last executing test programs: 1.976954384s ago: executing program 1 (id=234): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd9d7, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) setns(0xc9, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) sendfile(r4, r4, 0x0, 0x7f03) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0300"}) 1.943853579s ago: executing program 1 (id=235): unshare(0x22020600) syz_usb_connect$uac3(0x4, 0x80, &(0x7f0000000100)=ANY=[], 0x0) 1.822215938s ago: executing program 0 (id=237): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) preadv2(r1, &(0x7f0000002600)=[{&(0x7f00000012c0)=""/4101, 0x1005}, {0x0}, {0x0}], 0x3, 0xa, 0xfffff53a, 0x0) 1.766107549s ago: executing program 0 (id=238): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd38, 0x1, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.765783392s ago: executing program 0 (id=239): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x2, 0x200, 0x4}) 1.607769728s ago: executing program 2 (id=244): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_usb_connect$uac3(0x6, 0x0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000880)=@abs, 0x0, 0x0) syz_usb_connect$midi(0x2, 0x32, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0xb, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x9, 0x16, 0x3ff, 0x7, 0x47, 0x6, {0x5, 0x25, 0x1, 0x1, 'q'}}}]}}}}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x200, 0x5, 0x83, 0x1, 0x20}, 0xf, &(0x7f0000000f40)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x7, 0x0, 0x6}]}, 0x2, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x44a}}]}) 1.422401294s ago: executing program 1 (id=245): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0x7fff0000}, {0x5, 0x6, 0x9, 0x8001}, {0x9, 0x4, 0x1, 0xf}, {0x0, 0xf1, 0x0, 0x1}, {0xdd82, 0xff, 0xc, 0x2}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1, 0x30}) 1.388745608s ago: executing program 1 (id=246): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0xfffffffffffffffe, 0x0, 0x0}, 0x7}], 0x1, 0x10121, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 996.937642ms ago: executing program 3 (id=255): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x3, "01"}, @main=@item_012={0x1, 0x0, 0xa, "b8"}, @global=@item_4={0x3, 0x1, 0x2, "eea8ccc5"}, @local=@item_012={0x1, 0x2, 0x2, "04"}, @global=@item_4={0x3, 0x1, 0x0, "0717e753"}, @local=@item_012={0x2, 0x2, 0x4, "d7c5"}, @global=@item_4={0x3, 0x1, 0x3, "a84dd34f"}]}}, 0x0}, 0x0) 996.489732ms ago: executing program 2 (id=256): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f00000001c0), 0xff, 0x554, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) 792.529939ms ago: executing program 2 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x2, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x2, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000680)=r0}, 0x20) 765.539981ms ago: executing program 2 (id=258): socket(0x10, 0x3, 0x9) socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) dup(0xffffffffffffffff) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88900, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 731.086144ms ago: executing program 2 (id=259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @eol]}}}}}}}, 0x0) 712.078099ms ago: executing program 2 (id=260): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timerfd_create(0x8, 0x0) open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$eJzs289vFFUcAPDvbFt+YyviDxC1ij8af7S0oHLwgtGEi4mJHvBYSyFIoYbWRAiR6gGPhpNH9WjiX+BJLkY9abzq3ZgQw0U0kYyZ3ZllaXeX7W63C+znk0x33uybed83M6998940gL41mv1IIrZFxG8RMRwRA8szjFY+rl09P/PP1fMzSaTpW38l2W7x99XzM0XWJP/cmifGStVNKyycPXdyem5u9kyenlg89f7EwtlzL5w4NX189vjs6amDBw/sn3z5pakX16Se27NYd380v2fX4XcuvTFz5NK7P36TBbct/762HhUjHZc5GqMNT8BTHR/99rI9/2x4wbktZW19MCKGyu1/OAbKqYrheP2TngYHdFWapunGFVurPYClFLiLJdHrCIDeKP7QZ8+/xbKO3Y+eu3Ko8gCU1ftavlS+GYxSnmeo5vl2rY1GxJGlf7/Ilqg7DgEAsLa+y/o/z9fr/5XigZp89+RzQyMRcW9E7IiI+yJiZ0TcH1HO+2BEPLTK8keXpW+Ufz0fhPplc/u1u7UrhyJ5JZ/burn/V/T+YmQgT20v138oOXZibnZffk7GYmhjlp5sUsbl1379rNF3tf2/bMnKL/qCeRx/Di4boDs6vTjdSZ1rXfm4PAZ4YWX9k+pMQBIRuyJidxvH3xQRJ579ek91w4aag+aa17+JwTYCWib9KuKZyvVfimX1j5pQm8xPTmyKudl9E8VdsdJPP198s1H5t77+3ZVd/y117/9q/UeS2vnahdWXcfH3Txs+07R7/29I3i6vF7fTh9OLi2cmIzYkSyu3T93Yt0gX+bP6j+2t3/53RFz/Mt/v4YjIbuJHIuLRiHgsj/3xiHgiIvY2qf8Prz75Xvv1766s/kdXdf1XvzJw8vtvG5Xf2vU/UF4by7e08vuv1QA7OXcAAABwpyiV34FPSuPV9VJpfLzyDv/O2FKam19YfO7Y/Aenj1belR+JoVIx0jVcMx46mY+5FOmpfKy4SO8vjxunaZpuLqfHZ+bnujWnDrRma4P2n/ljoNfRAV1Xnkc7+Hlrmf2HF9xVbppHH+pdHMD6W4P3aIA7lPYP/Uv7h/5Vr/1fiLjWg1CAdebvP/Qv7R/6l/YP/Uv7h77Uyf/1N1vZcbhbR74TVy5HRKM8A20feWNEdBrh01vb3T1KvT6rra8U77RVt5TqZP6vVxFm17HVzBdivQLr8S8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfJ/AAAA///tr+cS") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) r1 = getpid() r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x3, 0x0, r3}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x34}}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_lifetime={0x4, 0x3, 0x88a, 0x80000001, 0x1, 0x5}]}, 0x88}}, 0x0) 537.433748ms ago: executing program 1 (id=261): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0) 403.717753ms ago: executing program 3 (id=262): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x2800088, &(0x7f0000000340)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b7, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r2, 0x0) read$FUSE(r1, &(0x7f0000003e40)={0x2020}, 0x2020) write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x11aa) 281.871727ms ago: executing program 4 (id=264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2000000000000014}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lseek(r0, 0x0, 0x4) 264.277637ms ago: executing program 4 (id=265): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x3, 0x4, 0x1000000000001}) 134.265522ms ago: executing program 3 (id=266): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 90.083435ms ago: executing program 4 (id=267): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 89.826023ms ago: executing program 0 (id=268): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000000608"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) 89.566097ms ago: executing program 3 (id=269): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x18, r0, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 89.054986ms ago: executing program 0 (id=270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @eol]}}}}}}}, 0x0) 82.177157ms ago: executing program 4 (id=271): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008050}, 0x40080) 69.90477ms ago: executing program 0 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000180), 0xff, 0x80000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f0000004000)=0x8007, 0x4, 0x0, 0x0, &(0x7f0000004000)=0x2, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400ff0200000000000000000000000000010c00028005fbffffff00000006000340000300003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c000280050001"], 0xd0}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) 46.466834ms ago: executing program 3 (id=273): unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getflags(r0, 0x401) 45.827169ms ago: executing program 4 (id=274): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r1 = open_tree(r0, &(0x7f0000000000)='./mnt\x00', 0x8101) close(r1) 533.701µs ago: executing program 3 (id=275): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x100008, 0x0, 0xffffffffffffffff, 0x3}, 0x50) 250.043µs ago: executing program 1 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x7, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x1008}, @generic={0xbf, 0x4, 0xa}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=277): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) 0s ago: executing program 3 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='add', 0xffffffd9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 21.522998][ T4695] cgroup: Unknown subsys name 'net' [ 21.703301][ T4695] cgroup: Unknown subsys name 'cpuset' [ 21.704632][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.854088][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 23.419451][ T4714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 23.419832][ T4714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 23.420040][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 23.420381][ T4714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 23.420588][ T4714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 23.432639][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 23.432913][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 23.433062][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 23.433410][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 23.433620][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 23.435596][ T4714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 23.450300][ T4717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 23.457187][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 23.457323][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 23.457936][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 23.458151][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 23.461621][ T4725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 23.465743][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 23.471141][ T4714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 23.481889][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 23.482032][ T4714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 23.482673][ T4714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 23.483138][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 23.499343][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 23.499607][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 23.817541][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.817752][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.817815][ T4710] bridge_slave_0: entered allmulticast mode [ 23.818281][ T4710] bridge_slave_0: entered promiscuous mode [ 23.836221][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.836262][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.836325][ T4710] bridge_slave_1: entered allmulticast mode [ 23.836773][ T4710] bridge_slave_1: entered promiscuous mode [ 23.871240][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.885377][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.888132][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.888195][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.888254][ T4719] bridge_slave_0: entered allmulticast mode [ 23.888657][ T4719] bridge_slave_0: entered promiscuous mode [ 23.889658][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.889676][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.889719][ T4719] bridge_slave_1: entered allmulticast mode [ 23.890140][ T4719] bridge_slave_1: entered promiscuous mode [ 23.890522][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.890549][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.890636][ T4715] bridge_slave_0: entered allmulticast mode [ 23.891013][ T4715] bridge_slave_0: entered promiscuous mode [ 23.891937][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.891959][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.892005][ T4715] bridge_slave_1: entered allmulticast mode [ 23.892778][ T4715] bridge_slave_1: entered promiscuous mode [ 23.899628][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.900480][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.906834][ T4715] team0: Port device team_slave_0 added [ 23.907565][ T4715] team0: Port device team_slave_1 added [ 23.940225][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.940237][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.940253][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.944396][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.944454][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.944538][ T4722] bridge_slave_0: entered allmulticast mode [ 23.944951][ T4722] bridge_slave_0: entered promiscuous mode [ 23.946399][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.946421][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.946468][ T4722] bridge_slave_1: entered allmulticast mode [ 23.946892][ T4722] bridge_slave_1: entered promiscuous mode [ 23.950380][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.950389][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.950404][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.954653][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.955483][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.961253][ T4722] team0: Port device team_slave_0 added [ 23.963190][ T4722] team0: Port device team_slave_1 added [ 23.968916][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.968924][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.968938][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.969480][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.969486][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.969496][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.980086][ T4722] hsr_slave_0: entered promiscuous mode [ 23.980438][ T4722] hsr_slave_1: entered promiscuous mode [ 23.996438][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.996465][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.996529][ T4711] bridge_slave_0: entered allmulticast mode [ 23.996946][ T4711] bridge_slave_0: entered promiscuous mode [ 23.998473][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.998494][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.998580][ T4711] bridge_slave_1: entered allmulticast mode [ 23.998969][ T4711] bridge_slave_1: entered promiscuous mode [ 24.003575][ T4710] team0: Port device team_slave_0 added [ 24.004328][ T4710] team0: Port device team_slave_1 added [ 24.011219][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.013060][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.034243][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.034255][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.034268][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.040642][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.044798][ T4715] hsr_slave_0: entered promiscuous mode [ 24.045114][ T4715] hsr_slave_1: entered promiscuous mode [ 24.045320][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 24.045353][ T4715] Cannot create hsr debugfs directory [ 24.045593][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.045599][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.045611][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.057980][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.068988][ T4710] hsr_slave_0: entered promiscuous mode [ 24.069282][ T4710] hsr_slave_1: entered promiscuous mode [ 24.069467][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 24.069477][ T4710] Cannot create hsr debugfs directory [ 24.070150][ T4719] team0: Port device team_slave_0 added [ 24.071478][ T4719] team0: Port device team_slave_1 added [ 24.075487][ T4711] team0: Port device team_slave_0 added [ 24.089193][ T4711] team0: Port device team_slave_1 added [ 24.104350][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.104361][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.104376][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.120727][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.120736][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.120748][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.121116][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.121124][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.121136][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.121476][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.121483][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.121497][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.158576][ T4711] hsr_slave_0: entered promiscuous mode [ 24.158844][ T4711] hsr_slave_1: entered promiscuous mode [ 24.159010][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 24.159019][ T4711] Cannot create hsr debugfs directory [ 24.172515][ T4719] hsr_slave_0: entered promiscuous mode [ 24.172823][ T4719] hsr_slave_1: entered promiscuous mode [ 24.173020][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 24.173030][ T4719] Cannot create hsr debugfs directory [ 24.187250][ T4722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.189838][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.190150][ T4722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.191525][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.205030][ T4722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.205973][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.208784][ T4722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.209743][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.235137][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.237057][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.249517][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.250620][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.259037][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.259068][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.259202][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.259233][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.263717][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.265793][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.266086][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.268020][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.302723][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.302752][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.302816][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.302843][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.308618][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.311239][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.311563][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.323536][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.324082][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.325065][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.329031][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.329983][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.341686][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.356568][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.356993][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.358546][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.359198][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.360461][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.361158][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.363773][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.378728][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.379245][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.380381][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.389260][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.389893][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.391210][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.396066][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.409230][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.409265][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.409615][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.409634][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.413238][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.432405][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.432428][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.435425][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.436813][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.449734][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.449748][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.452518][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.455456][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.455745][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.457086][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.458041][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.458070][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.473717][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.474369][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.475677][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.491507][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.514914][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.546666][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.558975][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.573293][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.573321][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.573686][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.573708][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.574254][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.574274][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.574571][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.574588][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.579243][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.579255][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.604557][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.619387][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.623205][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.633677][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.639262][ T4719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.639278][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.667046][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.667079][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.667386][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.667404][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.670785][ T4715] veth0_vlan: entered promiscuous mode [ 24.685641][ T4715] veth1_vlan: entered promiscuous mode [ 24.691147][ T4715] veth0_macvtap: entered promiscuous mode [ 24.703970][ T4715] veth1_macvtap: entered promiscuous mode [ 24.707450][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.708555][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.710335][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.710485][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.710512][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.710535][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.735149][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.745587][ T4722] veth0_vlan: entered promiscuous mode [ 24.747763][ T4722] veth1_vlan: entered promiscuous mode [ 24.777201][ T4722] veth0_macvtap: entered promiscuous mode [ 24.778441][ T4722] veth1_macvtap: entered promiscuous mode [ 24.798833][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.799782][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.807684][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.838573][ T4710] veth0_vlan: entered promiscuous mode [ 24.840803][ T4710] veth1_vlan: entered promiscuous mode [ 24.860323][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.860336][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.868241][ T4710] veth0_macvtap: entered promiscuous mode [ 24.871400][ T4710] veth1_macvtap: entered promiscuous mode [ 24.886816][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.888308][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.904289][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.905346][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.905381][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.905390][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.905653][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.906213][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.906245][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.906253][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.906416][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.933243][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.933386][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.935498][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.935510][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.936372][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.947013][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.968865][ T4711] veth0_vlan: entered promiscuous mode [ 24.972674][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.975043][ T4711] veth1_vlan: entered promiscuous mode [ 24.979564][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.979576][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.000180][ T4715] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.000563][ T4711] veth0_macvtap: entered promiscuous mode [ 25.009752][ T4711] veth1_macvtap: entered promiscuous mode [ 25.017434][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.017447][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.019221][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.020573][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.082804][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.082869][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.082987][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.084860][ T4719] veth0_vlan: entered promiscuous mode [ 25.086829][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.086840][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.089290][ T4719] veth1_vlan: entered promiscuous mode [ 25.112669][ T3524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.127326][ T4719] veth0_macvtap: entered promiscuous mode [ 25.127637][ T4896] loop2: detected capacity change from 0 to 2048 [ 25.134278][ T4719] veth1_macvtap: entered promiscuous mode [ 25.136779][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.136790][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.170403][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.171376][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.181919][ T4896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.219791][ T4903] loop3: detected capacity change from 0 to 1024 [ 25.220191][ T4903] EXT4-fs: Ignoring removed bh option [ 25.228283][ T4903] EXT4-fs (loop3): stripe (18) is not aligned with cluster size (16), stripe is disabled [ 25.265277][ T3524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.265442][ T3524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.265463][ T3524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.265477][ T3524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.266681][ T4903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.286174][ T4903] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.301456][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.301466][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.332199][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.340954][ T4909] loop1: detected capacity change from 0 to 2048 [ 25.357051][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.357063][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.414451][ T4909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.433269][ T4915] loop3: detected capacity change from 0 to 128 [ 25.433646][ T4915] vfat: Unknown parameter 'defcontext' [ 25.447357][ T30] audit: type=1326 audit(25.440:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4908 comm="syz.1.2" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b79368 code=0x0 [ 25.498146][ T4896] fs-verity (loop2, inode 13): Error -28 writing Merkle tree block 1441 [ 25.498198][ T4896] fs-verity (loop2, inode 13): Error -28 building Merkle tree [ 25.512206][ T4725] Bluetooth: hci4: command tx timeout [ 25.512311][ T4725] Bluetooth: hci3: command tx timeout [ 25.512385][ T4725] Bluetooth: hci2: command tx timeout [ 25.512454][ T4725] Bluetooth: hci1: command tx timeout [ 25.512521][ T4725] Bluetooth: hci0: command tx timeout [ 25.546686][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.569837][ T4923] loop4: detected capacity change from 0 to 128 [ 25.573917][ T4923] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 25.620584][ T4930] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 25.624274][ T10] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 25.646857][ T4934] loop2: detected capacity change from 0 to 1024 [ 25.661624][ T4934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 25.671098][ T4935] fido_id[4935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 25.689526][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.756141][ T4937] WARNING! power/level is deprecated; use power/control instead [ 25.824576][ T4953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25'. [ 26.061010][ T4953] bond0: (slave bond_slave_0): Releasing backup interface [ 26.123973][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.124832][ T4953] bond_slave_0: entered promiscuous mode [ 26.124845][ T4953] bond_slave_0: entered allmulticast mode [ 26.200246][ T4959] loop1: detected capacity change from 0 to 1024 [ 26.207076][ T4959] EXT4-fs: Ignoring removed oldalloc option [ 26.207096][ T4959] EXT4-fs: Ignoring removed orlov option [ 26.207098][ T4964] loop4: detected capacity change from 0 to 2048 [ 26.223486][ T4964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.230207][ T4959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.266662][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.285489][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.291648][ T4973] loop0: detected capacity change from 0 to 2048 [ 26.309842][ T4973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.330987][ T4973] EXT4-fs error (device loop0): ext4_find_extent:904: inode #2: comm syz.0.33: inode has invalid extent depth: 8 [ 26.333032][ T4973] EXT4-fs (loop0): Remounting filesystem read-only [ 26.340089][ T4978] Bluetooth: MGMT ver 1.23 [ 26.364242][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.413231][ T4989] loop1: detected capacity change from 0 to 8 [ 26.419657][ T4989] Filesystem uses "lzo" compression. This is not supported [ 26.594158][ T5010] binder: 5008:5010 tried to acquire reference to desc 0, got 1 instead [ 26.594507][ T5010] binder: 5008:5010 tried to acquire reference to desc 0, got 1 instead [ 26.594542][ T5010] binder_alloc: 5008: binder_alloc_buf size 4352 failed, no address space [ 26.594564][ T5010] binder_alloc: allocated: 8256 (num: 1 largest: 8256), free: 4032 (num: 1 largest: 4032) [ 26.594602][ T5010] binder: cannot allocate buffer: no space left [ 26.594622][ T5010] binder: 5008:5010 transaction call to 5008:0 failed 9/29201/-28, code 0 size 252-0 line 3408 [ 26.594913][ T4796] binder: release 5008:5010 transaction 7 out, still active [ 26.594924][ T4796] binder: undelivered TRANSACTION_COMPLETE [ 26.595165][ T4796] binder: undelivered TRANSACTION_ERROR: 29201 [ 26.600874][ T4796] binder: send failed reply for transaction 7, target dead [ 26.639655][ T5017] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 26.639990][ T5017] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 26.640018][ T5017] loop2: lost filesystem error report for type 5 error -12 [ 26.640728][ T5017] EXT4-fs (loop2): 1 truncate cleaned up [ 26.650520][ T5017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.666154][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.678855][ T5024] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.47: corrupted in-inode xattr: invalid ea_ino [ 26.678912][ T5024] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 26.679192][ T5024] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.47: couldn't read orphan inode 15 (err -117) [ 26.679212][ T5024] loop4: lost filesystem error report for type 5 error -117 [ 26.679956][ T5024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.727071][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.759594][ T5033] EXT4-fs: quotafile must be on filesystem root [ 26.849230][ T5039] EXT4-fs: quotafile must be on filesystem root [ 27.226094][ T5046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.226463][ T5046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.601764][ T50] Bluetooth: hci0: command tx timeout [ 27.601790][ T50] Bluetooth: hci1: command tx timeout [ 27.601805][ T50] Bluetooth: hci2: command tx timeout [ 27.601818][ T50] Bluetooth: hci3: command tx timeout [ 27.601831][ T50] Bluetooth: hci4: command tx timeout [ 27.748831][ T5077] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.043997][ T4719] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.163526][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 28.367297][ T5092] netlink: 76 bytes leftover after parsing attributes in process `syz.3.74'. [ 28.385243][ T5094] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.385254][ T5094] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.392309][ T5094] EXT4-fs (loop3): 1 truncate cleaned up [ 28.392772][ T5094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.580875][ T5106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.604594][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.658432][ T5114] binder: 5113:5114 ioctl 4018620d 0 returned -22 [ 28.658602][ T5114] binder: 5113:5114 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 28.658614][ T5114] binder: 5114 RLIMIT_NICE not set [ 28.658621][ T5114] binder: 5113:5114 ioctl c0306201 20000280 returned -11 [ 28.684195][ T5112] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.684209][ T5112] EXT4-fs: Ignoring removed bh option [ 28.686806][ T5112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.687319][ T5119] warning: `syz.2.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 28.696677][ T5112] Quota error (device loop1): do_check_range: Getting block 4278190084 out of range 1-5 [ 28.696731][ T5112] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 28.696744][ T5112] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.82: Failed to acquire dquot type 1 [ 28.722611][ T5112] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 28.731213][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.893916][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.936191][ T5134] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 28.936206][ T5134] FAT-fs (loop3): Filesystem has been set read-only [ 29.179628][ T5147] binder: 5145:5147 tried to acquire reference to desc 0, got 1 instead [ 29.180010][ T5147] binder: 5145:5147 got transaction with invalid parent offset or type [ 29.180021][ T5147] binder: 5147:5145 failed to fixup parent [ 29.180064][ T5147] binder: 5145:5147 transaction call to 5145:0 failed 14/29201/-22, code 0 size 88-24 line 3717 [ 29.180666][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 29.190157][ T5146] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.94: iget: bad i_size value: 38620345925642 [ 29.190182][ T5146] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 29.190338][ T5146] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.94: couldn't read orphan inode 15 (err -117) [ 29.190354][ T5146] loop3: lost filesystem error report for type 5 error -117 [ 29.190886][ T5146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.210379][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.246433][ T5152] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 29.299725][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.464497][ T5175] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4719] was attempted by ""[5175] [ 29.609121][ T5179] EXT4-fs: quotafile must be on filesystem root [ 29.681883][ T4725] Bluetooth: hci4: command tx timeout [ 29.681912][ T4725] Bluetooth: hci3: command tx timeout [ 29.681930][ T4725] Bluetooth: hci2: command tx timeout [ 29.681947][ T4725] Bluetooth: hci1: command tx timeout [ 29.681960][ T4725] Bluetooth: hci0: command tx timeout [ 29.716433][ T5191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.113'. [ 29.723201][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.784972][ T5195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.794816][ T5195] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.114: corrupted xattr block 13: invalid checksum [ 29.796047][ T5195] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.114: corrupted xattr block 13: invalid checksum [ 29.796234][ T5195] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.114: corrupted xattr block 13: invalid checksum [ 29.802931][ T5196] ======================================================= [ 29.802931][ T5196] WARNING: The mand mount option has been deprecated and [ 29.802931][ T5196] and is ignored by this kernel. Remove the mand [ 29.802931][ T5196] option from the mount to silence this warning. [ 29.802931][ T5196] ======================================================= [ 29.825726][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.956382][ T5202] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.117: corrupted in-inode xattr: invalid ea_ino [ 29.956433][ T5202] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 29.956589][ T5202] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.117: couldn't read orphan inode 15 (err -117) [ 29.956603][ T5202] loop0: lost filesystem error report for type 5 error -117 [ 29.957446][ T5202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.015099][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.254581][ T5219] set_capacity_and_notify: 16 callbacks suppressed [ 30.254596][ T5219] loop1: detected capacity change from 0 to 128 [ 30.255032][ T5219] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.260933][ T5219] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.371757][ T5228] input: syz1 as /devices/virtual/input/input3 [ 30.427605][ T5230] FAULT_INJECTION: forcing a failure. [ 30.427605][ T5230] name failslab, interval 1, probability 0, space 0, times 0 [ 30.427627][ T5230] CPU: 0 UID: 0 PID: 5230 Comm: syz.1.129 Tainted: G L syzkaller #0 PREEMPT [ 30.427639][ T5230] Tainted: [L]=SOFTLOCKUP [ 30.427643][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 30.427648][ T5230] Call trace: [ 30.427651][ T5230] show_stack+0x2c/0x3c (C) [ 30.427672][ T5230] __dump_stack+0x30/0x40 [ 30.427684][ T5230] dump_stack_lvl+0xd8/0x12c [ 30.427695][ T5230] dump_stack+0x1c/0x28 [ 30.427706][ T5230] should_fail_ex+0x418/0x58c [ 30.427719][ T5230] should_failslab+0xc4/0x120 [ 30.427732][ T5230] kmem_cache_alloc_noprof+0x94/0x5d4 [ 30.427741][ T5230] alloc_empty_file+0x6c/0x1cc [ 30.427750][ T5230] alloc_file+0x58/0x98 [ 30.427757][ T5230] alloc_file_pseudo+0xe0/0x198 [ 30.427766][ T5230] sock_alloc_file+0xb4/0x1ac [ 30.427776][ T5230] __sys_socketpair+0x3d0/0x528 [ 30.427786][ T5230] __arm64_sys_socketpair+0xa8/0xc4 [ 30.427795][ T5230] invoke_syscall+0x98/0x244 [ 30.427807][ T5230] el0_svc_common+0xec/0x23c [ 30.427819][ T5230] do_el0_svc+0x4c/0x5c [ 30.427830][ T5230] el0_svc+0x60/0x1d8 [ 30.427841][ T5230] el0t_64_sync_handler+0x44/0x104 [ 30.427852][ T5230] el0t_64_sync+0x198/0x19c [ 30.551318][ T5243] loop3: detected capacity change from 0 to 512 [ 30.573407][ T5243] EXT4-fs (loop3): Test dummy encryption mode enabled [ 30.573421][ T5243] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.573429][ T5243] EXT4-fs (loop3): SIPHASH is not a valid default hash value [ 30.646719][ T5248] loop2: detected capacity change from 0 to 512 [ 30.660446][ T5248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.690479][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.696452][ T5248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.800457][ T5258] loop1: detected capacity change from 0 to 4096 [ 30.803383][ T5258] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.806255][ T5263] loop3: detected capacity change from 0 to 128 [ 30.809816][ T5258] EXT4-fs (loop1): Test dummy encryption mode enabled [ 30.827349][ T5258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.875205][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.962468][ T5284] loop1: detected capacity change from 0 to 512 [ 30.975211][ T5284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.994862][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.014133][ T5292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.155'. [ 31.268268][ T5296] loop1: detected capacity change from 0 to 512 [ 31.268635][ T5296] EXT4-fs: Ignoring removed nobh option [ 31.276270][ T5299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.278376][ T5299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.281374][ T5299] loop2: detected capacity change from 0 to 128 [ 31.292326][ T5299] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.292874][ T5296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.308387][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.158: corrupted inode contents [ 31.308672][ T5296] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #2: comm syz.1.158: mark_inode_dirty error [ 31.308953][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #2: comm syz.1.158: corrupted inode contents [ 31.322884][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.350193][ T5304] loop1: detected capacity change from 0 to 512 [ 31.359771][ T5306] loop4: detected capacity change from 0 to 512 [ 31.368900][ T5304] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.159: bg 0: block 5: invalid block bitmap [ 31.368922][ T5304] loop1: lost filesystem error report for type 5 error -117 [ 31.370888][ T5304] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 31.370913][ T5304] loop1: lost filesystem error report for type 5 error -117 [ 31.371024][ T5304] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.159: invalid indirect mapped block 3 (level 2) [ 31.371044][ T5304] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 31.371288][ T5304] EXT4-fs (loop1): 1 orphan inode deleted [ 31.371297][ T5304] EXT4-fs (loop1): 1 truncate cleaned up [ 31.376118][ T5304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.396454][ T5306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.405364][ T5306] capability: warning: `syz.4.161' uses 32-bit capabilities (legacy support in use) [ 31.421366][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.441678][ T5315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.496703][ T5315] EXT4-fs (loop4): 1 truncate cleaned up [ 31.497156][ T5315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.508196][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.635853][ T5320] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 31.635944][ T5320] FAT-fs (loop0): Filesystem has been set read-only [ 31.796830][ T50] Bluetooth: hci0: command tx timeout [ 31.796860][ T50] Bluetooth: hci1: command tx timeout [ 31.796879][ T50] Bluetooth: hci2: command tx timeout [ 31.796893][ T50] Bluetooth: hci3: command tx timeout [ 31.796908][ T50] Bluetooth: hci4: command tx timeout [ 31.906036][ T4722] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.929701][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.929874][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.198175][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.233605][ T5338] FAULT_INJECTION: forcing a failure. [ 32.233605][ T5338] name failslab, interval 1, probability 0, space 0, times 0 [ 32.233637][ T5338] CPU: 1 UID: 0 PID: 5338 Comm: syz.4.171 Tainted: G L syzkaller #0 PREEMPT [ 32.233650][ T5338] Tainted: [L]=SOFTLOCKUP [ 32.233654][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.233659][ T5338] Call trace: [ 32.233662][ T5338] show_stack+0x2c/0x3c (C) [ 32.233686][ T5338] __dump_stack+0x30/0x40 [ 32.233698][ T5338] dump_stack_lvl+0xd8/0x12c [ 32.233710][ T5338] dump_stack+0x1c/0x28 [ 32.233721][ T5338] should_fail_ex+0x418/0x58c [ 32.233734][ T5338] should_failslab+0xc4/0x120 [ 32.233747][ T5338] kmem_cache_alloc_noprof+0x94/0x5d4 [ 32.233755][ T5338] skb_clone+0x1ac/0x320 [ 32.233767][ T5338] __netlink_deliver_tap+0x364/0x6f4 [ 32.233778][ T5338] netlink_deliver_tap+0x1d8/0x1dc [ 32.233789][ T5338] __netlink_sendskb+0x78/0xd0 [ 32.233798][ T5338] netlink_sendskb+0x2c/0xdc [ 32.233807][ T5338] netlink_unicast+0x2c0/0x7f8 [ 32.233817][ T5338] netlink_ack+0x570/0x890 [ 32.233826][ T5338] netlink_rcv_skb+0x21c/0x414 [ 32.233836][ T5338] rtnetlink_rcv+0x28/0x38 [ 32.233845][ T5338] netlink_unicast+0x600/0x7f8 [ 32.233854][ T5338] netlink_sendmsg+0x648/0x948 [ 32.233864][ T5338] __sock_sendmsg+0xc8/0x17c [ 32.233874][ T5338] ____sys_sendmsg+0x3d0/0x6c8 [ 32.233884][ T5338] ___sys_sendmsg+0x198/0x224 [ 32.233894][ T5338] __sys_sendmsg+0x158/0x204 [ 32.233904][ T5338] __arm64_sys_sendmsg+0x88/0x9c [ 32.233915][ T5338] invoke_syscall+0x98/0x244 [ 32.233927][ T5338] el0_svc_common+0xec/0x23c [ 32.233938][ T5338] do_el0_svc+0x4c/0x5c [ 32.233949][ T5338] el0_svc+0x60/0x1d8 [ 32.233961][ T5338] el0t_64_sync_handler+0x44/0x104 [ 32.233972][ T5338] el0t_64_sync+0x198/0x19c [ 32.308874][ T5350] Bluetooth: MGMT ver 1.23 [ 32.334858][ T5352] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.336051][ T5352] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01d, mo2=0002] [ 32.336107][ T5352] System zones: 0-1, 3-36 [ 32.337826][ T5352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.341618][ T5352] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.178: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 32.367213][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.388955][ T5356] EXT4-fs: quotafile must be on filesystem root [ 32.487078][ T5372] FAULT_INJECTION: forcing a failure. [ 32.487078][ T5372] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 32.487100][ T5372] CPU: 0 UID: 0 PID: 5372 Comm: syz.0.186 Tainted: G L syzkaller #0 PREEMPT [ 32.487112][ T5372] Tainted: [L]=SOFTLOCKUP [ 32.487116][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.487121][ T5372] Call trace: [ 32.487124][ T5372] show_stack+0x2c/0x3c (C) [ 32.487143][ T5372] __dump_stack+0x30/0x40 [ 32.487157][ T5372] dump_stack_lvl+0xd8/0x12c [ 32.487169][ T5372] dump_stack+0x1c/0x28 [ 32.487187][ T5372] should_fail_ex+0x418/0x58c [ 32.487201][ T5372] should_fail_alloc_page+0xec/0x10c [ 32.487215][ T5372] prepare_alloc_pages+0x194/0x484 [ 32.487224][ T5372] __alloc_frozen_pages_noprof+0x180/0x578 [ 32.487233][ T5372] alloc_pages_mpol+0x1fc/0x3d0 [ 32.487243][ T5372] folio_alloc_mpol_noprof+0x4c/0x248 [ 32.487255][ T5372] shmem_alloc_folio+0xa0/0x150 [ 32.487268][ T5372] shmem_alloc_and_add_folio+0x28c/0xb30 [ 32.487280][ T5372] shmem_get_folio_gfp+0x4d8/0x1370 [ 32.487291][ T5372] shmem_fault+0x15c/0x32c [ 32.487303][ T5372] __do_fault+0xf4/0x4a8 [ 32.487311][ T5372] do_pte_missing+0x1764/0x28bc [ 32.487319][ T5372] handle_mm_fault+0x14d0/0x2b58 [ 32.487331][ T5372] __get_user_pages+0x82c/0x13b0 [ 32.487340][ T5372] populate_vma_page_range+0x260/0x358 [ 32.487349][ T5372] __mm_populate+0x204/0x328 [ 32.487358][ T5372] vm_mmap_pgoff+0x358/0x46c [ 32.487366][ T5372] ksys_mmap_pgoff+0xd0/0x5b4 [ 32.487375][ T5372] __arm64_sys_mmap+0x110/0x12c [ 32.487387][ T5372] invoke_syscall+0x98/0x244 [ 32.487399][ T5372] el0_svc_common+0xec/0x23c [ 32.487410][ T5372] do_el0_svc+0x4c/0x5c [ 32.487422][ T5372] el0_svc+0x60/0x1d8 [ 32.487433][ T5372] el0t_64_sync_handler+0x44/0x104 [ 32.487444][ T5372] el0t_64_sync+0x198/0x19c [ 32.554667][ T26] kernel read not supported for file /rfkill (pid: 26 comm: kworker/1:1) [ 32.568191][ T5363] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.752106][ T5384] syz.3.191 uses obsolete (PF_INET,SOCK_PACKET) [ 32.755446][ T5384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.755629][ T5384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.884961][ T5388] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.192: corrupted in-inode xattr: invalid ea_ino [ 32.884982][ T5388] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 32.885095][ T5388] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.192: couldn't read orphan inode 15 (err -117) [ 32.885107][ T5388] loop0: lost filesystem error report for type 5 error -117 [ 32.885749][ T5388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.910492][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.385986][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 33.414572][ T5409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.414873][ T5409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.511183][ T5417] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.203: corrupted in-inode xattr: invalid ea_ino [ 33.511209][ T5417] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.514909][ T5417] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.203: couldn't read orphan inode 15 (err -117) [ 33.514934][ T5417] loop3: lost filesystem error report for type 5 error -117 [ 33.515634][ T5417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.533540][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.570054][ T5422] ip_tables: iptables: counters copy to user failed while replacing table [ 33.577297][ T5424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.577474][ T5424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.944787][ T5433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.955595][ T5433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.976672][ T5438] FAULT_INJECTION: forcing a failure. [ 33.976672][ T5438] name failslab, interval 1, probability 0, space 0, times 0 [ 33.976693][ T5438] CPU: 1 UID: 0 PID: 5438 Comm: syz.0.212 Tainted: G L syzkaller #0 PREEMPT [ 33.976706][ T5438] Tainted: [L]=SOFTLOCKUP [ 33.976710][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.976715][ T5438] Call trace: [ 33.976718][ T5438] show_stack+0x2c/0x3c (C) [ 33.976736][ T5438] __dump_stack+0x30/0x40 [ 33.976748][ T5438] dump_stack_lvl+0xd8/0x12c [ 33.976759][ T5438] dump_stack+0x1c/0x28 [ 33.976770][ T5438] should_fail_ex+0x418/0x58c [ 33.976783][ T5438] should_failslab+0xc4/0x120 [ 33.976795][ T5438] __kmalloc_cache_noprof+0x94/0x5fc [ 33.976804][ T5438] ip_ra_control+0x120/0x460 [ 33.976815][ T5438] ip_mroute_setsockopt+0x6c4/0xd28 [ 33.976825][ T5438] do_ip_setsockopt+0xa6c/0x2628 [ 33.976835][ T5438] ip_setsockopt+0x80/0x128 [ 33.976846][ T5438] raw_setsockopt+0xd8/0x294 [ 33.976854][ T5438] sock_common_setsockopt+0xb0/0xcc [ 33.976868][ T5438] do_sock_setsockopt+0x1f0/0x330 [ 33.976879][ T5438] __sys_setsockopt+0x104/0x170 [ 33.976889][ T5438] __arm64_sys_setsockopt+0xc8/0xe4 [ 33.976899][ T5438] invoke_syscall+0x98/0x244 [ 33.976911][ T5438] el0_svc_common+0xec/0x23c [ 33.976923][ T5438] do_el0_svc+0x4c/0x5c [ 33.976934][ T5438] el0_svc+0x60/0x1d8 [ 33.976945][ T5438] el0t_64_sync_handler+0x44/0x104 [ 33.976956][ T5438] el0t_64_sync+0x198/0x19c [ 34.013760][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 34.053779][ T5444] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.215: corrupted in-inode xattr: invalid ea_ino [ 34.053799][ T5444] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.053911][ T5444] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.215: couldn't read orphan inode 15 (err -117) [ 34.053924][ T5444] loop0: lost filesystem error report for type 5 error -117 [ 34.055147][ T5444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.076458][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.115804][ T5449] ip_tables: iptables: counters copy to user failed while replacing table [ 34.894962][ T30] audit: type=1326 audit(34.890:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 34.895558][ T30] audit: type=1326 audit(34.890:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 34.895576][ T30] audit: type=1326 audit(34.890:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 34.895592][ T30] audit: type=1326 audit(34.890:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 34.895607][ T30] audit: type=1326 audit(34.890:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 34.895703][ T30] audit: type=1326 audit(34.890:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 34.895753][ T30] audit: type=1326 audit(34.890:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 34.896135][ T30] audit: type=1326 audit(34.890:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 34.896166][ T30] audit: type=1326 audit(34.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 34.896299][ T30] audit: type=1326 audit(34.890:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5490 comm="syz.1.234" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff81b79368 code=0x7ffc0000 [ 35.118540][ T5504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.119498][ T5504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.250027][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.250338][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.331981][ T4802] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.483294][ T4802] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.484999][ T4802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.485014][ T4802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.485024][ T4802] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.485041][ T4802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.487441][ T4802] usb 1-1: config 0 descriptor?? [ 35.594293][ T5527] set_capacity_and_notify: 10 callbacks suppressed [ 35.594308][ T5527] loop3: detected capacity change from 0 to 128 [ 35.603165][ T5527] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.618700][ T4710] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.678875][ T5539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.679082][ T5539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.770093][ T5541] loop2: detected capacity change from 0 to 512 [ 35.771185][ T5541] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.044342][ T5541] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 36.044902][ T5541] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.256: bg 0: block 248: padding at end of block bitmap is not set [ 36.044919][ T5541] loop2: lost filesystem error report for type 5 error -117 [ 36.045469][ T5541] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.256: Failed to acquire dquot type 1 [ 36.045485][ T5541] loop2: lost filesystem error report for type 5 error -28 [ 36.046813][ T5541] EXT4-fs (loop2): 1 truncate cleaned up [ 36.047746][ T5541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 36.052178][ T5541] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.256: deleted inode referenced: 12 [ 36.071293][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 36.071567][ T1748] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 1 [ 36.071583][ T1748] loop2: lost filesystem error report for type 5 error -117 [ 36.139768][ T5550] ip_tables: iptables: counters copy to user failed while replacing table [ 36.163784][ T5552] loop2: detected capacity change from 0 to 512 [ 36.177729][ T5552] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 36.178197][ T5552] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 36.178211][ T5552] loop2: lost filesystem error report for type 5 error -12 [ 36.178637][ T5552] EXT4-fs (loop2): 1 truncate cleaned up [ 36.179211][ T5552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.245130][ T4802] usbhid 1-1:0.0: can't add hid device: -71 [ 36.245192][ T4802] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 36.251223][ T4802] usb 1-1: USB disconnect, device number 2 [ 36.332218][ T5556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.332389][ T5556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.484226][ T5560] loop3: detected capacity change from 0 to 256 [ 36.499628][ T5560] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 36.499644][ T5560] FAT-fs (loop3): Filesystem has been set read-only [ 36.500950][ T5560] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 36.572143][ T5565] loop4: detected capacity change from 0 to 2048 [ 36.583720][ T5565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.599560][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.671891][ T5570] loop4: detected capacity change from 0 to 512 [ 36.683167][ T5570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.733725][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.781455][ T5580] ip_tables: iptables: counters copy to user failed while replacing table [ 36.894237][ T5601] ================================================================== [ 36.894249][ T5601] BUG: KASAN: global-out-of-bounds in kobject_synth_uevent+0x1e0/0x730 [ 36.894265][ T5601] Read of size 1 at addr ffff800087ad281f by task syz.3.279/5601 [ 36.894273][ T5601] [ 36.894279][ T5601] CPU: 1 UID: 0 PID: 5601 Comm: syz.3.279 Tainted: G L syzkaller #0 PREEMPT [ 36.894290][ T5601] Tainted: [L]=SOFTLOCKUP [ 36.894293][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.894298][ T5601] Call trace: [ 36.894301][ T5601] show_stack+0x2c/0x3c (C) [ 36.894316][ T5601] __dump_stack+0x30/0x40 [ 36.894327][ T5601] dump_stack_lvl+0xd8/0x12c [ 36.894339][ T5601] print_address_description+0xb0/0x238 [ 36.894347][ T5601] print_report+0x68/0x84 [ 36.894354][ T5601] kasan_report+0x8c/0xc4 [ 36.894364][ T5601] __asan_report_load1_noabort+0x20/0x2c [ 36.894375][ T5601] kobject_synth_uevent+0x1e0/0x730 [ 36.894383][ T5601] bus_uevent_store+0x48/0x8c [ 36.894395][ T5601] bus_attr_store+0x80/0xa4 [ 36.894407][ T5601] sysfs_kf_write+0xe0/0x108 [ 36.894419][ T5601] kernfs_fop_write_iter+0x260/0x3b8 [ 36.894430][ T5601] vfs_write+0x51c/0xa0c [ 36.894443][ T5601] ksys_write+0x12c/0x228 [ 36.894454][ T5601] __arm64_sys_write+0x84/0x98 [ 36.894466][ T5601] invoke_syscall+0x98/0x244 [ 36.894478][ T5601] el0_svc_common+0xec/0x23c [ 36.894489][ T5601] do_el0_svc+0x4c/0x5c [ 36.894500][ T5601] el0_svc+0x60/0x1d8 [ 36.894511][ T5601] el0t_64_sync_handler+0x44/0x104 [ 36.894522][ T5601] el0t_64_sync+0x198/0x19c [ 36.894530][ T5601] [ 36.894532][ T5601] The buggy address belongs to the variable: [ 36.894535][ T5601] .str.26+0x3f/0x40 [ 36.894545][ T5601] [ 36.894547][ T5601] The buggy address belongs to a 0-page vmalloc region starting at 0xffff8000868b0000 allocated at declare_kernel_vmas+0x54/0xb4 [ 36.894563][ T5601] The buggy address belongs to the physical page: [ 36.894567][ T5601] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21a4d2 [ 36.894574][ T5601] flags: 0x5ffc00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 36.894586][ T5601] raw: 05ffc00000002000 fffffdffc7693488 fffffdffc7693488 0000000000000000 [ 36.894593][ T5601] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 36.894597][ T5601] page dumped because: kasan: bad access detected [ 36.894600][ T5601] [ 36.894602][ T5601] Memory state around the buggy address: [ 36.894606][ T5601] ffff800087ad2700: 00 06 f9 f9 00 00 01 f9 f9 f9 f9 f9 00 00 02 f9 [ 36.894611][ T5601] ffff800087ad2780: f9 f9 f9 f9 00 06 f9 f9 00 07 f9 f9 00 00 06 f9 [ 36.894616][ T5601] >ffff800087ad2800: f9 f9 f9 f9 00 04 f9 f9 00 06 f9 f9 00 05 f9 f9 [ 36.894620][ T5601] ^ [ 36.894624][ T5601] ffff800087ad2880: 00 07 f9 f9 00 06 f9 f9 00 02 f9 f9 00 06 f9 f9 [ 36.894629][ T5601] ffff800087ad2900: 00 00 02 f9 f9 f9 f9 f9 00 05 f9 f9 00 00 00 06 [ 36.894633][ T5601] ================================================================== [ 36.894637][ T5601] Disabling lock debugging due to kernel taint [ 36.961769][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 37.099075][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.