662] ? __getblk_gfp+0x50/0xa20 [ 143.128730][ T5662] ? _raw_spin_unlock+0x24/0x40 [ 143.133574][ T5662] ? ext4_xattr_block_find+0x510/0x510 [ 143.139027][ T5662] ? ext4_xattr_block_find+0x468/0x510 [ 143.144478][ T5662] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 143.150369][ T5662] ? ext4_xattr_set+0x3d0/0x3d0 [ 143.155205][ T5662] ? rwsem_write_trylock+0x166/0x210 [ 143.160483][ T5662] ? clear_nonspinnable+0x60/0x60 [ 143.165496][ T5662] ? ext4_reserve_inode_write+0x2b3/0x360 [ 143.171211][ T5662] ? dquot_initialize_needed+0x128/0x320 [ 143.177276][ T5662] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 143.182919][ T5662] __ext4_mark_inode_dirty+0x54f/0x920 [ 143.188390][ T5662] ? ext4_blocks_for_truncate+0x270/0x270 [ 143.194125][ T5662] ? current_time+0x1ba/0x300 [ 143.198801][ T5662] ? atime_needs_update+0x7b0/0x7b0 [ 143.203995][ T5662] __ext4_unlink+0x6ed/0xba0 [ 143.208579][ T5662] ? __ext4_read_dirblock+0x890/0x890 [ 143.213947][ T5662] ? rwsem_write_trylock+0x166/0x210 [ 143.219225][ T5662] ? inode_permission+0xf7/0x450 [ 143.224157][ T5662] ? clear_nonspinnable+0x60/0x60 [ 143.229176][ T5662] ext4_unlink+0x1d5/0x670 [ 143.233585][ T5662] vfs_unlink+0x359/0x5f0 [ 143.237909][ T5662] do_unlinkat+0x4a5/0x820 [ 143.242330][ T5662] ? fsnotify_link_count+0xf0/0xf0 [ 143.247485][ T5662] __x64_sys_unlink+0x45/0x50 [ 143.252172][ T5662] do_syscall_64+0x3b/0xb0 [ 143.256606][ T5662] ? clear_bhb_loop+0x45/0xa0 [ 143.261272][ T5662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.267160][ T5662] RIP: 0033:0x7fccad57e719 [ 143.271566][ T5662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.291183][ T5662] RSP: 002b:00007fccae3f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 143.299591][ T5662] RAX: ffffffffffffffda RBX: 00007fccad735f80 RCX: 00007fccad57e719 [ 143.307566][ T5662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 143.315542][ T5662] RBP: 00007fccad5f132e R08: 0000000000000000 R09: 0000000000000000 [ 143.323511][ T5662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.331474][ T5662] R13: 0000000000000000 R14: 00007fccad735f80 R15: 00007ffd910cb758 [ 143.339446][ T5662] [ 143.342720][ T5662] Kernel Offset: disabled [ 143.347053][ T5662] Rebooting in 86400 seconds..