last executing test programs: 2.214374938s ago: executing program 2 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigsuspend(0x0, 0x0) 1.995770168s ago: executing program 2 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 1.770394516s ago: executing program 3 (id=469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbff9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3e0bb495, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1.740939007s ago: executing program 2 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) 1.647915256s ago: executing program 3 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010800000000000000000000000010000300686173683a69702c6d616300050001000700000005000500020000000900020073797a300000000005000400000000000c00078008"], 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1.570468346s ago: executing program 0 (id=474): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x50}}], 0x1, 0xc080) syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x80cc, 0x13090, 0x2, 0x1c4}, &(0x7f0000000c00), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000480)) 1.548892546s ago: executing program 1 (id=475): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.431247006s ago: executing program 3 (id=477): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, 0x0}, 0x20) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 1.410852895s ago: executing program 0 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 1.278330045s ago: executing program 2 (id=479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff52) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.257086635s ago: executing program 3 (id=480): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0xffffffffffffff36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xd, 0x2, 0x0, 0x5a9f, 0x1, 0x8, 0x2, r4}, 0x20) 1.239146275s ago: executing program 4 (id=481): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000290000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000240)="e2bd"}, 0x20) 1.130385674s ago: executing program 0 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 1.114881555s ago: executing program 4 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="30000000030801040000000000000000030000061400048008000b400000000608000a40000000040500030006"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1.052255354s ago: executing program 1 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) 1.015694424s ago: executing program 3 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000170a0102"], 0x30}}, 0x24000040) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) 1.014800604s ago: executing program 2 (id=486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000006000000ff0f000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 863.037463ms ago: executing program 4 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010800000000000000000000000010000300686173683a69702c6d616300050001000700000005000500020000000900020073797a300000000005000400000000000c00078008"], 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 853.318994ms ago: executing program 4 (id=488): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x50}}], 0x1, 0xc080) syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x80cc, 0x13090, 0x2, 0x1c4}, &(0x7f0000000c00), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000440), 0x0) 823.603713ms ago: executing program 1 (id=489): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4) dup2(r0, r1) 813.914913ms ago: executing program 0 (id=490): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1268, &(0x7f0000002500)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x444, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f0000001180)='./bus\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 766.302783ms ago: executing program 2 (id=491): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r4, 0x20000029, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000004c0)={0x10000000}) shutdown(r3, 0x0) 728.440183ms ago: executing program 1 (id=492): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) sync() 719.157923ms ago: executing program 4 (id=493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 662.291852ms ago: executing program 3 (id=494): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x10000009}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r3, @ANYBLOB="000100000000000000080000000000007b8af8ff00000000bf01e4f65e5fc4e0a200000000000007020000f8ffffffb703000008000000b704000000000000850000040000000095a32b7564addfb54911f915952fefa94689b8fa5ebf2d7eee9a48ec2bc7b156692f816c42ebd2ab44f6ebc5915aab65263ce7f67887"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000000), &(0x7f0000000200)=r3}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000000201010400000000000000000a000101180002801400018008000100ffffffff0800e100e00000020c0019800800027674"], 0x4c}, 0x1, 0x0, 0x0, 0x48804}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x51e, &(0x7f0000000600)="$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") connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth1_to_hsr\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 434.695631ms ago: executing program 4 (id=495): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) unlink(&(0x7f0000000000)='./file1\x00') 357.735912ms ago: executing program 1 (id=496): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 306.431711ms ago: executing program 0 (id=497): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa) 38.31822ms ago: executing program 1 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010800000000000000000000000010000300686173683a69702c6d616300050001000700000005000500020000000900020073797a300000000005000400000000000c00078008"], 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 0s ago: executing program 0 (id=499): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 66.966460][ T4240] cgroup: Unknown subsys name 'net' [ 67.067809][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.562406][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.834651][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.842674][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.850548][ T4263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.861331][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.868749][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.870473][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.876589][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.884179][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.898211][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.898307][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.905518][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.912547][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.920729][ T4268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.927277][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.935245][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.940497][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.947790][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.954362][ T4265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.962585][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.969127][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.975407][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.982640][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.989561][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.003390][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.003539][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.010559][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.018192][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.038593][ T4269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.051235][ T4269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.058975][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.282841][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.289453][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.450955][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 71.533765][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 71.570335][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 71.707355][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.714765][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.723491][ T4254] device bridge_slave_0 entered promiscuous mode [ 71.732110][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 71.766320][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.773697][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.782105][ T4254] device bridge_slave_1 entered promiscuous mode [ 71.794570][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.802161][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.810163][ T4252] device bridge_slave_0 entered promiscuous mode [ 71.829747][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 71.839716][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.846821][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.854880][ T4250] device bridge_slave_0 entered promiscuous mode [ 71.875318][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.882453][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.890657][ T4252] device bridge_slave_1 entered promiscuous mode [ 71.904993][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.912225][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.921507][ T4250] device bridge_slave_1 entered promiscuous mode [ 71.972926][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.009074][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.024491][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.038901][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.065213][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.081090][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.139247][ T4254] team0: Port device team_slave_0 added [ 72.147640][ T4250] team0: Port device team_slave_0 added [ 72.155311][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.163047][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.172163][ T4266] device bridge_slave_0 entered promiscuous mode [ 72.197544][ T4250] team0: Port device team_slave_1 added [ 72.204737][ T4254] team0: Port device team_slave_1 added [ 72.211249][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.218354][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.227052][ T4266] device bridge_slave_1 entered promiscuous mode [ 72.237219][ T4252] team0: Port device team_slave_0 added [ 72.243639][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.251030][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.258829][ T4251] device bridge_slave_0 entered promiscuous mode [ 72.299272][ T4252] team0: Port device team_slave_1 added [ 72.313344][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.320629][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.328480][ T4251] device bridge_slave_1 entered promiscuous mode [ 72.345018][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.352049][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.378106][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.401174][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.419695][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.426665][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.453023][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.464815][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.472069][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.498703][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.528781][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.546750][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.553844][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.580422][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.596671][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.603721][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.629793][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.657536][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.683531][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.690756][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.716822][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.737747][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.780480][ T4266] team0: Port device team_slave_0 added [ 72.806599][ T4250] device hsr_slave_0 entered promiscuous mode [ 72.813760][ T4250] device hsr_slave_1 entered promiscuous mode [ 72.834731][ T4266] team0: Port device team_slave_1 added [ 72.842930][ T4251] team0: Port device team_slave_0 added [ 72.860329][ T4254] device hsr_slave_0 entered promiscuous mode [ 72.867203][ T4254] device hsr_slave_1 entered promiscuous mode [ 72.877664][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.885969][ T4254] Cannot create hsr debugfs directory [ 72.910394][ T4251] team0: Port device team_slave_1 added [ 72.919951][ T4252] device hsr_slave_0 entered promiscuous mode [ 72.926761][ T4252] device hsr_slave_1 entered promiscuous mode [ 72.933789][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.941587][ T4252] Cannot create hsr debugfs directory [ 72.955993][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.963014][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.989428][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.021953][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.028936][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.055699][ T4263] Bluetooth: hci3: command 0x0409 tx timeout [ 73.061744][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.107673][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.114985][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.120851][ T4263] Bluetooth: hci2: command 0x0409 tx timeout [ 73.141451][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 73.147327][ T4260] Bluetooth: hci1: command 0x0409 tx timeout [ 73.159890][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 73.159943][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.211832][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.218807][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.245895][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.312621][ T4266] device hsr_slave_0 entered promiscuous mode [ 73.319613][ T4266] device hsr_slave_1 entered promiscuous mode [ 73.326236][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.334000][ T4266] Cannot create hsr debugfs directory [ 73.430174][ T4251] device hsr_slave_0 entered promiscuous mode [ 73.436996][ T4251] device hsr_slave_1 entered promiscuous mode [ 73.444904][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.452657][ T4251] Cannot create hsr debugfs directory [ 73.654865][ T4250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.666282][ T4250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.676914][ T4250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.698910][ T4250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.767469][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.795378][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.805783][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.826814][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.837251][ T4254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.868401][ T4254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.891686][ T4254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.913066][ T4254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.957049][ T4266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.966847][ T4266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.003475][ T4266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.013963][ T4266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.080599][ T4251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.094491][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.107777][ T4251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.119138][ T4251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.137697][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.147437][ T4251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.173870][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.185708][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.215181][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.225486][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.234573][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.249097][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.261014][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.270263][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.279455][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.286778][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.296971][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.312273][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.321347][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.329983][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.337084][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.357957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.367115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.376722][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.383870][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.393761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.428389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.438929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.449144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.458545][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.465703][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.474474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.484974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.509243][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.531685][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.541282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.550531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.559119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.607846][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.619899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.629004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.639635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.648176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.657087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.667632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.676768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.685144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.693171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.701467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.709269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.719109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.735600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.748286][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.758719][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.781545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.789958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.798966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.808385][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.815558][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.824904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.834082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.842799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.851754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.862132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.881411][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.895163][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.906727][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.920835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.930884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.940504][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.947618][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.957205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.966289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.975422][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.982586][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.991166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.000265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.009174][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.016374][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.026179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.036249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.059285][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.079434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.087494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.101506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.111417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.119744][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 75.125622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.137065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.147509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.163170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.175474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.188708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.198097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.199915][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 75.207189][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 75.211972][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 75.212030][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 75.214114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.240095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.249718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.274524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.283184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.292250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.301985][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.309101][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.317749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.327316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.336121][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.343310][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.353828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.362926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.371596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.384731][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.396752][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.421223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.443056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.460134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.479779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.493470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.503083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.537612][ T4254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.563962][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.597735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.613579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.626660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.637615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.646922][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.655909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.664578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.672406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.682470][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.691331][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.701283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.708722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.717002][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.725805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.735018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.745057][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.758962][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.793944][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.820574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.830179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.863268][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.900186][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.909063][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.975930][ T4252] device veth0_vlan entered promiscuous mode [ 75.990196][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.999928][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.008939][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.025740][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.058512][ T4250] device veth0_vlan entered promiscuous mode [ 76.081008][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.104604][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.113427][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.122908][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.136688][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.144910][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.172351][ T4252] device veth1_vlan entered promiscuous mode [ 76.192296][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.207532][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.216813][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.231648][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.275193][ T4250] device veth1_vlan entered promiscuous mode [ 76.288653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.298533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.308423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.316611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.331295][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.342684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.352094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.402789][ T4266] device veth0_vlan entered promiscuous mode [ 76.416099][ T4250] device veth0_macvtap entered promiscuous mode [ 76.423477][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.432090][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.441416][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.450757][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.459060][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.468445][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.477373][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.490366][ T4252] device veth0_macvtap entered promiscuous mode [ 76.513765][ T4266] device veth1_vlan entered promiscuous mode [ 76.524506][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.534243][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.544102][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.552600][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.562520][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.571684][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.579211][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.586976][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.596090][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.606824][ T4252] device veth1_macvtap entered promiscuous mode [ 76.630076][ T4250] device veth1_macvtap entered promiscuous mode [ 76.647271][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.687214][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.698406][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.713939][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.726749][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.739076][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.750260][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.767942][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.781649][ T4254] device veth0_vlan entered promiscuous mode [ 76.788412][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.811669][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.823657][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.832017][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.841386][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.850451][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.859042][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.880964][ T4254] device veth1_vlan entered promiscuous mode [ 76.895219][ T4266] device veth0_macvtap entered promiscuous mode [ 76.911879][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.923995][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.936099][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.948029][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.971349][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.981337][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.990688][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.998805][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.008507][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.017685][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.026502][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.038260][ T4266] device veth1_macvtap entered promiscuous mode [ 77.048684][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.057808][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.084532][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.096115][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.111386][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.122708][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.132816][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.142849][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.200340][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 77.207560][ T4254] device veth0_macvtap entered promiscuous mode [ 77.243334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.251648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.260868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.270589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.279891][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 77.279998][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 77.285911][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 77.285944][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 77.306863][ T4254] device veth1_macvtap entered promiscuous mode [ 77.362407][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.377074][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.386661][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.399532][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.411272][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.421325][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.431811][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.445434][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.465099][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.476378][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.487145][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.497895][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.508046][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.519056][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.531873][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.550032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.558861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.571585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.582234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.594241][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.606532][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.616715][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.628485][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.641673][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.655388][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.672837][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.683271][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.695769][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.705724][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.716370][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.727934][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.739830][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.748507][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.757602][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.767046][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.777091][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.787568][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.796482][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.805220][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.826085][ T4251] device veth0_vlan entered promiscuous mode [ 77.840321][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.849048][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.860078][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.868825][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.897810][ T4254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.907132][ T4254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.917082][ T4254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.926590][ T4254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.967838][ T4251] device veth1_vlan entered promiscuous mode [ 77.973686][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.983546][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.006366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.012081][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.025956][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.069935][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.116025][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.133612][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.144271][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.153302][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.164881][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.190488][ T4251] device veth0_macvtap entered promiscuous mode [ 78.233640][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.259757][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.281506][ T4251] device veth1_macvtap entered promiscuous mode [ 78.323599][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.341541][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.357671][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.407468][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.411777][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.426497][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.426723][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.445105][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.457480][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.473349][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.475727][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.502713][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.517665][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.529174][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.545592][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.578824][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.604975][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.622026][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.635224][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.654215][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.665855][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.683664][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.695456][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.706100][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.717678][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.742879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.755970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.764363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.773284][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.782951][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.792329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.827780][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.852542][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.865854][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.876336][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.907547][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.910106][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.945968][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.954796][ T4344] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 78.985560][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.008170][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.022631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.226426][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.249695][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.279802][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 79.294698][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.359574][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 79.365687][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 79.371074][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 79.372155][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 79.489774][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.518922][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.578110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.754575][ T4357] loop3: detected capacity change from 0 to 512 [ 79.819208][ T4357] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.860567][ T4357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.931461][ T4357] EXT4-fs (loop3): 1 truncate cleaned up [ 79.966897][ T4357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.057740][ T26] audit: type=1326 audit(1735770050.384:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f9857cce7 code=0x7ffc0000 [ 80.158771][ T26] audit: type=1326 audit(1735770050.384:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f98521f29 code=0x7ffc0000 [ 80.242519][ T26] audit: type=1326 audit(1735770050.394:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 80.331704][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 80.361609][ T26] audit: type=1326 audit(1735770050.434:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f9857cce7 code=0x7ffc0000 [ 80.384126][ T26] audit: type=1326 audit(1735770050.434:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f98521f29 code=0x7ffc0000 [ 80.408586][ T26] audit: type=1326 audit(1735770050.434:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 80.442705][ T26] audit: type=1326 audit(1735770050.444:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f9857cce7 code=0x7ffc0000 [ 80.493796][ T26] audit: type=1326 audit(1735770050.444:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f98521f29 code=0x7ffc0000 [ 80.574964][ T26] audit: type=1326 audit(1735770050.444:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 80.784867][ T26] audit: type=1326 audit(1735770050.444:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4356 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f9857cce7 code=0x7ffc0000 [ 81.203053][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 81.258213][ T4398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 81.613935][ T4406] netem: change failed [ 81.871531][ T4414] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) [ 81.898710][ T4414] device syzkaller1 entered promiscuous mode [ 82.140708][ T4415] loop1: detected capacity change from 0 to 1024 [ 82.147835][ T4415] EXT4-fs: Ignoring removed orlov option [ 82.274534][ T4415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 82.289008][ T4424] loop0: detected capacity change from 0 to 128 [ 82.695340][ T4424] syz.0.41: attempt to access beyond end of device [ 82.695340][ T4424] loop0: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 82.740142][ T4430] syz.0.41: attempt to access beyond end of device [ 82.740142][ T4430] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 82.929801][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 83.091692][ T4443] syz.1.36[4443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.091804][ T4443] syz.1.36[4443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.135412][ T4443] rdma_op ffff88807c4fc9f0 conn xmit_rdma 0000000000000000 [ 83.719618][ T4449] netlink: 96 bytes leftover after parsing attributes in process `syz.0.42'. [ 83.736057][ T4451] usb usb8: usbfs: process 4451 (syz.1.43) did not claim interface 0 before use [ 84.623722][ T4475] device ip6tnl1 entered promiscuous mode [ 85.054480][ T4492] loop3: detected capacity change from 0 to 128 [ 85.101806][ T4492] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 85.154959][ T4492] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 85.178362][ T4492] FAT-fs (loop3): Filesystem has been set read-only [ 85.203073][ T4492] syz.3.62: attempt to access beyond end of device [ 85.203073][ T4492] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 85.229012][ T4492] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 85.288197][ T4492] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 85.336097][ T4492] syz.3.62: attempt to access beyond end of device [ 85.336097][ T4492] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 85.440350][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 85.440366][ T26] audit: type=1800 audit(1735770055.774:30): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.62" name="file2" dev="loop3" ino=1048596 res=0 errno=0 [ 86.642694][ T127] cfg80211: failed to load regulatory.db [ 87.453826][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 87.511584][ T4561] IPVS: Error joining to the multicast group [ 87.797547][ T4571] loop4: detected capacity change from 0 to 1024 [ 87.847518][ T26] audit: type=1326 audit(1735770058.174:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 87.888482][ T4571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.888590][ T26] audit: type=1326 audit(1735770058.174:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 87.969881][ T26] audit: type=1326 audit(1735770058.214:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 87.993507][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 88.008220][ T26] audit: type=1326 audit(1735770058.214:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 88.096284][ T26] audit: type=1326 audit(1735770058.214:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 88.214838][ T4584] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.403534][ T4589] netlink: 'syz.2.95': attribute type 9 has an invalid length. [ 88.444444][ T4593] loop4: detected capacity change from 0 to 256 [ 90.516536][ T4636] netlink: 'syz.2.114': attribute type 26 has an invalid length. [ 90.557643][ T4638] loop3: detected capacity change from 0 to 2048 [ 90.575962][ T26] audit: type=1326 audit(1735770060.904:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 90.630389][ T26] audit: type=1326 audit(1735770060.904:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 90.717024][ T4638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.755957][ T26] audit: type=1326 audit(1735770060.934:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 90.778789][ T26] audit: type=1326 audit(1735770060.934:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 90.807549][ T4638] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.810663][ T26] audit: type=1326 audit(1735770060.934:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 90.863337][ T26] audit: type=1326 audit(1735770060.944:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 90.892714][ T26] audit: type=1326 audit(1735770060.944:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 90.893452][ T4638] EXT4-fs (loop3): Remounting filesystem read-only [ 90.990578][ T26] audit: type=1326 audit(1735770060.944:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 91.069451][ T26] audit: type=1326 audit(1735770060.944:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 91.095311][ T4658] program syz.4.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.155527][ T26] audit: type=1326 audit(1735770060.944:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4639 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 91.186335][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 91.428503][ T4671] loop3: detected capacity change from 0 to 128 [ 91.483510][ T4671] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 91.528331][ T4671] FAT-fs (loop3): Filesystem has been set read-only [ 91.546958][ T4673] loop2: detected capacity change from 0 to 1024 [ 91.616834][ T4673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.803131][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 91.888702][ T4687] loop1: detected capacity change from 0 to 256 [ 91.914869][ T4681] loop3: detected capacity change from 0 to 8192 [ 91.975629][ T4681] loop3: p1 p2 p3 p4 [ 91.980978][ T4681] loop3: partition table partially beyond EOD, truncated [ 92.012228][ T4681] loop3: p1 start 34537472 is beyond EOD, truncated [ 92.029951][ T4681] loop3: p2 start 32768 is beyond EOD, truncated [ 92.036341][ T4681] loop3: p3 size 536870912 extends beyond EOD, truncated [ 92.077553][ T4681] loop3: p4 start 198639616 is beyond EOD, truncated [ 92.507747][ T4711] mmap: syz.2.145 (4711) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.008387][ T4731] Zero length message leads to an empty skb [ 93.282752][ T4743] loop4: detected capacity change from 0 to 764 [ 93.552373][ T4752] loop1: detected capacity change from 0 to 2048 [ 93.622008][ T4752] Alternate GPT is invalid, using primary GPT. [ 93.628792][ T4752] loop1: p2 p3 p7 [ 94.087891][ T4782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 94.143554][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 94.195315][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 94.236174][ T4786] usb usb8: usbfs: process 4786 (syz.0.176) did not claim interface 0 before use [ 94.497993][ T4798] loop0: detected capacity change from 0 to 128 [ 94.551527][ T4798] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 94.601802][ T4798] FAT-fs (loop0): Filesystem has been set read-only [ 94.643938][ T4798] syz.0.182: attempt to access beyond end of device [ 94.643938][ T4798] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 94.695246][ T4798] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 94.713708][ T4798] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 94.728232][ T4798] syz.0.182: attempt to access beyond end of device [ 94.728232][ T4798] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.766170][ T4798] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 95.825163][ T4863] netlink: 260 bytes leftover after parsing attributes in process `syz.3.212'. [ 95.856538][ T4861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 95.925005][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 96.007757][ T4870] loop3: detected capacity change from 0 to 1024 [ 96.064043][ T4870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.192025][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 96.221572][ T4878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.312636][ T4884] loop3: detected capacity change from 0 to 2048 [ 96.373581][ T4884] Alternate GPT is invalid, using primary GPT. [ 96.391477][ T4884] loop3: p2 p3 p7 [ 96.560989][ T4347] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.568877][ T4347] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.609681][ T4347] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.617327][ T4347] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.646835][ T4347] rtc rtc0: __rtc_set_alarm: err=-22 [ 96.653413][ T4893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 96.851266][ T4905] ALSA: seq fatal error: cannot create timer (-22) [ 97.638667][ T4946] loop0: detected capacity change from 0 to 128 [ 97.720559][ T4950] loop2: detected capacity change from 0 to 512 [ 97.915925][ T4950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.954535][ T4950] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.058642][ T4950] syz.2.244 (4950) used greatest stack depth: 18784 bytes left [ 98.070229][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 98.071981][ T4962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 98.317998][ T4970] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.523239][ T4972] loop0: detected capacity change from 0 to 1024 [ 98.599263][ T4972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.747064][ T4980] netlink: 'syz.1.254': attribute type 153 has an invalid length. [ 98.781889][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 98.941428][ T4986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.257'. [ 98.984204][ T4989] netlink: 3 bytes leftover after parsing attributes in process `syz.1.258'. [ 99.013715][ T4989] 0ªX¹¦À: renamed from caif0 [ 99.044087][ T4989] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 99.265904][ T4994] netlink: 'syz.3.261': attribute type 10 has an invalid length. [ 99.294627][ T4994] device geneve0 entered promiscuous mode [ 99.342129][ T4994] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 99.827887][ T5015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.269'. [ 99.892821][ T5019] loop0: detected capacity change from 0 to 128 [ 99.909948][ T5019] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.928826][ T5019] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.951595][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 99.971378][ T5021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.272'. [ 99.998989][ T5021] bridge0: port 3(vlan2) entered blocking state [ 100.036492][ T5021] bridge0: port 3(vlan2) entered disabled state [ 100.115834][ T4321] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.348863][ T5036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.280'. [ 100.379554][ T5038] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.579507][ T5046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.283'. [ 100.616493][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 100.616509][ T26] audit: type=1326 audit(1735770070.944:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5047 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 100.638529][ T5052] loop2: detected capacity change from 0 to 512 [ 100.665345][ T5052] EXT4-fs: Ignoring removed oldalloc option [ 100.691719][ T5052] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.702913][ T26] audit: type=1326 audit(1735770070.984:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5047 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 100.736098][ T26] audit: type=1326 audit(1735770070.984:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5047 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 100.781878][ T5052] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 100.817551][ T26] audit: type=1326 audit(1735770071.144:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5047 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 100.839421][ T5052] EXT4-fs (loop2): 1 truncate cleaned up [ 100.845397][ T5052] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.928000][ T26] audit: type=1800 audit(1735770071.254:130): pid=5052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.285" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 101.081385][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 101.118643][ T5069] device veth0_virt_wifi entered promiscuous mode [ 101.142681][ T5069] device veth0_virt_wifi left promiscuous mode [ 101.187656][ T5073] loop4: detected capacity change from 0 to 1024 [ 101.255284][ T5073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.282164][ T26] audit: type=1326 audit(1735770071.614:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 101.348107][ T26] audit: type=1326 audit(1735770071.614:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 101.351199][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 101.387567][ T26] audit: type=1326 audit(1735770071.614:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 101.435600][ T5083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'. [ 101.444939][ T26] audit: type=1326 audit(1735770071.614:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 101.476916][ T26] audit: type=1326 audit(1735770071.614:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 101.727167][ T5094] loop3: detected capacity change from 0 to 1024 [ 101.760554][ T5094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.789383][ T5097] Driver unsupported XDP return value 0 on prog (id 126) dev N/A, expect packet loss! [ 101.983567][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 102.386541][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.412563][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.430072][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.447168][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.462046][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.472661][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.481455][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.489768][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.497480][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.505436][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.518439][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.530358][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.538055][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.547178][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.555418][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.569461][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.579775][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.590558][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.598151][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.606737][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.621566][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.633914][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.650653][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.672164][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.685697][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.697946][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.709130][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.721542][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.729150][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.737307][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.745276][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.759470][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.778444][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.795300][ T5131] loop4: detected capacity change from 0 to 256 [ 102.804576][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.812974][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.820863][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.828495][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.837076][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.845266][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.854232][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.862157][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.871839][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.887807][ T4301] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 102.910963][ T4301] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 102.997087][ T5123] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.174573][ T5123] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.266073][ T5142] loop1: detected capacity change from 0 to 1024 [ 103.290094][ T5142] ======================================================= [ 103.290094][ T5142] WARNING: The mand mount option has been deprecated and [ 103.290094][ T5142] and is ignored by this kernel. Remove the mand [ 103.290094][ T5142] option from the mount to silence this warning. [ 103.290094][ T5142] ======================================================= [ 103.387506][ T5123] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.456960][ T5142] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.321: Invalid block bitmap block 0 in block_group 0 [ 103.529163][ T5142] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.321: Failed to acquire dquot type 0 [ 103.558780][ T5123] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.581882][ T5142] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.321: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.645486][ T5142] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.321: Invalid inode bitmap blk 0 in block_group 0 [ 103.668549][ T4622] EXT4-fs error (device loop1): ext4_release_dquot:6817: comm kworker/u4:9: Failed to release dquot type 0 [ 103.709259][ T5123] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.724005][ T5142] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 103.753755][ T5142] EXT4-fs (loop1): 1 orphan inode deleted [ 103.779257][ T5142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.780114][ T5123] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.835104][ T5123] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.883023][ T5123] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.932898][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 104.097967][ T5160] loop1: detected capacity change from 0 to 2048 [ 104.113037][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 104.147063][ T5160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.227817][ T5168] loop0: detected capacity change from 0 to 128 [ 104.338836][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 104.368560][ T5168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.388201][ T5168] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.651009][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 105.090281][ T5192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 105.211544][ T5188] loop4: detected capacity change from 0 to 512 [ 105.230435][ T5188] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.244508][ T5188] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 105.285376][ T5188] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 105.293610][ T5188] System zones: 1-12 [ 105.311619][ T5188] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.342: corrupted in-inode xattr [ 105.331166][ T5188] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.342: couldn't read orphan inode 15 (err -117) [ 105.351387][ T5188] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 105.484342][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 105.617227][ T5208] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 105.783111][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 105.783127][ T26] audit: type=1326 audit(1735770076.104:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 105.834762][ T5214] tipc: Started in network mode [ 105.859387][ T5214] tipc: Node identity 7f000001, cluster identity 4711 [ 105.871669][ T26] audit: type=1326 audit(1735770076.144:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 105.902879][ T5214] tipc: Enabled bearer , priority 10 [ 105.926626][ T5214] tipc: Enabled bearer , priority 0 [ 105.949457][ T26] audit: type=1326 audit(1735770076.144:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 106.012534][ T26] audit: type=1326 audit(1735770076.144:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 106.098019][ T26] audit: type=1326 audit(1735770076.144:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 106.184762][ T26] audit: type=1326 audit(1735770076.144:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 106.243163][ T5228] tipc: Started in network mode [ 106.248092][ T5228] tipc: Node identity 7f000001, cluster identity 4711 [ 106.262236][ T26] audit: type=1326 audit(1735770076.144:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc169b85d29 code=0x7ffc0000 [ 106.300046][ T5228] tipc: Enabled bearer , priority 10 [ 106.306438][ T26] audit: type=1326 audit(1735770076.144:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc169b87c47 code=0x7ffc0000 [ 106.339095][ T5233] tipc: Enabled bearer , priority 0 [ 106.377941][ T26] audit: type=1326 audit(1735770076.144:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc169b87bbc code=0x7ffc0000 [ 106.453503][ T26] audit: type=1326 audit(1735770076.144:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc169b87af4 code=0x7ffc0000 [ 106.761999][ T5243] loop4: detected capacity change from 0 to 1024 [ 106.835578][ T5243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.001234][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 107.063958][ T41] tipc: Node number set to 2130706433 [ 107.330732][ T3583] tipc: Node number set to 2130706433 [ 107.413835][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 107.474812][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 108.192477][ T5265] loop3: detected capacity change from 0 to 512 [ 108.204359][ T5265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.224631][ T5265] EXT4-fs: Ignoring removed i_version option [ 108.277127][ T5265] EXT4-fs (loop3): 1 orphan inode deleted [ 108.332564][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.478991][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 108.753131][ T5149] syz.2.326 (5149) used greatest stack depth: 18080 bytes left [ 109.253747][ T5297] loop2: detected capacity change from 0 to 512 [ 109.422497][ T5297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.436645][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 109.579156][ T5297] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.785932][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 109.848345][ T5323] loop4: detected capacity change from 0 to 1024 [ 109.914616][ T5323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.966804][ T5323] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 109.992827][ T5327] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.044780][ T5323] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 110.052212][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 110.099608][ T5323] EXT4-fs (loop4): This should not happen!! Data will be lost [ 110.099608][ T5323] [ 110.135122][ T5323] EXT4-fs (loop4): Total free blocks count 0 [ 110.158015][ T5323] EXT4-fs (loop4): Free/Dirty block details [ 110.176058][ T5323] EXT4-fs (loop4): free_blocks=68451041280 [ 110.182151][ T5323] EXT4-fs (loop4): dirty_blocks=16 [ 110.207668][ T5323] EXT4-fs (loop4): Block reservation details [ 110.220539][ T5323] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 110.399123][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 110.486663][ T5351] loop2: detected capacity change from 0 to 1024 [ 110.536535][ T5353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.410'. [ 110.560513][ T5351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.588031][ T5359] loop3: detected capacity change from 0 to 512 [ 110.602631][ T5358] capability: warning: `syz.0.411' uses 32-bit capabilities (legacy support in use) [ 110.705223][ T5359] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.754727][ T5359] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.857747][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 110.956764][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 111.434571][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 111.460137][ T5388] syz.2.425[5388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.460235][ T5388] syz.2.425[5388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.692699][ T5392] loop1: detected capacity change from 0 to 1024 [ 111.791230][ T5392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.930700][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 111.930718][ T26] audit: type=1326 audit(1735770082.264:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 111.989461][ T26] audit: type=1326 audit(1735770082.264:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 112.069413][ T26] audit: type=1326 audit(1735770082.264:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 112.133417][ T26] audit: type=1326 audit(1735770082.264:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 112.185155][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 112.219743][ T26] audit: type=1326 audit(1735770082.264:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 112.276644][ T26] audit: type=1326 audit(1735770082.264:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 112.305912][ T5417] loop0: detected capacity change from 0 to 512 [ 112.339588][ T26] audit: type=1326 audit(1735770082.314:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 112.355961][ T5417] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.437: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 112.383559][ T5418] loop3: detected capacity change from 0 to 512 [ 112.387814][ T26] audit: type=1326 audit(1735770082.314:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5406 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de3b85d29 code=0x7ffc0000 [ 112.430175][ T5418] EXT4-fs: Ignoring removed i_version option [ 112.442190][ T5418] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.465027][ T26] audit: type=1326 audit(1735770082.504:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 112.495844][ T5417] EXT4-fs error (device loop0): ext4_quota_enable:6988: comm syz.0.437: Bad quota inode: 3, type: 0 [ 112.529064][ T26] audit: type=1326 audit(1735770082.504:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5409 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2f98585d29 code=0x7ffc0000 [ 112.542305][ T5417] EXT4-fs warning (device loop0): ext4_enable_quotas:7029: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 112.569605][ T5418] EXT4-fs (loop3): 1 truncate cleaned up [ 112.589642][ T5418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.645278][ T5417] EXT4-fs (loop0): mount failed [ 112.982638][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 113.043357][ T5441] netlink: 'syz.4.447': attribute type 4 has an invalid length. [ 113.070881][ T5444] atomic_op ffff888141b42198 conn xmit_atomic 0000000000000000 [ 113.118442][ T5448] netlink: 'syz.4.447': attribute type 4 has an invalid length. [ 113.138732][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 113.163228][ T5451] loop3: detected capacity change from 0 to 1024 [ 113.241534][ T5451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.492881][ T5464] loop4: detected capacity change from 0 to 512 [ 113.506382][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 113.546915][ T5464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.625668][ T5464] EXT4-fs (loop4): 1 truncate cleaned up [ 113.670833][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.779865][ T5464] capability: warning: `syz.4.453' uses deprecated v2 capabilities in a way that may be insecure [ 113.928215][ T5483] netlink: 'syz.3.464': attribute type 21 has an invalid length. [ 114.004504][ T5490] loop2: detected capacity change from 0 to 1024 [ 114.050270][ T5490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.175085][ T4254] EXT4-fs (loop2): unmounting filesystem. [ 114.366615][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 114.473404][ T5508] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.482723][ T5508] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.491612][ T5508] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.500498][ T5508] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.521801][ T5508] device vxlan0 entered promiscuous mode [ 114.546048][ T5508] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.555114][ T5508] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.564389][ T5508] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.573376][ T5508] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.915076][ T5524] loop0: detected capacity change from 0 to 1024 [ 114.961482][ T5524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.029595][ T5532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'. [ 115.122771][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 115.362627][ T5543] loop0: detected capacity change from 0 to 8192 [ 115.374308][ T5550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'. [ 115.416938][ T5541] loop2: detected capacity change from 0 to 8192 [ 115.445399][ T5543] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 115.453380][ T5543] FAT-fs (loop0): Filesystem has been set read-only [ 115.476144][ T5541] syz.2.491: attempt to access beyond end of device [ 115.476144][ T5541] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 115.510104][ T5541] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 115.520020][ T5550] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 115.526962][ T5550] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.556360][ T5550] vhci_hcd vhci_hcd.0: Device attached [ 115.559440][ T5541] FAT-fs (loop2): Filesystem has been set read-only [ 115.582987][ T5557] loop4: detected capacity change from 0 to 512 [ 115.597173][ T5554] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 115.603823][ T5554] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.619173][ T5557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.619916][ T5554] vhci_hcd vhci_hcd.0: Device attached [ 115.641608][ T5541] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 115.656295][ T5550] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 115.662937][ T5550] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.681470][ T5550] vhci_hcd vhci_hcd.0: Device attached [ 115.687663][ T5541] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 115.707522][ T5554] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 115.707630][ T5557] EXT4-fs (loop4): 1 truncate cleaned up [ 115.714158][ T5554] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.729529][ T5554] vhci_hcd vhci_hcd.0: Device attached [ 115.749102][ T5550] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 115.755832][ T5550] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.770037][ T3895] vhci_hcd: vhci_device speed not set [ 115.789377][ T5557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.817177][ T5550] vhci_hcd vhci_hcd.0: Device attached [ 115.854868][ T3895] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 115.871351][ T5554] loop3: detected capacity change from 0 to 512 [ 115.937857][ T5557] ================================================================== [ 115.945977][ T5557] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 115.947314][ T5554] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.494: corrupted inode contents [ 115.953813][ T5557] Read of size 18446744073709551572 at addr ffff88802454f050 by task syz.4.495/5557 [ 115.953836][ T5557] [ 115.953856][ T5557] CPU: 0 PID: 5557 Comm: syz.4.495 Tainted: G W 6.1.122-syzkaller #0 [ 115.953879][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.953891][ T5557] Call Trace: [ 116.000029][ T5557] [ 116.002985][ T5557] dump_stack_lvl+0x1e3/0x2cb [ 116.007715][ T5557] ? nf_tcp_handle_invalid+0x642/0x642 [ 116.013215][ T5557] ? panic+0x764/0x764 [ 116.017320][ T5557] ? _printk+0xd1/0x111 [ 116.021509][ T5557] ? __virt_addr_valid+0x17f/0x530 [ 116.026659][ T5557] ? __virt_addr_valid+0x17f/0x530 [ 116.031814][ T5557] print_report+0x15f/0x4f0 [ 116.036348][ T5557] ? __virt_addr_valid+0x17f/0x530 [ 116.041511][ T5557] ? __virt_addr_valid+0x17f/0x530 [ 116.046645][ T5557] ? __virt_addr_valid+0x45b/0x530 [ 116.051788][ T5557] ? __phys_addr+0xb6/0x170 [ 116.056325][ T5557] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.061826][ T5557] kasan_report+0x136/0x160 [ 116.066358][ T5557] ? __x64_sys_unlink+0x45/0x50 [ 116.069717][ T5554] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #3: comm syz.3.494: mark_inode_dirty error [ 116.071240][ T5557] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.071269][ T5557] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.093303][ T5557] kasan_check_range+0x27f/0x290 [ 116.098266][ T5557] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.103750][ T5557] memmove+0x25/0x60 [ 116.107681][ T5557] ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.113000][ T5557] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 116.119436][ T5557] ? ext4_xattr_block_set+0x884/0x3920 [ 116.124920][ T5557] ? kmemdup+0x41/0x60 [ 116.129015][ T5557] ? memcpy+0x3c/0x60 [ 116.133031][ T5557] ext4_xattr_block_set+0xa58/0x3920 [ 116.138368][ T5557] ? __getblk_gfp+0x50/0xa20 [ 116.142981][ T5557] ? _raw_spin_unlock+0x24/0x40 [ 116.147856][ T5557] ? ext4_xattr_block_find+0x510/0x510 [ 116.153347][ T5557] ? ext4_xattr_block_find+0x468/0x510 [ 116.158837][ T5557] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 116.164289][ T5554] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.494: corrupted inode contents [ 116.164755][ T5557] ? ext4_xattr_set+0x3d0/0x3d0 [ 116.164780][ T5557] ? rwsem_write_trylock+0x166/0x210 [ 116.164811][ T5557] ? clear_nonspinnable+0x60/0x60 [ 116.164838][ T5557] ? ext4_reserve_inode_write+0x2b3/0x360 [ 116.164870][ T5557] ? dquot_initialize_needed+0x128/0x320 [ 116.164902][ T5557] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 116.164949][ T5557] __ext4_mark_inode_dirty+0x54f/0x920 [ 116.164979][ T5557] ? ext4_blocks_for_truncate+0x270/0x270 [ 116.165008][ T5557] ? current_time+0x1ba/0x300 [ 116.165041][ T5557] ? atime_needs_update+0x7b0/0x7b0 [ 116.165078][ T5557] __ext4_unlink+0x6ed/0xba0 [ 116.165106][ T5557] ? __ext4_read_dirblock+0x890/0x890 [ 116.165135][ T5557] ? rwsem_write_trylock+0x166/0x210 [ 116.165180][ T5557] ? inode_permission+0xf7/0x450 [ 116.165205][ T5557] ? clear_nonspinnable+0x60/0x60 [ 116.165240][ T5557] ext4_unlink+0x1d5/0x670 [ 116.190829][ T5554] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.494: mark_inode_dirty error [ 116.191984][ T5557] vfs_unlink+0x359/0x5f0 [ 116.210141][ T5554] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.494: Failed to acquire dquot type 0 [ 116.214409][ T5557] do_unlinkat+0x4a5/0x820 [ 116.214447][ T5557] ? fsnotify_link_count+0xf0/0xf0 [ 116.214483][ T5557] __x64_sys_unlink+0x45/0x50 [ 116.226910][ T5554] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.494: corrupted inode contents [ 116.230033][ T5557] do_syscall_64+0x3b/0xb0 [ 116.230069][ T5557] ? clear_bhb_loop+0x45/0xa0 [ 116.230088][ T5557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.230119][ T5557] RIP: 0033:0x7fc169b85d29 [ 116.230147][ T5557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.238103][ T5554] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #16: comm syz.3.494: mark_inode_dirty error [ 116.240180][ T5557] RSP: 002b:00007fc16a9e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 116.240205][ T5557] RAX: ffffffffffffffda RBX: 00007fc169d75fa0 RCX: 00007fc169b85d29 [ 116.240220][ T5557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 116.240231][ T5557] RBP: 00007fc169c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 116.240243][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.240255][ T5557] R13: 0000000000000000 R14: 00007fc169d75fa0 R15: 00007ffde41faa48 [ 116.240276][ T5557] [ 116.240283][ T5557] [ 116.240287][ T5557] Allocated by task 5557: [ 116.240295][ T5557] kasan_set_track+0x4b/0x70 [ 116.240313][ T5557] __kasan_kmalloc+0x97/0xb0 [ 116.240328][ T5557] __kmalloc_node_track_caller+0xb1/0x220 [ 116.240350][ T5557] kmemdup+0x26/0x60 [ 116.247935][ T5554] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.494: corrupted inode contents [ 116.250576][ T5557] ext4_xattr_block_set+0x884/0x3920 [ 116.250600][ T5557] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 116.250619][ T5557] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 116.250650][ T5557] __ext4_mark_inode_dirty+0x54f/0x920 [ 116.257011][ T5554] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.494: mark_inode_dirty error [ 116.260056][ T5557] __ext4_unlink+0x6ed/0xba0 [ 116.260083][ T5557] ext4_unlink+0x1d5/0x670 [ 116.260104][ T5557] vfs_unlink+0x359/0x5f0 [ 116.273211][ T5554] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.494: corrupted inode contents [ 116.275425][ T5557] do_unlinkat+0x4a5/0x820 [ 116.275457][ T5557] __x64_sys_unlink+0x45/0x50 [ 116.275484][ T5557] do_syscall_64+0x3b/0xb0 [ 116.289883][ T5554] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 116.291170][ T5557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.291207][ T5557] [ 116.291212][ T5557] The buggy address belongs to the object at ffff88802454f000 [ 116.291212][ T5557] which belongs to the cache kmalloc-1k of size 1024 [ 116.296752][ T5554] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.494: corrupted inode contents [ 116.301045][ T5557] The buggy address is located 80 bytes inside of [ 116.301045][ T5557] 1024-byte region [ffff88802454f000, ffff88802454f400) [ 116.301066][ T5557] [ 116.301071][ T5557] The buggy address belongs to the physical page: [ 116.301091][ T5557] page:ffffea0000915200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802454f800 pfn:0x24548 [ 116.301114][ T5557] head:ffffea0000915200 order:3 compound_mapcount:0 compound_pincount:0 [ 116.301129][ T5557] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 116.315016][ T5554] EXT4-fs error (device loop3): ext4_truncate:4311: inode #16: comm syz.3.494: mark_inode_dirty error [ 116.317255][ T5557] raw: 00fff00000010200 ffffea00015f7608 ffff888017c40888 ffff888017c41dc0 [ 116.317276][ T5557] raw: ffff88802454f800 000000000010000f 00000001ffffffff 0000000000000000 [ 116.317287][ T5557] page dumped because: kasan: bad access detected [ 116.322923][ T5554] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 116.327830][ T5557] page_owner tracks the page as allocated [ 116.327839][ T5557] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4622, tgid 4622 (kworker/u4:9), ts 99679121412, free_ts 99665328582 [ 116.327877][ T5557] post_alloc_hook+0x18d/0x1b0 [ 116.337393][ T5554] EXT4-fs (loop3): 1 truncate cleaned up [ 116.351900][ T5557] get_page_from_freelist+0x3731/0x38d0 [ 116.351928][ T5557] __alloc_pages+0x28d/0x770 [ 116.351947][ T5557] alloc_slab_page+0x6a/0x150 [ 116.351972][ T5557] new_slab+0x84/0x2d0 [ 116.351997][ T5557] ___slab_alloc+0xc20/0x1270 [ 116.352021][ T5557] __kmem_cache_alloc_node+0x19f/0x260 [ 116.352044][ T5557] __kmalloc+0xa1/0x230 [ 116.352063][ T5557] ieee802_11_parse_elems_full+0xc4/0x1380 [ 116.352094][ T5557] ieee80211_bss_info_update+0x99f/0xf00 [ 116.352121][ T5557] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2dd0 [ 116.352142][ T5557] ieee80211_iface_work+0x7aa/0xce0 [ 116.352163][ T5557] process_one_work+0x8a9/0x11d0 [ 116.352185][ T5557] worker_thread+0xa47/0x1200 [ 116.352207][ T5557] kthread+0x28d/0x320 [ 116.352222][ T5557] ret_from_fork+0x1f/0x30 [ 116.352247][ T5557] page last free stack trace: [ 116.352252][ T5557] free_unref_page_prepare+0x12a6/0x15b0 [ 116.352288][ T5557] free_unref_page+0x33/0x3e0 [ 116.352305][ T5557] __unfreeze_partials+0x1b7/0x210 [ 116.352331][ T5557] put_cpu_partial+0x17b/0x250 [ 116.352356][ T5557] qlist_free_all+0x76/0xe0 [ 116.352377][ T5557] kasan_quarantine_reduce+0x156/0x170 [ 116.352401][ T5557] __kasan_slab_alloc+0x1f/0x70 [ 116.352418][ T5557] slab_post_alloc_hook+0x52/0x3a0 [ 116.352443][ T5557] kmem_cache_alloc_lru+0x10c/0x2d0 [ 116.352467][ T5557] __d_alloc+0x31/0x710 [ 116.352489][ T5557] d_alloc_cursor+0x40/0xd0 [ 116.352511][ T5557] dcache_dir_open+0x37/0x70 [ 116.352531][ T5557] do_dentry_open+0x7f9/0x10f0 [ 116.352560][ T5557] path_openat+0x2644/0x2e60 [ 116.352584][ T5557] do_filp_open+0x230/0x480 [ 116.352607][ T5557] do_sys_openat2+0x13b/0x4f0 [ 116.352645][ T5557] [ 116.352650][ T5557] Memory state around the buggy address: [ 116.352661][ T5557] ffff88802454ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.352675][ T5557] ffff88802454ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 116.352689][ T5557] >ffff88802454f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.352699][ T5557] ^ [ 116.352710][ T5557] ffff88802454f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.352723][ T5557] ffff88802454f100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 116.352733][ T5557] ================================================================== [ 116.528668][ T5557] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 116.528687][ T5557] CPU: 0 PID: 5557 Comm: syz.4.495 Tainted: G W 6.1.122-syzkaller #0 [ 116.528710][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.528723][ T5557] Call Trace: [ 116.528729][ T5557] [ 116.528738][ T5557] dump_stack_lvl+0x1e3/0x2cb [ 116.528777][ T5557] ? nf_tcp_handle_invalid+0x642/0x642 [ 116.528811][ T5557] ? panic+0x764/0x764 [ 116.528833][ T5557] ? preempt_schedule_common+0xa6/0xd0 [ 116.528858][ T5557] ? vscnprintf+0x59/0x80 [ 116.528884][ T5557] panic+0x318/0x764 [ 116.528907][ T5557] ? check_panic_on_warn+0x1d/0xa0 [ 116.528932][ T5557] ? memcpy_page_flushcache+0xfc/0xfc [ 116.528958][ T5557] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 116.528987][ T5557] ? _raw_spin_unlock+0x40/0x40 [ 116.529019][ T5557] check_panic_on_warn+0x7e/0xa0 [ 116.529043][ T5557] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.529064][ T5557] end_report+0x66/0x110 [ 116.529083][ T5557] kasan_report+0x143/0x160 [ 116.529103][ T5557] ? __x64_sys_unlink+0x45/0x50 [ 116.529133][ T5557] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.529155][ T5557] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.529177][ T5557] kasan_check_range+0x27f/0x290 [ 116.529198][ T5557] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.529220][ T5557] memmove+0x25/0x60 [ 116.529244][ T5557] ext4_xattr_set_entry+0x8ca/0x1f30 [ 116.529280][ T5557] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 116.529302][ T5557] ? ext4_xattr_block_set+0x884/0x3920 [ 116.529321][ T5557] ? kmemdup+0x41/0x60 [ 116.529343][ T5557] ? memcpy+0x3c/0x60 [ 116.529377][ T5557] ext4_xattr_block_set+0xa58/0x3920 [ 116.529406][ T5557] ? __getblk_gfp+0x50/0xa20 [ 116.529427][ T5557] ? _raw_spin_unlock+0x24/0x40 [ 116.529455][ T5557] ? ext4_xattr_block_find+0x510/0x510 [ 116.529482][ T5557] ? ext4_xattr_block_find+0x468/0x510 [ 116.529514][ T5557] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 116.529553][ T5557] ? ext4_xattr_set+0x3d0/0x3d0 [ 116.529579][ T5557] ? rwsem_write_trylock+0x166/0x210 [ 116.529611][ T5557] ? clear_nonspinnable+0x60/0x60 [ 116.529639][ T5557] ? ext4_reserve_inode_write+0x2b3/0x360 [ 116.529670][ T5557] ? dquot_initialize_needed+0x128/0x320 [ 116.529703][ T5557] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 116.529739][ T5557] __ext4_mark_inode_dirty+0x54f/0x920 [ 116.529771][ T5557] ? ext4_blocks_for_truncate+0x270/0x270 [ 116.529800][ T5557] ? current_time+0x1ba/0x300 [ 116.529833][ T5557] ? atime_needs_update+0x7b0/0x7b0 [ 116.529870][ T5557] __ext4_unlink+0x6ed/0xba0 [ 116.529900][ T5557] ? __ext4_read_dirblock+0x890/0x890 [ 116.529928][ T5557] ? rwsem_write_trylock+0x166/0x210 [ 116.529957][ T5557] ? inode_permission+0xf7/0x450 [ 116.529983][ T5557] ? clear_nonspinnable+0x60/0x60 [ 116.530014][ T5557] ext4_unlink+0x1d5/0x670 [ 116.530041][ T5557] vfs_unlink+0x359/0x5f0 [ 116.530074][ T5557] do_unlinkat+0x4a5/0x820 [ 116.530107][ T5557] ? fsnotify_link_count+0xf0/0xf0 [ 116.530145][ T5557] __x64_sys_unlink+0x45/0x50 [ 116.530173][ T5557] do_syscall_64+0x3b/0xb0 [ 116.530203][ T5557] ? clear_bhb_loop+0x45/0xa0 [ 116.530223][ T5557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.530256][ T5557] RIP: 0033:0x7fc169b85d29 [ 116.530283][ T5557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.530299][ T5557] RSP: 002b:00007fc16a9e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 116.530341][ T5557] RAX: ffffffffffffffda RBX: 00007fc169d75fa0 RCX: 00007fc169b85d29 [ 116.530364][ T5557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 116.530378][ T5557] RBP: 00007fc169c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 116.530390][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.530402][ T5557] R13: 0000000000000000 R14: 00007fc169d75fa0 R15: 00007ffde41faa48 [ 116.530425][ T5557] [ 116.534274][ T5557] Kernel Offset: disabled [ 117.298644][ T5557] Rebooting in 86400 seconds..