last executing test programs: 8.12132874s ago: executing program 4 (id=533): syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0xffd9, 0x9, 0x8, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="ad4bd89b"], 0x7) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x9, 0x800) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 7.013504368s ago: executing program 4 (id=538): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a01de00000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000c0a0903000000000000000007000000090002"], 0xc0}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000064c0)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a2c0000000e0a010a0000000000000000070000000900020073797a31000000000900010073797a300000000014000000110001"], 0x54}}, 0x0) 6.91235973s ago: executing program 2 (id=541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffff8, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400c881, 0x0, 0x0) 6.772644636s ago: executing program 0 (id=543): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x609, &(0x7f0000000d40)="$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") 6.772039506s ago: executing program 4 (id=544): socket$unix(0x1, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32], 0x3c}}, 0x0) 6.592734317s ago: executing program 4 (id=545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6.300258201s ago: executing program 4 (id=546): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x2) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d7209f50fd18a6059846f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb875b9ae05ac0000000000"], 0xfd, 0x6b1, &(0x7f0000000280)="$eJzs3V1vG1kdx/Hf2E7iZFFVAapWVbc5bVkpFcW1nW2qqFzsMBknA7bHmnEgkZBWhSarqk6Btkg0NyU3PEjLG+Bub7jgRazE9b4LuAJpBXcgJDRoZjx+iB9St0m6D99P1Ho8c+ac/5zj+t+JPWcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkORvlcsVS3Wtu75jJnI3Ab2RP8hrZntY2p5vpws1pbc7F7UpW/EfFot5OV7/9zX6RS/Ff13UlfXZFxfihqMO3Ll28941CLtt/SsCvQrNW+PT54aP7nc7ek5com9fM1b9Jyr1EoU236YW+17A3XeOFvllfWyvf3qqFpubV3XA3bLsN4wRuru0HZsW5aSrr66vGLe36283NDbvuZivvfqdaLq+Z7y+kAy2pFDpbXr3uNTeTMvHmuMxd89GP0wKu3TBm/2Fnb3Ugnhfj+jguVDnpSOJC1ZMKVcvVaqVSrVbW7qzfuVsuF0ZWlGNWuUcjJU79RYsvmNN9AwdeQy7O/3+1pLqKampbOzJjfxxtKJCvxoTtXVn+f/e2O7XdwfyfZfm5/ubLSvL/1fTZ1Un5f0IsRibZYdwWa8L62X7mkoiMnuq5DvVI99VRR3t6cgp1G5nlU6nlHH425aopT6F8eWrITtaY7hqjda1pTWV9oC3VFMqoJk91uQq1q1BtufEraj4eLVe22vIVyGhFjm7KqKJ1rWtVRq5K2pWvbTW1qQ3Z+ncURft6mPT7aj+m/PGRV1aoMuEgFlTIXnd7qk452kn5/ycv0r27+b9M/v+qSl8HC+nDp9PKAJ8DUff8f0bLZxMNAAAAAAA4C1by23cr+VT+HUmRal7dLb/psAAAAAAAwCmyFC3oiqz0W/l6Rxbn/wAAAAAAfNlYyTV2lqSl5Ev9Vv9yqZf5JUD+HEIEAAAAAACvKbny/+q8FCWTVizLmun8HwAAAAAAfAH8bmCO/UI2x26Ufayfk7T8twXrk38uKJizjlo737IO7HiLfdAtM/INgHbtsnWhO1Fv8jAvKXnmuFesbmvdSTB78w5+tn/SXP9WcCyA+fxgBRMCsOKW1wrdZ/pI19JdrnXnmX9wmFOyJW1lqebV3ZLj1+9VZNsXcm13p/3Lxw9/JQW949x/2Nkr/fRnnQdJLEfxqqODuNIXQ+HkxndGP5ZnyXwLyTUX4454UbWsyd83G0tW0m45O/687IPcYEPTBqDf5m90PR2z61FadumwN+O+JS0nkz9USsmQDR19MGf1o6gcP/JxAzEhimISxY20zI2VG+lDFl9cT84qfjsvVUujYzAURXUwipP7wvrXSF9Mi0JWMe6L1TiKv8QVHYviR5+kO6/OFsXIiADAm7Lfz0LJJOYjeTdLD9mb2ivlnZOz+/vD2f3ZH6M0Q+WlQveziamtFBW/o69YSR6aTyd0L1we845eLv0niiL7QlGD7+j/i1K9HPty2e0oiqLjx/rn/j2QumGPRPHfKIruVZJM8odjWfXjeIePJ7Yb1qv5uAtvPzv4eTIBfuzDvQ/3Hlerq2vl98rlO1XNJf9V6D7kRe4BAIw4+R47SYnclBLWe7qW1nHtwT/eTZeGMt7Xu18pyHT0QLeyWwgsj691aeBrCLfSs1bp+lL6uHRoLl28tygNlLUKyR1ebk08q0ty6UC91V7Z7L5Dx88A+2VXz3IIAAA4d9cn5GFpKP9rOP8Xh/L/La2kJVYujz3vHs7l3bPj3in9pLKVk4N//5Q7AwCArwg3+Mxaav/WCgKv9UFlfb1it7dcE/jOD0zgbWy6xmu23cDZspubrmkFftt3/LppBVrwFt3QhNutlh+0Tc0PTMsPvZ3kzu+me+v30G3YzbbnhK26a4eucfxm23baZsMLHdPa/l7dC7fcINk5bLmOV/Mcu+35TRP624HjlowJXXegoLfhNttezYsXm6YVeA072DU/9OvbDddsuKETeK22n1aYteU1a37QSKotKZr5RocAAHwZPX1++Oh+p7P35PjCYnxqnq450oQyowvzYypkjiAAAD5n+ul6hp2KZxgQAAAAAAAAAAAAAAAAAAAAAAAYcfIlfTMuzI27WFDqrfnFhe4a/Vr9SwxH6rF02oHNspCbda/skojDR59OKbzYW5N1/2CZo1ka1UXplQ/w71+T3krWKF1TOP0+XJwyuGex8N39tEcn95gm9NhCbywKp//PIV54/KcJm6IoiqbvvjDch/PTDnB4oSDpyfxrDMH5vxcBOF//DwAA//9wiz37") stat(&(0x7f00000009c0)='./file0\x00', 0x0) 6.153985087s ago: executing program 0 (id=547): prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10}) sendto$inet(r0, &(0x7f0000000100)='J', 0x1, 0x4000000, 0x0, 0x0) 5.925625314s ago: executing program 2 (id=548): syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0xffd9, 0x9, 0x8, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="ad4bd89b"], 0x7) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x9, 0x800) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 5.878785949s ago: executing program 0 (id=549): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00'}, 0x10) unshare(0x22020400) syz_io_uring_setup(0x5bae, &(0x7f0000000340)={0x0, 0x7150, 0x2, 0x0, 0x2d7}, &(0x7f00000003c0), &(0x7f0000000400)) 5.653920695s ago: executing program 0 (id=550): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 4.957998866s ago: executing program 0 (id=553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0xfdef) 4.953979436s ago: executing program 2 (id=555): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xf3fa7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0xff, 0x20, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[], 0x835, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r3, &(0x7f0000000180)=""/39) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, "7df36db5c6f580eee58828edc06ec4d3c34855e62ee2e6ee99c2266499ed5760"}) 4.461719453s ago: executing program 1 (id=560): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 3.855103664s ago: executing program 1 (id=561): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffa, 0x400600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 3.751725116s ago: executing program 3 (id=562): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xf3fa7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0xff, 0x20, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000180)=""/39) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, "7df36db5c6f580eee58828edc06ec4d3c34855e62ee2e6ee99c2266499ed5760"}) 2.522335938s ago: executing program 3 (id=563): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 2.490373521s ago: executing program 1 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="0001000000000011e26fedbc73c4fb8c85cf7367", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000320000000c009900000000001200000005001c01"], 0x28}}, 0x8094) unshare(0x400) syz_open_dev$loop(&(0x7f0000000840), 0x7, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x6, 0x3ff}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) preadv(r6, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/212, 0xd4}], 0x1, 0x8, 0x0) 2.344102608s ago: executing program 3 (id=565): syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0xffd9, 0x9, 0x8, 0x2}}}}, 0x15) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="ad4bd89b"], 0x7) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_create(0x9, 0x800) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 2.343745598s ago: executing program 2 (id=566): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 2.343488058s ago: executing program 1 (id=567): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x1900}) 2.0699865s ago: executing program 1 (id=568): socket$unix(0x1, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32], 0x3c}}, 0x0) 1.413308836s ago: executing program 3 (id=569): epoll_create1(0x80000) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5885, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.319516907s ago: executing program 3 (id=570): prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10}) sendto$inet(r0, &(0x7f0000000100)='J', 0x1, 0x4000000, 0x0, 0x0) 1.220627588s ago: executing program 3 (id=571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) 198.693887ms ago: executing program 1 (id=572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 171.57075ms ago: executing program 2 (id=573): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}]}}}], 0x18}, 0x0) 85.42214ms ago: executing program 0 (id=574): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x20048881) 488.64µs ago: executing program 2 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=576): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 55.450651][ T4233] cgroup: Unknown subsys name 'net' [ 55.583780][ T4233] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.826825][ T4233] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.007983][ T4251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.015808][ T4254] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.022011][ T4259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.024017][ T4254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.031206][ T4259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.038275][ T4254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.045328][ T4259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.051813][ T4254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.060131][ T4259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.065864][ T4254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.079749][ T4254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.080671][ T4259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.086874][ T4254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.095276][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.102044][ T4254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.109969][ T4259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.123097][ T4254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.123956][ T4260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.130298][ T4254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.138613][ T4260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.146212][ T4259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.153809][ T4260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.166216][ T4260] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.174069][ T4260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.181648][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.186002][ T4254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.189475][ T4260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.196872][ T4259] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.210670][ T4259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.211281][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.533143][ T4245] chnl_net:caif_netlink_parms(): no params data found [ 58.634809][ T4244] chnl_net:caif_netlink_parms(): no params data found [ 58.686574][ T4243] chnl_net:caif_netlink_parms(): no params data found [ 58.745909][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.753284][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.762620][ T4245] device bridge_slave_0 entered promiscuous mode [ 58.774180][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.781412][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.789231][ T4245] device bridge_slave_1 entered promiscuous mode [ 58.846224][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 58.863945][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.889784][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.896882][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.904790][ T4244] device bridge_slave_0 entered promiscuous mode [ 58.913379][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.925634][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.933114][ T4243] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.941544][ T4243] device bridge_slave_0 entered promiscuous mode [ 58.953110][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.960566][ T4243] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.968271][ T4243] device bridge_slave_1 entered promiscuous mode [ 58.984285][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.991535][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.999928][ T4244] device bridge_slave_1 entered promiscuous mode [ 59.016727][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 59.063130][ T4243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.075415][ T4243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.094374][ T4245] team0: Port device team_slave_0 added [ 59.105695][ T4245] team0: Port device team_slave_1 added [ 59.123082][ T4244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.157902][ T4244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.185705][ T4243] team0: Port device team_slave_0 added [ 59.199572][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.206524][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.232632][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.256564][ T4243] team0: Port device team_slave_1 added [ 59.268425][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.275769][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.301974][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.315805][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.323216][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.331331][ T4250] device bridge_slave_0 entered promiscuous mode [ 59.348338][ T4244] team0: Port device team_slave_0 added [ 59.366096][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.373839][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.381655][ T4250] device bridge_slave_1 entered promiscuous mode [ 59.399576][ T4244] team0: Port device team_slave_1 added [ 59.405646][ T4243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.413075][ T4243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.439221][ T4243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.484245][ T4243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.491450][ T4243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.517642][ T4243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.536372][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.543540][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.551851][ T4256] device bridge_slave_0 entered promiscuous mode [ 59.566869][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.573931][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.600109][ T4244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.627904][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.635263][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.643346][ T4256] device bridge_slave_1 entered promiscuous mode [ 59.660639][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.670268][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.677216][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.703451][ T4244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.724211][ T4245] device hsr_slave_0 entered promiscuous mode [ 59.731235][ T4245] device hsr_slave_1 entered promiscuous mode [ 59.745654][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.780385][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.807040][ T4250] team0: Port device team_slave_0 added [ 59.818332][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.844108][ T4250] team0: Port device team_slave_1 added [ 59.865314][ T4243] device hsr_slave_0 entered promiscuous mode [ 59.872033][ T4243] device hsr_slave_1 entered promiscuous mode [ 59.878467][ T4243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.886668][ T4243] Cannot create hsr debugfs directory [ 59.895941][ T4244] device hsr_slave_0 entered promiscuous mode [ 59.902883][ T4244] device hsr_slave_1 entered promiscuous mode [ 59.909917][ T4244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.917478][ T4244] Cannot create hsr debugfs directory [ 59.962500][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.969557][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.995583][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.010828][ T4256] team0: Port device team_slave_0 added [ 60.028083][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.035416][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.062556][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.084398][ T4256] team0: Port device team_slave_1 added [ 60.151510][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.158482][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.184652][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.219667][ T4261] Bluetooth: hci1: command tx timeout [ 60.221668][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.232303][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.258814][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.299515][ T4260] Bluetooth: hci2: command tx timeout [ 60.299557][ T4261] Bluetooth: hci4: command tx timeout [ 60.305077][ T4260] Bluetooth: hci3: command tx timeout [ 60.310700][ T48] Bluetooth: hci0: command tx timeout [ 60.331585][ T4250] device hsr_slave_0 entered promiscuous mode [ 60.338771][ T4250] device hsr_slave_1 entered promiscuous mode [ 60.345688][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.353282][ T4250] Cannot create hsr debugfs directory [ 60.426011][ T4256] device hsr_slave_0 entered promiscuous mode [ 60.433664][ T4256] device hsr_slave_1 entered promiscuous mode [ 60.440624][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.448178][ T4256] Cannot create hsr debugfs directory [ 60.587975][ T4245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.597980][ T4245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.615279][ T4245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.634914][ T4245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.683430][ T4243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.693163][ T4243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.718975][ T4243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.740828][ T4243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.784076][ T4244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.794587][ T4244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.805267][ T4244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.818187][ T4244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.890282][ T4256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.906245][ T4256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.928680][ T4256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.948373][ T4256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.001864][ T4250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.014260][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.032244][ T4243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.041079][ T4250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.054053][ T4250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.078066][ T4250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.093354][ T4243] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.101932][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.111251][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.127032][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.153366][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.161468][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.171572][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.180849][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.190385][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.197624][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.207899][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.221449][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.230408][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.238751][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.245873][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.292946][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.301273][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.310750][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.320851][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.327937][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.335758][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.347273][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.356971][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.366495][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.375402][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.383989][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.392592][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.402369][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.410761][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.419646][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.427973][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.435179][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.448597][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.473406][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.485091][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.493713][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.522170][ T4244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.536739][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.547769][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.557083][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.566656][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.575367][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.591788][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.604798][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.613509][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.638415][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.660788][ T4244] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.678191][ T4245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.688731][ T4245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.707246][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.717355][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.726294][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.735657][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.744845][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.753685][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.764047][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.773298][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.782849][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.801694][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.811396][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.820245][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.827307][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.835943][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.845222][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.855591][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.862718][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.883236][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.900331][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.910742][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.938261][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.948281][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.955461][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.970211][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.984383][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.994945][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.002127][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.018125][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.027141][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.036599][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.067679][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.075795][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.086514][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.096794][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.106476][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.115364][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.125800][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.140610][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.148395][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.163453][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.186796][ T4256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.200609][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.221124][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.235711][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.244727][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.256195][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.265306][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.272465][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.288400][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.296968][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.306896][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.315729][ T4261] Bluetooth: hci1: command tx timeout [ 62.320502][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.328546][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.337924][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.347504][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.355359][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.364305][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.372515][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.380037][ T4261] Bluetooth: hci3: command tx timeout [ 62.380069][ T4261] Bluetooth: hci2: command tx timeout [ 62.389279][ T48] Bluetooth: hci4: command tx timeout [ 62.391860][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.396253][ T48] Bluetooth: hci0: command tx timeout [ 62.417355][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.427661][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.436566][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.445033][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.454836][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.464188][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.472828][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.479961][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.487532][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.496363][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.519190][ T4243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.532835][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.547665][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.558897][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.568737][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.583119][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.592082][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.632757][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.649627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.662519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.671073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.680288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.691429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.700679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.716594][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.743447][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.753591][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.763986][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.772434][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.788006][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.847165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.856310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.873076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.886908][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.899010][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.913320][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.935174][ T4243] device veth0_vlan entered promiscuous mode [ 62.985423][ T4243] device veth1_vlan entered promiscuous mode [ 63.036051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.044692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.060173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.083082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.097461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.107302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.127351][ T4256] device veth0_vlan entered promiscuous mode [ 63.141258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.150132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.157933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.166420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.176541][ T4245] device veth0_vlan entered promiscuous mode [ 63.192090][ T4256] device veth1_vlan entered promiscuous mode [ 63.201542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.211183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.220202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.228162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.236063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.260511][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.278374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.287794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.301673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.313998][ T4245] device veth1_vlan entered promiscuous mode [ 63.325317][ T4244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.376123][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.386343][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.402128][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.412824][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.436592][ T4243] device veth0_macvtap entered promiscuous mode [ 63.454533][ T4245] device veth0_macvtap entered promiscuous mode [ 63.463221][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.472828][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.481711][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.491160][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.500344][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.514669][ T4256] device veth0_macvtap entered promiscuous mode [ 63.524847][ T4243] device veth1_macvtap entered promiscuous mode [ 63.535288][ T4245] device veth1_macvtap entered promiscuous mode [ 63.544992][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.559925][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.568266][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.588184][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.603678][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.614171][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.628711][ T4256] device veth1_macvtap entered promiscuous mode [ 63.663305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.674219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.683236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.692491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.701142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.710774][ T4244] device veth0_vlan entered promiscuous mode [ 63.721374][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.744196][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.755651][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.770205][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.782135][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.793144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.801948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.812292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.821707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.830686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.840043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.848604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.857772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.868436][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.880627][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.892742][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.915051][ T4245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.924389][ T4245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.933698][ T4245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.944363][ T4245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.955925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.965472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.975656][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.987119][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.005729][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.016456][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.027716][ T4243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.038139][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.051424][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.063675][ T4243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.074419][ T4243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.085623][ T4243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.104333][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.113603][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.122465][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.131611][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.142412][ T4244] device veth1_vlan entered promiscuous mode [ 64.153100][ T4256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.162227][ T4256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.171456][ T4256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.180338][ T4256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.204290][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.213983][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.237161][ T4243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.246316][ T4243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.255226][ T4243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.264182][ T4243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.289347][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.297317][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.316537][ T4250] device veth0_vlan entered promiscuous mode [ 64.323985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.334919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.352497][ T4244] device veth0_macvtap entered promiscuous mode [ 64.379187][ T48] Bluetooth: hci1: command tx timeout [ 64.393716][ T4244] device veth1_macvtap entered promiscuous mode [ 64.410540][ T4250] device veth1_vlan entered promiscuous mode [ 64.459338][ T48] Bluetooth: hci0: command tx timeout [ 64.464793][ T48] Bluetooth: hci4: command tx timeout [ 64.470745][ T4261] Bluetooth: hci2: command tx timeout [ 64.473401][ T48] Bluetooth: hci3: command tx timeout [ 64.483823][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.494814][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.505518][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.516253][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.526424][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.537513][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.550239][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.579615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.589278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.597240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.606447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.615230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.625814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.635113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.644038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.654740][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.666854][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.677143][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.688078][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.698319][ T4244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.710785][ T4244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.722266][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.742370][ T4250] device veth0_macvtap entered promiscuous mode [ 64.750029][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.760158][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.760711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.777027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.786512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.795672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.823903][ T4244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.833471][ T4244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.842561][ T4244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.852203][ T4244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.864644][ T4250] device veth1_macvtap entered promiscuous mode [ 64.887738][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.903009][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.904946][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.920886][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.945692][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.956358][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.973109][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.984036][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.994185][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.004893][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.015046][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.025980][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.035946][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.046972][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.058211][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.075379][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.086469][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.097065][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.105105][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.105138][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.105147][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.105159][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.105168][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.105179][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.105189][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.105200][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.112116][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.198870][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.215052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.223710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.233881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.245655][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.255351][ T4250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.265705][ T4250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.275094][ T4250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.311008][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.335146][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.359150][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.378080][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.388485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.396693][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.410521][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.460106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.526948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.555867][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.587951][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.618069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.672498][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.708602][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.753435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.789766][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.797759][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.828070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.906480][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.914419][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.196487][ T4341] device bridge_slave_1 left promiscuous mode [ 66.223565][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.276630][ T4341] device bridge_slave_0 left promiscuous mode [ 66.316576][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.441804][ T26] audit: type=1326 audit(1730282367.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.453434][ T26] audit: type=1326 audit(1730282367.780:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.459074][ T48] Bluetooth: hci1: command tx timeout [ 66.475999][ T26] audit: type=1326 audit(1730282367.800:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.476041][ T26] audit: type=1326 audit(1730282367.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.476069][ T26] audit: type=1326 audit(1730282367.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.477362][ T26] audit: type=1326 audit(1730282367.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.481535][ T26] audit: type=1326 audit(1730282367.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.481781][ T26] audit: type=1326 audit(1730282367.810:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.482084][ T26] audit: type=1326 audit(1730282367.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.527019][ T26] audit: type=1326 audit(1730282367.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4354 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 66.540991][ T4249] Bluetooth: hci2: command tx timeout [ 66.541010][ T48] Bluetooth: hci4: command tx timeout [ 66.541027][ T4249] Bluetooth: hci0: command tx timeout [ 66.541040][ T48] Bluetooth: hci3: command tx timeout [ 66.570775][ T4353] loop4: detected capacity change from 0 to 164 [ 66.685035][ T4363] sg_write: process 9 (syz.3.15) changed security contexts after opening file descriptor, this is not allowed. [ 66.690789][ T4363] program syz.3.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.751912][ T4353] rock: directory entry would overflow storage [ 66.751971][ T4353] rock: sig=0x4f50, size=4, remaining=3 [ 66.751987][ T4353] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 67.593683][ T4375] loop1: detected capacity change from 0 to 512 [ 67.635130][ T4375] ext4: Unknown parameter 'seclabel' [ 67.808710][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.826513][ T4322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.856605][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.865136][ T4381] serio: Serial port pts1 [ 67.930000][ T4389] loop3: detected capacity change from 0 to 128 [ 68.257091][ T4398] loop0: detected capacity change from 0 to 512 [ 68.287031][ T4398] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 68.411244][ T4398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 68.411685][ T4398] System zones: 1-12 [ 68.423334][ T4398] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.423455][ T4398] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.21: Inode bitmap for bg 0 marked uninitialized [ 68.432454][ T4398] EXT4-fs (loop0): Remounting filesystem read-only [ 68.432557][ T4398] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.861665][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 69.038493][ T4407] loop1: detected capacity change from 0 to 2048 [ 69.252388][ T4407] loop1: p1 < > p4 [ 69.287429][ T4407] loop1: p4 size 8388608 extends beyond EOD, truncated [ 69.477569][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 70.722621][ T4445] device pim6reg1 entered promiscuous mode [ 70.748281][ T4446] loop3: detected capacity change from 0 to 764 [ 71.176570][ T4458] loop0: detected capacity change from 0 to 2048 [ 71.262920][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.269545][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.293040][ T4458] loop0: p1 < > p4 [ 71.299766][ T4458] loop0: p4 size 8388608 extends beyond EOD, truncated [ 72.182036][ T4244] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 72.189325][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.200712][ T4418] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.249831][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.250896][ T4418] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.300352][ T4322] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 72.343262][ T4480] smc: net device bond0 applied user defined pnetid SYZ0 [ 72.349961][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.355697][ T4418] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 72.388086][ T4480] smc: net device bond0 erased user defined pnetid SYZ0 [ 72.404608][ T4322] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 72.430364][ T4483] loop1: detected capacity change from 0 to 128 [ 72.447107][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.467180][ T4322] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 72.488914][ T4483] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 72.505641][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.532199][ T4483] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 72.568898][ T4322] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 72.583819][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.613578][ T4322] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 72.646712][ T4322] udevd[4322]: failed to send result of seq 10728 to main daemon: Connection refused [ 73.858395][ T4501] loop0: detected capacity change from 0 to 164 [ 73.892840][ T4500] rock: directory entry would overflow storage [ 73.910685][ T4500] rock: sig=0x4f50, size=4, remaining=3 [ 73.916312][ T4500] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 74.139193][ T4292] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.338874][ T4292] usb 4-1: device descriptor read/64, error -71 [ 74.576061][ T4514] loop2: detected capacity change from 0 to 2048 [ 74.628880][ T4292] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.652207][ T4514] loop2: p1 < > p4 [ 74.664475][ T4514] loop2: p4 size 8388608 extends beyond EOD, truncated [ 74.829228][ T4292] usb 4-1: device descriptor read/64, error -71 [ 75.006358][ T4292] usb usb4-port1: attempt power cycle [ 75.837362][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 75.837376][ T26] audit: type=1326 audit(1730282377.160:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 75.865691][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.905408][ T4528] Zero length message leads to an empty skb [ 75.918878][ T26] audit: type=1326 audit(1730282377.160:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 75.958883][ T26] audit: type=1326 audit(1730282377.190:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 75.980855][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.029085][ T26] audit: type=1326 audit(1730282377.190:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 76.054148][ T26] audit: type=1326 audit(1730282377.190:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 76.076700][ T26] audit: type=1326 audit(1730282377.200:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 76.098687][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.108309][ T26] audit: type=1326 audit(1730282377.200:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 76.130300][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.142867][ T26] audit: type=1326 audit(1730282377.200:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 76.164875][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.171204][ T26] audit: type=1326 audit(1730282377.200:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 76.204001][ T26] audit: type=1326 audit(1730282377.200:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 76.230748][ T4292] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.314843][ T4540] 9pnet_fd: Insufficient options for proto=fd [ 76.329287][ T4292] usb 4-1: device descriptor read/8, error -71 [ 76.618924][ T4292] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 76.979875][ T128] cfg80211: failed to load regulatory.db [ 77.048922][ T4292] usb 4-1: device descriptor read/8, error -71 [ 77.133957][ T4546] loop1: detected capacity change from 0 to 1024 [ 77.178463][ T4292] usb usb4-port1: unable to enumerate USB device [ 77.254011][ T4546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.249743][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 78.275807][ T4568] loop0: detected capacity change from 0 to 128 [ 78.329321][ T4261] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 78.338395][ T4261] Bluetooth: hci0: Injecting HCI hardware error event [ 78.346499][ T4261] Bluetooth: hci0: hardware error 0x00 [ 78.358906][ T4568] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 78.394514][ T4568] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 78.500001][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 78.513080][ T4576] loop2: detected capacity change from 0 to 164 [ 78.549325][ T4578] 9pnet_fd: Insufficient options for proto=fd [ 78.655484][ T4576] rock: directory entry would overflow storage [ 78.655500][ T4576] rock: sig=0x4f50, size=4, remaining=3 [ 78.655518][ T4576] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 78.660157][ T4581] loop1: detected capacity change from 0 to 512 [ 78.723358][ T4581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.81: inode #1: comm syz.1.81: iget: illegal inode # [ 78.760438][ T4581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.81: error while reading EA inode 1 err=-117 [ 78.783423][ T4581] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.817278][ T4581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.81: inode #1: comm syz.1.81: iget: illegal inode # [ 78.833099][ T4581] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.81: error while reading EA inode 1 err=-117 [ 78.919640][ T4581] EXT4-fs (loop1): 1 orphan inode deleted [ 78.925469][ T4581] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.167958][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 79.329051][ T4290] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 79.549037][ T4290] usb 4-1: device descriptor read/64, error -71 [ 79.818916][ T4290] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 80.023121][ T4290] usb 4-1: device descriptor read/64, error -71 [ 80.163310][ T4290] usb usb4-port1: attempt power cycle [ 80.539198][ T4261] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 80.579107][ T4290] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 80.647953][ T4608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 80.699915][ T4290] usb 4-1: device descriptor read/8, error -71 [ 80.979148][ T4290] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 81.099612][ T4290] usb 4-1: device descriptor read/8, error -71 [ 81.159365][ T4610] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.213445][ T4612] 9pnet_fd: Insufficient options for proto=fd [ 81.229228][ T4290] usb usb4-port1: unable to enumerate USB device [ 81.318955][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 81.318969][ T26] audit: type=1326 audit(1730282382.640:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 81.347043][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.398945][ T26] audit: type=1326 audit(1730282382.640:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 81.458925][ T26] audit: type=1326 audit(1730282382.660:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 81.480923][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.522542][ T26] audit: type=1326 audit(1730282382.660:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 81.634009][ T26] audit: type=1326 audit(1730282382.660:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 81.701710][ T26] audit: type=1326 audit(1730282382.660:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 81.711817][ T4625] loop2: detected capacity change from 0 to 1024 [ 81.725036][ T26] audit: type=1326 audit(1730282382.660:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 81.752667][ T26] audit: type=1326 audit(1730282382.660:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 81.775289][ T26] audit: type=1326 audit(1730282382.660:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 81.797244][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.468649][ T26] audit: type=1326 audit(1730282382.660:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4613 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c217e719 code=0x7ffc0000 [ 82.514802][ T4632] loop3: detected capacity change from 0 to 128 [ 82.574215][ T4632] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 82.668066][ T4632] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 83.657256][ T4385] hfsplus: b-tree write err: -5, ino 4 [ 83.778115][ T4646] loop0: detected capacity change from 0 to 164 [ 83.822143][ T4646] rock: directory entry would overflow storage [ 83.828407][ T4646] rock: sig=0x4f50, size=4, remaining=3 [ 83.834066][ T4646] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 83.899348][ T4261] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 83.908099][ T4261] Bluetooth: hci1: Injecting HCI hardware error event [ 83.917010][ T4249] Bluetooth: hci1: hardware error 0x00 [ 84.520900][ T4652] loop4: detected capacity change from 0 to 2048 [ 85.840414][ T4652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.081277][ T4249] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 86.140374][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 86.219002][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.978245][ T4683] device syzkaller0 entered promiscuous mode [ 87.128870][ T14] usb 3-1: device descriptor read/64, error -71 [ 87.171475][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 87.171489][ T26] audit: type=1326 audit(1730282388.500:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 87.199703][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.327725][ T26] audit: type=1326 audit(1730282388.510:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 87.349885][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.390725][ T26] audit: type=1326 audit(1730282388.540:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 87.412897][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.419190][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.495072][ T26] audit: type=1326 audit(1730282388.540:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 87.533194][ T26] audit: type=1326 audit(1730282388.540:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 87.581494][ T26] audit: type=1326 audit(1730282388.540:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 87.603894][ T26] audit: type=1326 audit(1730282388.540:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 87.653701][ T26] audit: type=1326 audit(1730282388.540:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 87.863695][ T4695] loop0: detected capacity change from 0 to 164 [ 87.916694][ T4695] rock: directory entry would overflow storage [ 87.922996][ T4695] rock: sig=0x4f50, size=4, remaining=3 [ 87.928628][ T4695] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 88.238868][ T14] usb 3-1: device descriptor read/64, error -71 [ 88.249110][ T26] audit: type=1326 audit(1730282388.540:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 88.249144][ T26] audit: type=1326 audit(1730282388.540:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 88.321588][ T4697] loop2: detected capacity change from 0 to 2048 [ 88.322232][ T4697] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.369317][ T4697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.380034][ T14] usb usb3-port1: attempt power cycle [ 88.419075][ T4697] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.119: bg 0: block 234: padding at end of block bitmap is not set [ 88.450994][ T4697] EXT4-fs (loop2): Remounting filesystem read-only [ 88.456511][ T4701] loop3: detected capacity change from 0 to 2048 [ 88.548172][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 88.665430][ T4701] loop3: detected capacity change from 0 to 1024 [ 88.678840][ T4701] EXT4-fs: Ignoring removed oldalloc option [ 88.765411][ T4701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.988429][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 89.130439][ T4714] rdma_op ffff8880779da9f0 conn xmit_rdma 0000000000000000 [ 89.969112][ T4729] loop1: detected capacity change from 0 to 128 [ 89.990188][ T4729] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 89.998361][ T4729] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 90.216386][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 90.741976][ T14] usb 4-1: device descriptor read/64, error -71 [ 91.018978][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 91.033295][ T4735] bond1 (unregistering): Released all slaves [ 91.369084][ T14] usb 4-1: device descriptor read/64, error -71 [ 91.403383][ T4745] loop2: detected capacity change from 0 to 1024 [ 91.415607][ T4745] ======================================================= [ 91.415607][ T4745] WARNING: The mand mount option has been deprecated and [ 91.415607][ T4745] and is ignored by this kernel. Remove the mand [ 91.415607][ T4745] option from the mount to silence this warning. [ 91.415607][ T4745] ======================================================= [ 91.465017][ T4745] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 91.489020][ T14] usb usb4-port1: attempt power cycle [ 91.505985][ T4745] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (33208!=20869) [ 91.515744][ T4751] loop0: detected capacity change from 0 to 512 [ 91.536703][ T4745] EXT4-fs (loop2): failed to initialize system zone (-117) [ 91.550566][ T4751] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.560601][ T4745] EXT4-fs (loop2): mount failed [ 91.586364][ T4751] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.594421][ T4751] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.138: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 91.613383][ T4751] EXT4-fs error (device loop0): ext4_quota_enable:6995: comm syz.0.138: Bad quota inode: 4, type: 1 [ 91.625232][ T4751] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.640683][ T4751] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 91.648425][ T4751] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.784976][ T4763] loop4: detected capacity change from 0 to 128 [ 91.810530][ T4763] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 91.863365][ T4763] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 91.998679][ T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 92.279841][ T14] usb 4-1: device descriptor read/8, error -71 [ 92.495405][ T4768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.143'. [ 92.790312][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 93.269002][ T4777] loop2: detected capacity change from 0 to 164 [ 93.319101][ T14] usb 4-1: device descriptor read/8, error -71 [ 93.424140][ T4775] rock: directory entry would overflow storage [ 93.430472][ T4775] rock: sig=0x4f50, size=4, remaining=3 [ 93.436071][ T4775] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 93.466182][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 93.475988][ T14] usb usb4-port1: unable to enumerate USB device [ 93.787518][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 93.787532][ T26] audit: type=1326 audit(1730282395.110:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 93.816223][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.825499][ T4781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'. [ 93.834597][ T4781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 93.889421][ T26] audit: type=1326 audit(1730282395.170:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 93.911725][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.007468][ T26] audit: type=1326 audit(1730282395.170:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 94.029713][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.041812][ T26] audit: type=1326 audit(1730282395.170:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 94.063991][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.087054][ T26] audit: type=1326 audit(1730282395.170:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 94.118532][ T26] audit: type=1326 audit(1730282395.170:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 94.147906][ T26] audit: type=1326 audit(1730282395.170:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 94.242566][ T26] audit: type=1326 audit(1730282395.170:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 94.274684][ T26] audit: type=1326 audit(1730282395.170:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 94.317417][ T4786] netlink: 'syz.0.147': attribute type 39 has an invalid length. [ 94.373247][ T26] audit: type=1326 audit(1730282395.170:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 94.395359][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.835833][ T4811] loop3: detected capacity change from 0 to 128 [ 94.952439][ T4811] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 94.983158][ T4811] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 95.253397][ T4825] loop0: detected capacity change from 0 to 164 [ 95.343287][ T4824] loop2: detected capacity change from 0 to 512 [ 95.396356][ T4822] rock: directory entry would overflow storage [ 95.414477][ T4824] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.453955][ T4824] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.469417][ T4822] rock: sig=0x4f50, size=4, remaining=3 [ 95.475436][ T4822] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 95.489038][ T4290] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.564171][ T4824] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 95.630261][ T4824] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 95.678983][ T4290] usb 5-1: device descriptor read/64, error -71 [ 95.779640][ T4824] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.779640][ T4824] [ 95.848450][ T4824] EXT4-fs (loop2): Total free blocks count 0 [ 95.862341][ T4839] loop1: detected capacity change from 0 to 512 [ 95.889895][ T4824] EXT4-fs (loop2): Free/Dirty block details [ 95.906626][ T4839] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.924787][ T4824] EXT4-fs (loop2): free_blocks=65280 [ 95.948940][ T4824] EXT4-fs (loop2): dirty_blocks=1 [ 95.968869][ T4290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.984132][ T4824] EXT4-fs (loop2): Block reservation details [ 96.007795][ T4824] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 96.051714][ T4839] EXT4-fs (loop1): 1 truncate cleaned up [ 96.077329][ T4839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.127928][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 96.150403][ T4845] loop3: detected capacity change from 0 to 128 [ 96.179001][ T4290] usb 5-1: device descriptor read/64, error -71 [ 96.248649][ T4846] syz.3.170: attempt to access beyond end of device [ 96.248649][ T4846] loop3: rw=2049, sector=145, nr_sectors = 424 limit=128 [ 96.261061][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 96.296737][ T4844] syz.3.170: attempt to access beyond end of device [ 96.296737][ T4844] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 96.317608][ T4290] usb usb5-port1: attempt power cycle [ 96.400503][ T4845] syz.3.170: attempt to access beyond end of device [ 96.400503][ T4845] loop3: rw=0, sector=177, nr_sectors = 1 limit=128 [ 98.249361][ T4249] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 98.258668][ T4249] Bluetooth: hci3: Injecting HCI hardware error event [ 98.266734][ T4261] Bluetooth: hci3: hardware error 0x00 [ 98.377183][ T4868] loop4: detected capacity change from 0 to 512 [ 98.556378][ T4868] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 98.575900][ T4868] EXT4-fs (loop4): orphan cleanup on readonly fs [ 98.577405][ T4877] loop3: detected capacity change from 0 to 1024 [ 98.596300][ T4868] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 98.617813][ T4868] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 98.627336][ T4868] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #16: comm syz.4.176: corrupted xattr block 31 [ 98.695107][ T4877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.716461][ T4868] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 98.929582][ T4868] EXT4-fs (loop4): 1 orphan inode deleted [ 98.935390][ T4868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.966715][ T4868] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 99.739494][ T4249] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 99.748177][ T4249] Bluetooth: hci4: Injecting HCI hardware error event [ 99.756869][ T48] Bluetooth: hci4: hardware error 0x00 [ 99.794641][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 99.831873][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 99.838457][ T4896] syz.1.183 uses obsolete (PF_INET,SOCK_PACKET) [ 100.121894][ T4914] loop2: detected capacity change from 0 to 512 [ 100.129626][ T4914] EXT4-fs: Ignoring removed bh option [ 100.144022][ T4914] EXT4-fs error (device loop2): __ext4_iget:5055: inode #15: block 1803188595: comm syz.2.190: invalid block [ 100.156985][ T4914] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.190: couldn't read orphan inode 15 (err -117) [ 100.169476][ T4914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.181457][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 100.181470][ T26] audit: type=1800 audit(1730282401.510:200): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.190" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 100.208334][ T4288] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 100.394429][ T4261] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 100.468428][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 100.488951][ T4288] usb 4-1: device descriptor read/64, error -71 [ 100.554087][ T4927] loop0: detected capacity change from 0 to 1024 [ 100.610701][ T4929] loop2: detected capacity change from 0 to 512 [ 100.626406][ T4929] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 100.640656][ T4929] EXT4-fs (loop2): orphan cleanup on readonly fs [ 100.648096][ T4927] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.809071][ T4929] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.827479][ T4288] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 100.845197][ T4929] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 100.852918][ T4929] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #16: comm syz.2.195: corrupted xattr block 31 [ 100.882731][ T4929] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 100.953956][ T4929] EXT4-fs (loop2): 1 orphan inode deleted [ 100.995473][ T4929] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.500558][ T4929] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 101.558186][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 101.598474][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 101.618989][ T4288] usb 4-1: device descriptor read/64, error -71 [ 101.739257][ T4288] usb usb4-port1: attempt power cycle [ 101.888483][ T26] audit: type=1326 audit(1730282403.210:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 101.911637][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 102.028937][ T26] audit: type=1326 audit(1730282403.280:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 102.108348][ T26] audit: type=1326 audit(1730282403.280:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 102.154282][ T26] audit: type=1326 audit(1730282403.280:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 102.228909][ T26] audit: type=1326 audit(1730282403.290:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 102.285364][ T4288] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 102.295569][ T26] audit: type=1326 audit(1730282403.290:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 102.328692][ T26] audit: type=1326 audit(1730282403.290:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 102.351184][ T26] audit: type=1326 audit(1730282403.290:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 102.542735][ T26] audit: type=1326 audit(1730282403.290:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4951 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 102.701208][ T4288] usb 4-1: device descriptor read/8, error -71 [ 102.707824][ T4966] loop4: detected capacity change from 0 to 1024 [ 102.770533][ T4966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.918636][ T4973] loop1: detected capacity change from 0 to 512 [ 103.002192][ T4288] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 103.216634][ T4973] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 103.336201][ T4973] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.509906][ T4973] EXT4-fs warning (device loop1): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.578975][ T4973] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 103.616507][ T4973] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #16: comm syz.1.209: corrupted xattr block 31 [ 103.663945][ T4985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 103.664993][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 103.673773][ T4973] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 103.686546][ T4985] netlink: 124 bytes leftover after parsing attributes in process `syz.3.215'. [ 103.688234][ T4973] EXT4-fs (loop1): 1 orphan inode deleted [ 103.707217][ T4973] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.728212][ T4973] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 103.778111][ T4991] syz.3.218[4991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.778359][ T4991] syz.3.218[4991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.780282][ T4989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'. [ 103.874921][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 103.895321][ T4288] usb 4-1: device not accepting address 17, error -71 [ 103.904525][ T4288] usb usb4-port1: unable to enumerate USB device [ 103.911107][ T4993] tipc: Enabling of bearer rejected, failed to enable media [ 104.858086][ T5016] loop4: detected capacity change from 0 to 1024 [ 105.131390][ T5025] loop2: detected capacity change from 0 to 512 [ 105.181777][ T5025] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 105.230177][ T5025] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.273665][ T5025] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 105.337111][ T5025] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 105.360781][ T5027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.383374][ T5025] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #16: comm syz.2.231: corrupted xattr block 31 [ 105.425038][ T5025] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 105.442670][ T5031] loop0: detected capacity change from 0 to 512 [ 105.456499][ T5025] EXT4-fs (loop2): 1 orphan inode deleted [ 105.471831][ T5025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.489076][ T5031] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.232: inode #1: comm syz.0.232: iget: illegal inode # [ 105.512147][ T5025] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 105.526072][ T5031] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.232: error while reading EA inode 1 err=-117 [ 105.539804][ T5031] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.232: inode #1: comm syz.0.232: iget: illegal inode # [ 105.577769][ T5031] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.232: error while reading EA inode 1 err=-117 [ 105.613461][ T5031] EXT4-fs (loop0): 1 orphan inode deleted [ 105.619968][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.621083][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 105.714034][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 105.722180][ T5034] loop2: detected capacity change from 0 to 512 [ 105.738991][ T5034] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 105.744398][ T5027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.765265][ T5034] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 105.769074][ T4290] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.794195][ T5034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.850861][ T5027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.879524][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 105.879537][ T26] audit: type=1326 audit(1730282407.210:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 105.912153][ T46] hfsplus: b-tree write err: -5, ino 4 [ 105.975349][ T26] audit: type=1326 audit(1730282407.210:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 106.013030][ T5043] netlink: 'syz.4.236': attribute type 3 has an invalid length. [ 106.045622][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 106.054864][ T5043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 106.074034][ T5027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.084775][ T26] audit: type=1326 audit(1730282407.220:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 106.109352][ T4290] usb 2-1: device descriptor read/64, error -71 [ 106.147060][ T26] audit: type=1326 audit(1730282407.220:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 106.884376][ T26] audit: type=1326 audit(1730282407.220:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 106.941767][ T26] audit: type=1326 audit(1730282407.220:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.0.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b417e719 code=0x7ffc0000 [ 107.015877][ T5058] loop2: detected capacity change from 0 to 512 [ 107.040899][ T5058] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 107.050380][ T5058] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.057191][ T5058] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 107.064415][ T5027] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.076846][ T5058] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 107.088868][ T4290] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.094477][ T5058] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #16: comm syz.2.244: corrupted xattr block 31 [ 107.127803][ T5058] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 107.143970][ T5058] EXT4-fs (loop2): 1 orphan inode deleted [ 107.146901][ T5027] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.158920][ T5058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.175675][ T5027] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.184869][ T5058] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 107.218448][ T5027] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.266370][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 107.279000][ T4290] usb 2-1: device descriptor read/64, error -71 [ 107.308097][ T5071] loop4: detected capacity change from 0 to 1024 [ 107.539838][ T4290] usb usb2-port1: attempt power cycle [ 108.841064][ T26] audit: type=1326 audit(1730282410.170:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 108.997840][ T26] audit: type=1326 audit(1730282410.170:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 109.023956][ T5138] hfsplus: b-tree write err: -5, ino 4 [ 109.259669][ T26] audit: type=1326 audit(1730282410.170:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 109.380913][ T5157] xt_hashlimit: max too large, truncated to 1048576 [ 109.398887][ T26] audit: type=1326 audit(1730282410.170:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5132 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 109.557481][ T5168] loop1: detected capacity change from 0 to 164 [ 109.584644][ T5168] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 109.587449][ T5161] netlink: 808 bytes leftover after parsing attributes in process `syz.2.264'. [ 109.848940][ T4290] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.069068][ T4290] usb 1-1: device descriptor read/64, error -71 [ 110.349136][ T4290] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.516501][ T5182] loop3: detected capacity change from 0 to 2048 [ 110.568976][ T4290] usb 1-1: device descriptor read/64, error -71 [ 110.663793][ T5182] loop3: p1 < > p4 [ 110.678077][ T5182] loop3: p4 size 8388608 extends beyond EOD, truncated [ 110.699847][ T4290] usb usb1-port1: attempt power cycle [ 110.834570][ T5201] loop1: detected capacity change from 0 to 512 [ 110.845092][ T5201] EXT4-fs: Ignoring removed oldalloc option [ 110.875338][ T5201] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.921411][ T5207] loop4: detected capacity change from 0 to 1024 [ 110.928585][ T5207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.935158][ T5201] EXT4-fs (loop1): 1 truncate cleaned up [ 110.935742][ T5207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.949521][ T5201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.967954][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 110.967969][ T26] audit: type=1800 audit(1730282412.290:245): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.282" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 111.015112][ T5207] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814e01c, mo2=0003] [ 111.020953][ T5212] loop3: detected capacity change from 0 to 128 [ 111.026159][ T5207] System zones: 0-1, 3-36 [ 111.041935][ T5207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.109431][ T4290] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.126153][ T5205] syz.3.281: attempt to access beyond end of device [ 111.126153][ T5205] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 111.164056][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 111.177400][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 111.209295][ T4290] usb 1-1: device descriptor read/8, error -71 [ 111.338498][ T26] audit: type=1326 audit(1730282412.660:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 111.479770][ T4290] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.594033][ T26] audit: type=1326 audit(1730282412.660:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 111.661154][ T4290] usb 1-1: device descriptor read/8, error -71 [ 111.800045][ T4290] usb usb1-port1: unable to enumerate USB device [ 111.980209][ T26] audit: type=1326 audit(1730282412.660:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 112.235868][ T26] audit: type=1326 audit(1730282413.560:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ed57e719 code=0x7ffc0000 [ 112.302141][ T26] audit: type=1326 audit(1730282413.560:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ed57e719 code=0x7ffc0000 [ 112.335268][ T26] audit: type=1326 audit(1730282669.598:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ed57e719 code=0x7ffc0000 [ 112.371142][ T26] audit: type=1326 audit(1730282669.598:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ed57e719 code=0x7ffc0000 [ 112.398878][ T26] audit: type=1326 audit(1730282669.598:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ed57e719 code=0x7ffc0000 [ 112.426238][ T26] audit: type=1326 audit(1730282669.598:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5236 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09ed57e719 code=0x7ffc0000 [ 112.513707][ T5253] loop3: detected capacity change from 0 to 2048 [ 112.710213][ T5253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.550510][ T14] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 113.821183][ T5280] loop1: detected capacity change from 0 to 512 [ 113.831968][ T5280] EXT4-fs: Ignoring removed orlov option [ 113.905303][ T5280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.071819][ T5280] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.096508][ T5280] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.310: bg 0: block 248: padding at end of block bitmap is not set [ 114.122370][ T5280] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.310: Failed to acquire dquot type 1 [ 114.144022][ T5280] EXT4-fs (loop1): 1 truncate cleaned up [ 114.338024][ T5280] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.379008][ T14] usb 5-1: Invalid ep0 maxpacket: 32 [ 114.458547][ T5280] syz.1.310 (5280) used greatest stack depth: 19808 bytes left [ 114.547791][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 114.608909][ T14] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 114.625305][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 114.772625][ T5297] loop3: detected capacity change from 0 to 4096 [ 114.809023][ T128] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.978985][ T14] usb 5-1: Invalid ep0 maxpacket: 32 [ 114.984744][ T14] usb usb5-port1: attempt power cycle [ 115.135073][ T128] usb 1-1: device descriptor read/64, error -71 [ 117.468734][ T128] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.008823][ C0] sched: RT throttling activated [ 119.040980][ T5331] device pim6reg1 entered promiscuous mode [ 119.202188][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 119.202206][ T26] audit: type=1326 audit(1730282676.528:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 119.355715][ T26] audit: type=1326 audit(1730282676.558:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.2.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 120.257811][ T5357] loop4: detected capacity change from 0 to 4096 [ 123.069979][ T4292] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 123.083602][ T26] audit: type=1326 audit(1730282680.408:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 123.127550][ T26] audit: type=1326 audit(1730282680.438:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 123.327092][ T26] audit: type=1326 audit(1730282680.478:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 123.353412][ T26] audit: type=1326 audit(1730282680.478:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 123.384294][ T26] audit: type=1326 audit(1730282680.478:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 123.406970][ T4292] usb 1-1: device descriptor read/64, error -71 [ 123.494010][ T26] audit: type=1326 audit(1730282680.478:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 124.018945][ T26] audit: type=1326 audit(1730282680.478:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 124.114470][ T26] audit: type=1326 audit(1730282680.478:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774a97e719 code=0x7ffc0000 [ 124.202647][ T5404] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.271530][ T5404] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 124.325757][ T5409] device syzkaller0 entered promiscuous mode [ 124.378482][ T5407] loop3: detected capacity change from 0 to 4096 [ 127.557149][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 127.557175][ T26] audit: type=1326 audit(1730282684.878:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.587801][ T26] audit: type=1326 audit(1730282684.898:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.614844][ T5447] loop4: detected capacity change from 0 to 512 [ 127.617951][ T26] audit: type=1326 audit(1730282684.898:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.628008][ T5447] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.661599][ T26] audit: type=1326 audit(1730282684.898:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.672476][ T5447] EXT4-fs (loop4): 1 truncate cleaned up [ 127.687942][ T26] audit: type=1326 audit(1730282684.918:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.698584][ T5447] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.718684][ T26] audit: type=1326 audit(1730282684.918:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.748666][ T26] audit: type=1326 audit(1730282684.918:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.772974][ T26] audit: type=1326 audit(1730282684.918:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.795218][ T26] audit: type=1326 audit(1730282684.918:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.798246][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 127.826530][ T26] audit: type=1326 audit(1730282684.918:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5446 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 127.951361][ T5453] loop4: detected capacity change from 0 to 1024 [ 128.927845][ T32] hfsplus: b-tree write err: -5, ino 4 [ 129.032079][ T5457] loop4: detected capacity change from 0 to 4096 [ 130.079145][ T5404] siw: device registration error -19 [ 132.217826][ T5491] loop2: detected capacity change from 0 to 128 [ 132.496337][ T5491] syz.2.383: attempt to access beyond end of device [ 132.496337][ T5491] loop2: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 132.535581][ T5493] loop3: detected capacity change from 0 to 4096 [ 132.551968][ T5490] syz.2.383: attempt to access beyond end of device [ 132.551968][ T5490] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 132.657126][ T5500] device syzkaller0 entered promiscuous mode [ 132.729544][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.735936][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.467916][ T5512] loop2: detected capacity change from 0 to 128 [ 133.476321][ T5512] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 133.484550][ T5512] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 135.887736][ T5533] loop3: detected capacity change from 0 to 2048 [ 136.014676][ T5533] loop3: p1 < > p4 [ 136.022034][ T5533] loop3: p4 size 8388608 extends beyond EOD, truncated [ 136.068256][ T5535] loop2: detected capacity change from 0 to 512 [ 136.108779][ T5535] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.115822][ T5535] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.397: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 136.134895][ T5535] EXT4-fs error (device loop2): ext4_quota_enable:6995: comm syz.2.397: Bad quota inode: 4, type: 1 [ 136.148313][ T5535] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.163216][ T5535] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 136.170023][ T5535] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.507159][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 137.717859][ T5548] loop2: detected capacity change from 0 to 4096 [ 138.633013][ T48] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 138.642184][ T48] Bluetooth: hci2: Injecting HCI hardware error event [ 138.650435][ T4261] Bluetooth: hci2: hardware error 0x00 [ 138.823756][ T5556] loop2: detected capacity change from 0 to 128 [ 138.831383][ T5556] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 138.839980][ T5556] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 139.114404][ T48] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 139.368248][ T5560] loop0: detected capacity change from 0 to 16 [ 139.445663][ T5560] erofs: (device loop0): mounted with root inode @ nid 36. [ 140.708347][ T4261] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 142.285186][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 142.307970][ T5577] loop4: detected capacity change from 0 to 512 [ 142.371150][ T5577] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.498742][ T5577] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.410: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 142.522179][ T5577] EXT4-fs error (device loop4): ext4_quota_enable:6995: comm syz.4.410: Bad quota inode: 4, type: 1 [ 142.523017][ T5573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.533654][ T5577] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 142.580869][ T5577] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 142.596645][ T5577] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.634595][ T5587] loop1: detected capacity change from 0 to 2048 [ 142.807554][ T5587] loop1: p1 < > p4 [ 142.822739][ T5587] loop1: p4 size 8388608 extends beyond EOD, truncated [ 142.900945][ T5573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.995778][ T5602] loop0: detected capacity change from 0 to 128 [ 143.004739][ T5602] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 143.013948][ T5602] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 143.040691][ T5573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.273532][ T5598] device syzkaller0 entered promiscuous mode [ 143.285279][ T5606] loop1: detected capacity change from 0 to 1024 [ 143.334531][ T5573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.374340][ T5606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.358895][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 145.434475][ T5626] loop0: detected capacity change from 0 to 16 [ 145.464628][ T5626] erofs: (device loop0): mounted with root inode @ nid 36. [ 146.020791][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 146.571511][ T5636] netlink: 76 bytes leftover after parsing attributes in process `syz.0.428'. [ 146.687680][ T5639] loop0: detected capacity change from 0 to 2048 [ 146.730214][ T5639] loop0: p1 < > p4 [ 146.735114][ T5639] loop0: p4 size 8388608 extends beyond EOD, truncated [ 146.892568][ T5641] loop0: detected capacity change from 0 to 128 [ 146.900270][ T5641] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 146.908643][ T5641] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 147.594776][ T5573] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.627104][ T5645] loop4: detected capacity change from 0 to 1024 [ 147.627822][ T5573] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.680371][ T5645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.700702][ T5573] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.742348][ T5573] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.534570][ T5663] loop0: detected capacity change from 0 to 512 [ 148.597952][ T5663] EXT4-fs (loop0): orphan cleanup on readonly fs [ 148.631518][ T5663] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.435: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 148.686375][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 148.703625][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 148.731951][ T5663] EXT4-fs error (device loop0): ext4_quota_enable:6995: comm syz.0.435: Bad quota inode: 4, type: 1 [ 148.752294][ T5663] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.787719][ T5663] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 148.809033][ T5663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.081667][ T5678] device syzkaller0 entered promiscuous mode [ 149.115575][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 149.310373][ T5690] loop3: detected capacity change from 0 to 128 [ 149.318179][ T5690] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 149.332214][ T5690] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 150.072458][ T5698] loop2: detected capacity change from 0 to 1024 [ 150.113393][ T5698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.063079][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 151.154719][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 152.157399][ T5727] loop2: detected capacity change from 0 to 1024 [ 152.208384][ T5727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.697118][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.705532][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.725993][ T5704] device bridge_slave_1 left promiscuous mode [ 152.738743][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.766391][ T5704] device bridge_slave_0 left promiscuous mode [ 152.773766][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.033866][ T5745] loop3: detected capacity change from 0 to 1024 [ 154.095910][ T5748] loop1: detected capacity change from 0 to 512 [ 154.126454][ T5745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.293032][ T5748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.349330][ T5748] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.721275][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 154.756644][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 154.788066][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 154.867543][ T5763] netlink: 5 bytes leftover after parsing attributes in process `syz.3.465'. [ 154.985902][ T5766] device syzkaller0 entered promiscuous mode [ 156.505169][ T5789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.474'. [ 156.725178][ T5795] loop2: detected capacity change from 0 to 1024 [ 156.767777][ T5795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 157.679563][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.686979][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.745032][ T5775] device bridge_slave_1 left promiscuous mode [ 157.759269][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.800800][ T5775] device bridge_slave_0 left promiscuous mode [ 157.824559][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.199203][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 158.546202][ T5817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.485'. [ 159.672060][ T5827] loop0: detected capacity change from 0 to 4096 [ 159.841183][ T5834] device syzkaller0 entered promiscuous mode [ 160.710194][ T5843] loop0: detected capacity change from 0 to 1024 [ 160.767602][ T5843] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.975636][ T5847] loop3: detected capacity change from 0 to 8192 [ 161.815875][ T5859] loop3: detected capacity change from 0 to 1024 [ 161.904027][ T5859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.772330][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 162.779706][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 163.804709][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.500'. [ 163.976609][ T5877] loop0: detected capacity change from 0 to 512 [ 164.009098][ T5877] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 164.018215][ T5877] EXT4-fs (loop0): orphan cleanup on readonly fs [ 164.030345][ T5877] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 164.051210][ T5877] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 164.064184][ T5877] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #16: comm syz.0.502: corrupted xattr block 31 [ 164.078093][ T5877] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 164.087323][ T5877] EXT4-fs (loop0): 1 orphan inode deleted [ 164.093122][ T5877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.106498][ T5877] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 164.141659][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 164.272293][ T5880] loop0: detected capacity change from 0 to 4096 [ 165.402999][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.411133][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.435794][ T5841] device bridge_slave_1 left promiscuous mode [ 165.442210][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.452860][ T5841] device bridge_slave_0 left promiscuous mode [ 165.460603][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.997701][ T5898] loop2: detected capacity change from 0 to 1024 [ 168.009704][ T5898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.048080][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.512'. [ 168.073584][ T5914] loop0: detected capacity change from 0 to 512 [ 168.090949][ T5919] loop3: detected capacity change from 0 to 4096 [ 168.106643][ T5914] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 168.116268][ T5914] EXT4-fs (loop0): orphan cleanup on readonly fs [ 168.124183][ T5914] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 168.140454][ T5914] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 168.148925][ T5914] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #16: comm syz.0.513: corrupted xattr block 31 [ 168.179405][ T5914] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 168.188537][ T5914] EXT4-fs (loop0): 1 orphan inode deleted [ 168.197774][ T5916] device syzkaller0 entered promiscuous mode [ 168.203940][ T5914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.329370][ T5914] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 169.002493][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 169.206729][ T5937] loop0: detected capacity change from 0 to 512 [ 169.272430][ T5937] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.518: inode #1: comm syz.0.518: iget: illegal inode # [ 169.335386][ T5937] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.518: error while reading EA inode 1 err=-117 [ 169.383307][ T5937] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.518: inode #1: comm syz.0.518: iget: illegal inode # [ 169.441750][ T5937] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.518: error while reading EA inode 1 err=-117 [ 169.502753][ T5937] EXT4-fs (loop0): 1 orphan inode deleted [ 169.513213][ T5937] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.604187][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 169.624015][ T4244] EXT4-fs (loop0): unmounting filesystem. [ 171.964715][ T5962] loop1: detected capacity change from 0 to 512 [ 172.005915][ T5962] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 172.029874][ T5963] loop3: detected capacity change from 0 to 1024 [ 172.062873][ T5963] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 172.085563][ T5963] EXT4-fs (loop3): write access will be enabled during recovery [ 172.115491][ T5963] JBD2: no valid journal superblock found [ 172.126323][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.526'. [ 172.130163][ T5962] EXT4-fs (loop1): 1 truncate cleaned up [ 172.142610][ T5962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.146323][ T5963] EXT4-fs (loop3): error loading journal [ 172.184107][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 172.494597][ T5973] loop4: detected capacity change from 0 to 512 [ 172.565510][ T5973] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 172.590058][ T5973] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.609107][ T5973] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.623592][ T5974] loop0: detected capacity change from 0 to 4096 [ 172.636864][ T5976] loop1: detected capacity change from 0 to 1024 [ 172.638936][ T5973] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 172.725787][ T5973] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #16: comm syz.4.528: corrupted xattr block 31 [ 172.768003][ T5976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.789521][ T5973] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 172.826730][ T5973] EXT4-fs (loop4): 1 orphan inode deleted [ 172.838396][ T5983] syz.2.531[5983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.838493][ T5983] syz.2.531[5983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.875061][ T5973] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 172.948974][ T5973] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 173.179930][ T5983] block device autoloading is deprecated and will be removed. [ 173.400082][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 174.588046][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 174.857617][ T6021] loop0: detected capacity change from 0 to 2048 [ 175.076848][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 175.076924][ T26] audit: type=1326 audit(1730282732.398:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 175.178138][ T26] audit: type=1326 audit(1730282732.438:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 175.229685][ T6021] loop0: p2 < > [ 175.289180][ T26] audit: type=1326 audit(1730282732.438:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 175.315671][ T26] audit: type=1326 audit(1730282732.438:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 175.339927][ T26] audit: type=1326 audit(1730282732.438:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 175.362444][ T26] audit: type=1326 audit(1730282732.438:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 175.400712][ T26] audit: type=1326 audit(1730282732.448:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 175.462012][ T26] audit: type=1326 audit(1730282732.448:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984717e719 code=0x7ffc0000 [ 176.206478][ T4243] EXT4-fs (loop1): unmounting filesystem. [ 176.631662][ T6046] loop4: detected capacity change from 0 to 164 [ 176.691134][ T6050] loop2: detected capacity change from 0 to 1024 [ 176.735553][ T6043] rock: directory entry would overflow storage [ 176.739959][ T6048] device syzkaller0 entered promiscuous mode [ 176.746664][ T6043] rock: sig=0x4f50, size=4, remaining=3 [ 176.785275][ T6050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.793464][ T6043] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 177.101998][ T6068] syz.1.560[6068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.102099][ T6068] syz.1.560[6068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.903708][ T6075] loop3: detected capacity change from 0 to 1024 [ 178.022017][ T6075] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.002236][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 179.075760][ T6083] netlink: 'syz.3.563': attribute type 3 has an invalid length. [ 179.113382][ T6085] Cannot find del_set index 4 as target [ 179.132902][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 181.353931][ T6106] loop1: detected capacity change from 0 to 512 [ 181.414630][ T6106] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.487697][ T6106] EXT4-fs (loop1): 1 truncate cleaned up [ 181.519209][ T6106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.575866][ T6106] ================================================================== [ 181.583975][ T6106] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 181.591731][ T6106] Read of size 18446744073709551572 at addr ffff888077a1c850 by task syz.1.572/6106 [ 181.601110][ T6106] [ 181.603473][ T6106] CPU: 1 PID: 6106 Comm: syz.1.572 Not tainted 6.1.114-syzkaller #0 [ 181.611473][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.621550][ T6106] Call Trace: [ 181.624838][ T6106] [ 181.627786][ T6106] dump_stack_lvl+0x1e3/0x2cb [ 181.632487][ T6106] ? nf_tcp_handle_invalid+0x642/0x642 [ 181.637965][ T6106] ? panic+0x764/0x764 [ 181.642050][ T6106] ? _printk+0xd1/0x111 [ 181.646216][ T6106] ? __virt_addr_valid+0x17f/0x530 [ 181.651342][ T6106] ? __virt_addr_valid+0x17f/0x530 [ 181.656475][ T6106] print_report+0x15f/0x4f0 [ 181.660996][ T6106] ? __virt_addr_valid+0x17f/0x530 [ 181.666125][ T6106] ? __virt_addr_valid+0x17f/0x530 [ 181.671249][ T6106] ? __virt_addr_valid+0x45b/0x530 [ 181.676412][ T6106] ? __phys_addr+0xb6/0x170 [ 181.680938][ T6106] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 181.686496][ T6106] kasan_report+0x136/0x160 [ 181.691015][ T6106] ? __x64_sys_unlink+0x45/0x50 [ 181.695878][ T6106] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 181.701344][ T6106] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 181.706814][ T6106] kasan_check_range+0x27f/0x290 [ 181.711758][ T6106] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 181.717226][ T6106] memmove+0x25/0x60 [ 181.721130][ T6106] ext4_xattr_set_entry+0x8ca/0x1f30 [ 181.726427][ T6106] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 181.732860][ T6106] ? ext4_xattr_block_set+0x884/0x3920 [ 181.738332][ T6106] ? kmemdup+0x41/0x60 [ 181.742420][ T6106] ? memcpy+0x3c/0x60 [ 181.746421][ T6106] ext4_xattr_block_set+0xa58/0x3920 [ 181.751727][ T6106] ? __getblk_gfp+0x50/0xa20 [ 181.756325][ T6106] ? _raw_spin_unlock+0x24/0x40 [ 181.761188][ T6106] ? ext4_xattr_block_find+0x510/0x510 [ 181.766662][ T6106] ? ext4_xattr_block_find+0x468/0x510 [ 181.772142][ T6106] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 181.778064][ T6106] ? ext4_xattr_set+0x3d0/0x3d0 [ 181.782929][ T6106] ? rwsem_write_trylock+0x166/0x210 [ 181.788233][ T6106] ? clear_nonspinnable+0x60/0x60 [ 181.793270][ T6106] ? ext4_reserve_inode_write+0x2b3/0x360 [ 181.799021][ T6106] ? dquot_initialize_needed+0x128/0x320 [ 181.804690][ T6106] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 181.810352][ T6106] __ext4_mark_inode_dirty+0x54f/0x920 [ 181.815838][ T6106] ? ext4_blocks_for_truncate+0x270/0x270 [ 181.821575][ T6106] ? current_time+0x1ba/0x300 [ 181.826269][ T6106] ? atime_needs_update+0x7b0/0x7b0 [ 181.831493][ T6106] __ext4_unlink+0x6ed/0xba0 [ 181.836104][ T6106] ? __ext4_read_dirblock+0x890/0x890 [ 181.841493][ T6106] ? rwsem_write_trylock+0x166/0x210 [ 181.846788][ T6106] ? inode_permission+0xf7/0x450 [ 181.851736][ T6106] ? clear_nonspinnable+0x60/0x60 [ 181.856774][ T6106] ext4_unlink+0x1d5/0x670 [ 181.861204][ T6106] vfs_unlink+0x359/0x5f0 [ 181.865571][ T6106] do_unlinkat+0x4a5/0x820 [ 181.870009][ T6106] ? fsnotify_link_count+0xf0/0xf0 [ 181.875138][ T6106] __x64_sys_unlink+0x45/0x50 [ 181.879828][ T6106] do_syscall_64+0x3b/0xb0 [ 181.884246][ T6106] ? clear_bhb_loop+0x45/0xa0 [ 181.888929][ T6106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.894838][ T6106] RIP: 0033:0x7f47c217e719 [ 181.899276][ T6106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.918894][ T6106] RSP: 002b:00007f47c2f6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 181.927331][ T6106] RAX: ffffffffffffffda RBX: 00007f47c2335f80 RCX: 00007f47c217e719 [ 181.935330][ T6106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 181.943328][ T6106] RBP: 00007f47c21f132e R08: 0000000000000000 R09: 0000000000000000 [ 181.951322][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.959310][ T6106] R13: 0000000000000000 R14: 00007f47c2335f80 R15: 00007fffc8ea9728 [ 181.967309][ T6106] [ 181.970342][ T6106] [ 181.972763][ T6106] Allocated by task 6106: [ 181.977093][ T6106] kasan_set_track+0x4b/0x70 [ 181.981718][ T6106] __kasan_kmalloc+0x97/0xb0 [ 181.986318][ T6106] __kmalloc_node_track_caller+0xb1/0x220 [ 181.992101][ T6106] kmemdup+0x26/0x60 [ 181.996010][ T6106] ext4_xattr_block_set+0x884/0x3920 [ 182.001304][ T6106] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 182.007210][ T6106] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 182.012859][ T6106] __ext4_mark_inode_dirty+0x54f/0x920 [ 182.018340][ T6106] __ext4_unlink+0x6ed/0xba0 [ 182.022953][ T6106] ext4_unlink+0x1d5/0x670 [ 182.027387][ T6106] vfs_unlink+0x359/0x5f0 [ 182.031730][ T6106] do_unlinkat+0x4a5/0x820 [ 182.036160][ T6106] __x64_sys_unlink+0x45/0x50 [ 182.040848][ T6106] do_syscall_64+0x3b/0xb0 [ 182.045274][ T6106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.051181][ T6106] [ 182.053525][ T6106] Last potentially related work creation: [ 182.059241][ T6106] kasan_save_stack+0x3b/0x60 [ 182.063946][ T6106] __kasan_record_aux_stack+0xb0/0xc0 [ 182.069329][ T6106] kvfree_call_rcu+0x116/0x8c0 [ 182.074109][ T6106] neigh_remove_one+0x5c6/0x6d0 [ 182.078974][ T6106] ___neigh_create+0x459/0x24b0 [ 182.083832][ T6106] ip6_finish_output2+0x15ae/0x15f0 [ 182.089044][ T6106] ip6_finish_output+0x6a0/0xa80 [ 182.093991][ T6106] ndisc_send_skb+0xbab/0x14e0 [ 182.098761][ T6106] addrconf_rs_timer+0x357/0x610 [ 182.103705][ T6106] call_timer_fn+0x1ad/0x6b0 [ 182.108305][ T6106] __run_timers+0x67c/0x890 [ 182.112821][ T6106] run_timer_softirq+0x63/0xf0 [ 182.117592][ T6106] handle_softirqs+0x2ee/0xa40 [ 182.122376][ T6106] __irq_exit_rcu+0x157/0x240 [ 182.127066][ T6106] irq_exit_rcu+0x5/0x20 [ 182.131321][ T6106] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 182.136975][ T6106] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 182.142979][ T6106] [ 182.145302][ T6106] The buggy address belongs to the object at ffff888077a1c800 [ 182.145302][ T6106] which belongs to the cache kmalloc-1k of size 1024 [ 182.159372][ T6106] The buggy address is located 80 bytes inside of [ 182.159372][ T6106] 1024-byte region [ffff888077a1c800, ffff888077a1cc00) [ 182.172658][ T6106] [ 182.174988][ T6106] The buggy address belongs to the physical page: [ 182.181420][ T6106] page:ffffea0001de8600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77a18 [ 182.191756][ T6106] head:ffffea0001de8600 order:3 compound_mapcount:0 compound_pincount:0 [ 182.200087][ T6106] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 182.208060][ T6106] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c41dc0 [ 182.216635][ T6106] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 182.225200][ T6106] page dumped because: kasan: bad access detected [ 182.231600][ T6106] page_owner tracks the page as allocated [ 182.237301][ T6106] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4256, tgid 4256 (syz-executor), ts 62184050512, free_ts 61937077349 [ 182.258734][ T6106] post_alloc_hook+0x18d/0x1b0 [ 182.263534][ T6106] get_page_from_freelist+0x322e/0x33b0 [ 182.269066][ T6106] __alloc_pages+0x28d/0x770 [ 182.273648][ T6106] alloc_slab_page+0x6a/0x150 [ 182.278317][ T6106] new_slab+0x84/0x2d0 [ 182.282385][ T6106] ___slab_alloc+0xc20/0x1270 [ 182.287083][ T6106] __kmem_cache_alloc_node+0x19f/0x260 [ 182.292531][ T6106] __kmalloc_node+0xa2/0x230 [ 182.297109][ T6106] qdisc_alloc+0x93/0xa30 [ 182.301427][ T6106] qdisc_create_dflt+0x5d/0x500 [ 182.306268][ T6106] dev_activate+0x3b4/0x1200 [ 182.310875][ T6106] __dev_open+0x3f3/0x510 [ 182.315193][ T6106] __dev_change_flags+0x1db/0x6e0 [ 182.320205][ T6106] dev_change_flags+0x87/0x190 [ 182.324956][ T6106] do_setlink+0xcf4/0x3de0 [ 182.329367][ T6106] rtnl_newlink+0x172c/0x2050 [ 182.334035][ T6106] page last free stack trace: [ 182.338697][ T6106] free_unref_page_prepare+0xf63/0x1120 [ 182.344576][ T6106] free_unref_page+0x33/0x3e0 [ 182.349241][ T6106] __unfreeze_partials+0x1b7/0x210 [ 182.354356][ T6106] put_cpu_partial+0x17b/0x250 [ 182.359135][ T6106] qlist_free_all+0x76/0xe0 [ 182.363626][ T6106] kasan_quarantine_reduce+0x156/0x170 [ 182.369080][ T6106] __kasan_slab_alloc+0x1f/0x70 [ 182.373918][ T6106] slab_post_alloc_hook+0x52/0x3a0 [ 182.379019][ T6106] kmem_cache_alloc+0x10c/0x2d0 [ 182.383858][ T6106] getname_flags+0xb8/0x4f0 [ 182.388358][ T6106] __x64_sys_newfstatat+0x130/0x1e0 [ 182.393721][ T6106] do_syscall_64+0x3b/0xb0 [ 182.398125][ T6106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.404013][ T6106] [ 182.406325][ T6106] Memory state around the buggy address: [ 182.411939][ T6106] ffff888077a1c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.419983][ T6106] ffff888077a1c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.428029][ T6106] >ffff888077a1c800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 182.436079][ T6106] ^ [ 182.442736][ T6106] ffff888077a1c880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 182.450780][ T6106] ffff888077a1c900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 182.458823][ T6106] ================================================================== [ 182.649090][ T6106] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 182.656328][ T6106] CPU: 0 PID: 6106 Comm: syz.1.572 Not tainted 6.1.114-syzkaller #0 [ 182.664323][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.674392][ T6106] Call Trace: [ 182.677673][ T6106] [ 182.680602][ T6106] dump_stack_lvl+0x1e3/0x2cb [ 182.685294][ T6106] ? nf_tcp_handle_invalid+0x642/0x642 [ 182.690766][ T6106] ? panic+0x764/0x764 [ 182.694843][ T6106] ? preempt_schedule_common+0xa6/0xd0 [ 182.700311][ T6106] ? vscnprintf+0x59/0x80 [ 182.704646][ T6106] panic+0x318/0x764 [ 182.708547][ T6106] ? check_panic_on_warn+0x1d/0xa0 [ 182.713664][ T6106] ? memcpy_page_flushcache+0xfc/0xfc [ 182.719043][ T6106] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 182.725030][ T6106] ? _raw_spin_unlock+0x40/0x40 [ 182.729891][ T6106] check_panic_on_warn+0x7e/0xa0 [ 182.734839][ T6106] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 182.740308][ T6106] end_report+0x66/0x110 [ 182.744557][ T6106] kasan_report+0x143/0x160 [ 182.749065][ T6106] ? __x64_sys_unlink+0x45/0x50 [ 182.753932][ T6106] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 182.759411][ T6106] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 182.764884][ T6106] kasan_check_range+0x27f/0x290 [ 182.769838][ T6106] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 182.775303][ T6106] memmove+0x25/0x60 [ 182.779208][ T6106] ext4_xattr_set_entry+0x8ca/0x1f30 [ 182.784511][ T6106] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 182.790941][ T6106] ? ext4_xattr_block_set+0x884/0x3920 [ 182.796410][ T6106] ? kmemdup+0x41/0x60 [ 182.800492][ T6106] ? memcpy+0x3c/0x60 [ 182.804490][ T6106] ext4_xattr_block_set+0xa58/0x3920 [ 182.809793][ T6106] ? __getblk_gfp+0x50/0xa20 [ 182.814391][ T6106] ? _raw_spin_unlock+0x24/0x40 [ 182.819254][ T6106] ? ext4_xattr_block_find+0x510/0x510 [ 182.824726][ T6106] ? ext4_xattr_block_find+0x468/0x510 [ 182.830199][ T6106] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 182.836108][ T6106] ? ext4_xattr_set+0x3d0/0x3d0 [ 182.840964][ T6106] ? rwsem_write_trylock+0x166/0x210 [ 182.846255][ T6106] ? clear_nonspinnable+0x60/0x60 [ 182.851285][ T6106] ? ext4_reserve_inode_write+0x2b3/0x360 [ 182.857017][ T6106] ? dquot_initialize_needed+0x128/0x320 [ 182.862662][ T6106] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 182.868305][ T6106] __ext4_mark_inode_dirty+0x54f/0x920 [ 182.873775][ T6106] ? ext4_blocks_for_truncate+0x270/0x270 [ 182.879510][ T6106] ? current_time+0x1ba/0x300 [ 182.884198][ T6106] ? atime_needs_update+0x7b0/0x7b0 [ 182.889449][ T6106] __ext4_unlink+0x6ed/0xba0 [ 182.894052][ T6106] ? __ext4_read_dirblock+0x890/0x890 [ 182.899438][ T6106] ? rwsem_write_trylock+0x166/0x210 [ 182.904733][ T6106] ? inode_permission+0xf7/0x450 [ 182.909764][ T6106] ? clear_nonspinnable+0x60/0x60 [ 182.914802][ T6106] ext4_unlink+0x1d5/0x670 [ 182.919231][ T6106] vfs_unlink+0x359/0x5f0 [ 182.923572][ T6106] do_unlinkat+0x4a5/0x820 [ 182.928000][ T6106] ? fsnotify_link_count+0xf0/0xf0 [ 182.933124][ T6106] __x64_sys_unlink+0x45/0x50 [ 182.937810][ T6106] do_syscall_64+0x3b/0xb0 [ 182.942231][ T6106] ? clear_bhb_loop+0x45/0xa0 [ 182.946912][ T6106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.952812][ T6106] RIP: 0033:0x7f47c217e719 [ 182.957234][ T6106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.976851][ T6106] RSP: 002b:00007f47c2f6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 182.985453][ T6106] RAX: ffffffffffffffda RBX: 00007f47c2335f80 RCX: 00007f47c217e719 [ 182.993437][ T6106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 183.001413][ T6106] RBP: 00007f47c21f132e R08: 0000000000000000 R09: 0000000000000000 [ 183.009391][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.017366][ T6106] R13: 0000000000000000 R14: 00007f47c2335f80 R15: 00007fffc8ea9728 [ 183.025351][ T6106] [ 183.028661][ T6106] Kernel Offset: disabled [ 183.032973][ T6106] Rebooting in 86400 seconds..