last executing test programs: 6.612075939s ago: executing program 0 (id=990): rt_sigtimedwait(&(0x7f0000001980)={[0x8000000000000001]}, 0x0, 0xffffffffffffffff, 0x8) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000000)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974792e73797af6a33e4e7057b96b5c7ceb7c0100000000000000ac810be16a7db7077d68d63b078569a471b77180eb586b964731dc526489aed05bcff3b3d52ad69684f40e1f482f4d07cd13275a987ef7e5a080614747d49d8fce0c6440476c6a3687"], &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 4.673677291s ago: executing program 0 (id=995): fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) setpgid(0x0, 0x0) r0 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0x1) fchdir(0xffffffffffffffff) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 4.323826182s ago: executing program 0 (id=999): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3fd, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x4, 0xfffe, 0x4f4, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r2, 0xa64c000) 2.627916826s ago: executing program 2 (id=1017): socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) 1.630803988s ago: executing program 2 (id=1025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) 1.117180274s ago: executing program 2 (id=1042): socket$inet6(0xa, 0x80001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 869.547172ms ago: executing program 2 (id=1043): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, 0x0, 0x0, 0x734, 0x0, 0x0) 869.382862ms ago: executing program 2 (id=1045): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffffffc, 0x402) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/55, 0x37}], 0x1, 0x1, 0x92) 782.201545ms ago: executing program 2 (id=1046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x9}, 0x3}], 0x1, 0x10022, 0x0) 688.018588ms ago: executing program 4 (id=1048): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) 687.908308ms ago: executing program 4 (id=1049): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) 687.800498ms ago: executing program 4 (id=1050): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x40, 0xce}) 676.179839ms ago: executing program 4 (id=1051): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 657.497229ms ago: executing program 4 (id=1052): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)}], 0x1}}], 0x1, 0x4048840) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f00000004c0)="8722f3f26a6d8e789729160f1547842a6872c4d0d4c082fe566183a3332a87ec8d52454f1dba0068d2d24b7df21b844372de97c28594f18357f7deef0f63d78cd15b5313c7", 0x45, 0x2, 0x0, 0x1}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500), &(0x7f0000000180)=0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 595.998911ms ago: executing program 4 (id=1053): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0xffffff1f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40063, 0x40}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x9000}, 0x4804) 380.347748ms ago: executing program 0 (id=1054): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000019c0)=[{{&(0x7f0000000740)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000300)="8a4950dcac00405212343bc3efed7bfd880ebc068623a07221f4d55f916528b6b17fde57815ec4ff08e8ce", 0x2b}, {&(0x7f0000000400)}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)="5828eb6ad0cf026200abcdbf4b9257b08a209a2cd3724b6513bf253811f84cbd40838df9fe1590bf5439574fc02b111f0f30be35411893342c1aae922096369513217aa6980d79f80000000005aa8ad52128c54711dc6862d500084969dafb84a36ef3d7ba39ff207f55000000000000ef130b61e6a193ea4eb4e1243315eb1f3fa87cb0b241d3cbcb3a209fe941ad2cb91fb44a0a", 0x95}], 0x1}}], 0x2, 0x81) 359.440298ms ago: executing program 0 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x13, 0x20, 0xbc, 0x0, 0x1}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) listen(0xffffffffffffffff, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000004480)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0}, 0x18) 325.09509ms ago: executing program 0 (id=1056): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000013000100"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24008880) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 324.02203ms ago: executing program 1 (id=1057): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x3, 0x0, 0x0) 273.099611ms ago: executing program 1 (id=1058): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) 150.110785ms ago: executing program 1 (id=1060): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="a646ae4c00"}, 0x14) 149.971495ms ago: executing program 3 (id=1061): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000340)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000140)="f610e61fc81cc3edc86f0500194d0000a42cf1880b", 0x15}, {&(0x7f0000000200)="d635077539704e4e64", 0x9}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 149.896135ms ago: executing program 1 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/180) 149.140935ms ago: executing program 3 (id=1063): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x400008c0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046) 104.016606ms ago: executing program 1 (id=1064): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x23, 0x0, &(0x7f0000000080)) 103.901417ms ago: executing program 1 (id=1065): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x8e9, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0xf) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x8000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x4) fcntl$setpipe(r0, 0x407, 0x2000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) io_setup(0x7d, &(0x7f0000000600)) 103.830966ms ago: executing program 3 (id=1066): r0 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000001c00), &(0x7f0000001c40)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000001d80)='.dead\x00', &(0x7f0000001dc0)=@keyring) 80.852127ms ago: executing program 3 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 63.404298ms ago: executing program 3 (id=1068): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000002880)=ANY=[], 0xfd7b) splice(r1, 0x0, r0, 0x0, 0xfffe, 0x0) 0s ago: executing program 3 (id=1069): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007e0b0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 28.022579][ T4315] cgroup: Unknown subsys name 'net' [ 28.265764][ T4315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.529404][ T4315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.240151][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.241555][ T4334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.243188][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.244741][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.246019][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.248816][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.252546][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.253853][ T4338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.254937][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.256244][ T4338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.257751][ T4338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.259057][ T4338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.260500][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.261710][ T4338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.263092][ T4338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.263541][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.264349][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.266399][ T4341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.266596][ T4341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.268980][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.270481][ T4341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.271853][ T4341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.271901][ T4343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.273345][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.276099][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.277252][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.277551][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.278491][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.279774][ T4343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.294983][ T4341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.408159][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 29.412275][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 29.440161][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 29.442166][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 29.482659][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.485870][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.487419][ T4333] device bridge_slave_0 entered promiscuous mode [ 29.490890][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.492091][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.493885][ T4333] device bridge_slave_1 entered promiscuous mode [ 29.499318][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 29.505342][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.506508][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.508217][ T4327] device bridge_slave_0 entered promiscuous mode [ 29.524394][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.525575][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.527058][ T4327] device bridge_slave_1 entered promiscuous mode [ 29.531232][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.539466][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.540723][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.542193][ T4339] device bridge_slave_0 entered promiscuous mode [ 29.544249][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.545386][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.546858][ T4337] device bridge_slave_0 entered promiscuous mode [ 29.550258][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.551330][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.552704][ T4328] device bridge_slave_0 entered promiscuous mode [ 29.555334][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.559001][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.560207][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.561732][ T4337] device bridge_slave_1 entered promiscuous mode [ 29.565173][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.566326][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.567865][ T4339] device bridge_slave_1 entered promiscuous mode [ 29.571143][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.572243][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.573880][ T4328] device bridge_slave_1 entered promiscuous mode [ 29.579820][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.586621][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.591251][ T4333] team0: Port device team_slave_0 added [ 29.595191][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.597399][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.599637][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.606095][ T4333] team0: Port device team_slave_1 added [ 29.607918][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.613906][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.622382][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.630025][ T4327] team0: Port device team_slave_0 added [ 29.633013][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.634355][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.638559][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.641519][ T4337] team0: Port device team_slave_0 added [ 29.643235][ T4337] team0: Port device team_slave_1 added [ 29.645346][ T4339] team0: Port device team_slave_0 added [ 29.646883][ T4327] team0: Port device team_slave_1 added [ 29.651535][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.652562][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.657184][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.660246][ T4339] team0: Port device team_slave_1 added [ 29.664149][ T4328] team0: Port device team_slave_0 added [ 29.673080][ T4328] team0: Port device team_slave_1 added [ 29.679153][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.680296][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.684694][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.688710][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.689885][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.694537][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.698624][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.699740][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.704282][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.706438][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.707585][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.712009][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.714709][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.715964][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.720321][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.722534][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.723927][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.728195][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.730432][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.731514][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.735855][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.739827][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.740981][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.745510][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.785121][ T4333] device hsr_slave_0 entered promiscuous mode [ 29.823427][ T4333] device hsr_slave_1 entered promiscuous mode [ 29.924228][ T4328] device hsr_slave_0 entered promiscuous mode [ 29.963578][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.003404][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.004807][ T4328] Cannot create hsr debugfs directory [ 30.046591][ T4339] device hsr_slave_0 entered promiscuous mode [ 30.083627][ T4339] device hsr_slave_1 entered promiscuous mode [ 30.123396][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.124611][ T4339] Cannot create hsr debugfs directory [ 30.194423][ T4327] device hsr_slave_0 entered promiscuous mode [ 30.233734][ T4327] device hsr_slave_1 entered promiscuous mode [ 30.273391][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.274656][ T4327] Cannot create hsr debugfs directory [ 30.314250][ T4337] device hsr_slave_0 entered promiscuous mode [ 30.363518][ T4337] device hsr_slave_1 entered promiscuous mode [ 30.403326][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.404477][ T4337] Cannot create hsr debugfs directory [ 30.536002][ T4333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.574908][ T4333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.624461][ T4333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.666379][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.704110][ T4333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.754086][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.786450][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.824252][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.865767][ T4328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.909244][ T4328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.956739][ T4328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.022173][ T4328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.115854][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.122035][ T4337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.146793][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.148542][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.149965][ T4337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.188032][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.191743][ T4337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.225913][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.230856][ T4337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.266692][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.272106][ T4327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.316120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.318084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.319677][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.320884][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.326591][ T4327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.353439][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 31.354096][ T4344] Bluetooth: hci3: command 0x0409 tx timeout [ 31.354422][ T4338] Bluetooth: hci1: command 0x0409 tx timeout [ 31.355396][ T4344] Bluetooth: hci2: command 0x0409 tx timeout [ 31.356296][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 31.365349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.366731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.368260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.369860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.371364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.372839][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.374072][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.375966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.377632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.380645][ T4327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.425252][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.428424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.430076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.431787][ T4327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.469891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.471318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.472880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.474468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.476113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.478588][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.488528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.490235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.491633][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.492810][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.494531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.496158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.497553][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.498728][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.500144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.501676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.503187][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.504444][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.507070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.508596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.510080][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.511272][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.512715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.515182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.516842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.518556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.520790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.522295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.524376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.532012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.533987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.535538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.537091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.538566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.540307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.543153][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.549123][ T4333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.550760][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.555721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.557384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.558991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.560563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.562605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.564501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.566588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.568095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.569897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.571381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.575883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.577361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.583237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.585012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.596397][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.597943][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.616164][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.628703][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.657239][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.658876][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.662906][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.668309][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.676906][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.678469][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.679853][ T1589] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.680976][ T1589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.682473][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.692126][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.695299][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.697472][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.698869][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.700253][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.701547][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.717772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.719287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.720903][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.722097][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.723993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.725628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.727267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.729017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.730777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.732316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.735448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.736944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.738457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.739983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.741479][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.742665][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.745076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.746366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.747679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.749190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.753070][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.759077][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.762638][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.767229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.768730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.770207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.771771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.785317][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.786878][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.788424][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.789573][ T1589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.791045][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.792618][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.795363][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.797102][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.798723][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.800327][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.807973][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.809513][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.811075][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.812598][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.816853][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.821596][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.827038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.828340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.831879][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.838431][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.839904][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.843825][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.852022][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.856501][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.860354][ T4333] device veth0_vlan entered promiscuous mode [ 31.864185][ T4333] device veth1_vlan entered promiscuous mode [ 31.866792][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.877320][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.878836][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.880574][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.882355][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.886342][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.899481][ T4328] device veth0_vlan entered promiscuous mode [ 31.907237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 31.908702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.910321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.915695][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.916990][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.924519][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.928065][ T4333] device veth0_macvtap entered promiscuous mode [ 31.935796][ T4328] device veth1_vlan entered promiscuous mode [ 31.942853][ T4333] device veth1_macvtap entered promiscuous mode [ 31.952801][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 31.954756][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 31.956154][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 31.957486][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.958904][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.960424][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.970836][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.972471][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.975075][ T4328] device veth0_macvtap entered promiscuous mode [ 31.979586][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.980873][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 31.982393][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.986102][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.991912][ T4328] device veth1_macvtap entered promiscuous mode [ 31.995750][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.998392][ T4337] device veth0_vlan entered promiscuous mode [ 32.000409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.001868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.006720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.008335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.010350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.011969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.013521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.017343][ T4333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.018750][ T4333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.020163][ T4333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.021548][ T4333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.032375][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.033763][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.038689][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.040574][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.043005][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.045548][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.047353][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.048921][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.050434][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.060411][ T4337] device veth1_vlan entered promiscuous mode [ 32.062309][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.065867][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.067431][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.069563][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.076958][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.078515][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.079928][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.086553][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.087996][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.089413][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.090922][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.096735][ T4339] device veth0_vlan entered promiscuous mode [ 32.099137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.100486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.101969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.104955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.106413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.128837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.130469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.136512][ T4339] device veth1_vlan entered promiscuous mode [ 32.141856][ T4337] device veth0_macvtap entered promiscuous mode [ 32.147071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.148537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.150110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.152533][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.154008][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.159673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.161152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.162920][ T4337] device veth1_macvtap entered promiscuous mode [ 32.179325][ T640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.180565][ T640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.180574][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.184277][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.186043][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.187680][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.189776][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.191318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.192786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.194367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.195865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.197607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.198977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.200504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.204791][ T4327] device veth0_vlan entered promiscuous mode [ 32.207659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.209173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.211867][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.214423][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.216045][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.217824][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.219990][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.224941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.226537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.229647][ T4327] device veth1_vlan entered promiscuous mode [ 32.237027][ T4337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.238430][ T4337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.239845][ T4337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.241324][ T4337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.245295][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.246509][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.247856][ T4339] device veth0_macvtap entered promiscuous mode [ 32.253506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.255038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.256493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.258086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.259808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.262430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.266856][ T640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.268142][ T640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.270178][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.280088][ T4339] device veth1_macvtap entered promiscuous mode [ 32.281589][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.283018][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.285508][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.289017][ T4327] device veth0_macvtap entered promiscuous mode [ 32.298520][ T4327] device veth1_macvtap entered promiscuous mode [ 32.311635][ T640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.312901][ T640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.335596][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.337244][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.338622][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.342392][ T4409] loop1: detected capacity change from 0 to 512 [ 32.358024][ T4409] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.362539][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.365246][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.366873][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.368631][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.370200][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.372054][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.372069][ T4411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.376566][ T4409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.378541][ T4409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.380253][ T4409] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 32.413990][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.425043][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.427136][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.428667][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.430390][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.432087][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.436846][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.438751][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.440552][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.442873][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.449404][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.451249][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.452965][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.455114][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.456977][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.458998][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.461034][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.466768][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.468179][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.469712][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.471221][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.477559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.479199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.480979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.482573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.484430][ T1589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.485697][ T1589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.487931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.495877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.497455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.504596][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.506329][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.796866][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.802072][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.804467][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.806298][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.809083][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.810955][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.815844][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.824864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.826789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.840081][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.841932][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844235][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.845726][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.885436][ T640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.886724][ T640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.896681][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.907543][ T1615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.908827][ T1615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.917641][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.930094][ T4414] syz.2.6 (4414): drop_caches: 2 [ 32.969827][ T1615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.971224][ T1615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.974306][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.998914][ T4418] autofs4:pid:4418:autofs_fill_super: called with bogus options [ 33.016120][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.017531][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.023816][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.571001][ T4427] can0: slcan on ttynull. [ 33.613400][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 33.614371][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 33.615698][ T4344] Bluetooth: hci3: command 0x041b tx timeout [ 33.617171][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 33.617189][ T4338] Bluetooth: hci4: command 0x041b tx timeout [ 33.820412][ T4423] loop2: detected capacity change from 0 to 16 [ 33.821813][ T4423] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 33.843996][ T4427] can0 (unregistered): slcan off ttynull. [ 34.530358][ T4448] binder: 4447:4448 ioctl 4018620d 0 returned -22 [ 34.535665][ T4448] binder: 4447:4448 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 34.557557][ T4449] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.559069][ T4449] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.560549][ T4449] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.562074][ T4449] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.240837][ T4449] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.242315][ T4449] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.243847][ T4449] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.245256][ T4449] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.434385][ T4460] Bluetooth: MGMT ver 1.22 [ 36.293824][ T4338] Bluetooth: hci4: command 0x040f tx timeout [ 36.293846][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 36.296245][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 36.310527][ T4344] Bluetooth: hci1: command 0x040f tx timeout [ 36.363488][ T4470] loop4: detected capacity change from 0 to 512 [ 36.402308][ T4470] ======================================================= [ 36.402308][ T4470] WARNING: The mand mount option has been deprecated and [ 36.402308][ T4470] and is ignored by this kernel. Remove the mand [ 36.402308][ T4470] option from the mount to silence this warning. [ 36.402308][ T4470] ======================================================= [ 36.417283][ T4470] ext4: Unknown parameter 'context' [ 36.615117][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.626966][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 36.686969][ T4477] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 36.723968][ T4459] loop3: detected capacity change from 0 to 32768 [ 36.769141][ T4482] capability: warning: `syz.4.23' uses deprecated v2 capabilities in a way that may be insecure [ 36.836036][ T4475] syz.1.19 (4475): drop_caches: 2 [ 37.093287][ T4491] can0: slcan on ttynull. [ 37.220876][ T27] audit: type=1326 audit(37.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.25" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 37.225231][ T27] audit: type=1326 audit(37.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.25" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 37.234069][ T27] audit: type=1326 audit(37.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.25" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 37.241326][ T27] audit: type=1326 audit(37.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.25" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 37.278696][ T27] audit: type=1326 audit(37.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.25" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 37.288050][ T27] audit: type=1326 audit(37.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.25" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 37.295203][ T27] audit: type=1326 audit(37.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.3.25" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 37.394192][ T4491] can0 (unregistered): slcan off ttynull. [ 37.752053][ T4507] binder: 4506:4507 ioctl 4018620d 0 returned -22 [ 37.755790][ T4507] binder: 4506:4507 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 38.236491][ T4514] xt_hashlimit: size too large, truncated to 1048576 [ 38.313864][ T4344] Bluetooth: hci3: command 0x0419 tx timeout [ 38.315202][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 38.316296][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 38.365463][ T4523] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 38.407818][ T4525] xt_hashlimit: size too large, truncated to 1048576 [ 38.483537][ T4329] Bluetooth: hci1: command 0x0419 tx timeout [ 38.640643][ T4532] Invalid ELF header magic: != ELF [ 39.042529][ T4543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.44'. [ 39.047774][ T4543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.44'. [ 39.071400][ T4545] loop1: detected capacity change from 0 to 16 [ 39.088996][ T4545] erofs: (device loop1): mounted with root inode @ nid 36. [ 39.108197][ T4545] syz.1.45: attempt to access beyond end of device [ 39.108197][ T4545] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 39.140751][ T4545] syz.1.45: attempt to access beyond end of device [ 39.140751][ T4545] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 39.144890][ T4545] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 39.146838][ T4545] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 39.246159][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 39.261264][ T4559] device syz_tun entered promiscuous mode [ 39.262274][ T4559] device macvtap1 entered promiscuous mode [ 39.289482][ T4560] block device autoloading is deprecated and will be removed. [ 39.389548][ T4564] xt_hashlimit: size too large, truncated to 1048576 [ 39.433647][ T4329] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 39.435216][ T4329] Bluetooth: hci2: Injecting HCI hardware error event [ 39.437027][ T4338] Bluetooth: hci2: hardware error 0x00 [ 39.440784][ T4568] loop3: detected capacity change from 0 to 764 [ 39.482728][ T4568] rock: directory entry would overflow storage [ 39.488597][ T4568] rock: sig=0x5245, size=8, remaining=5 [ 40.354146][ T4576] loop3: detected capacity change from 0 to 1764 [ 40.633048][ T4584] netlink: 'syz.3.60': attribute type 12 has an invalid length. [ 41.032466][ T4597] ipt_CLUSTERIP: Please specify destination IP [ 41.593780][ T4338] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 41.889621][ T4607] loop4: detected capacity change from 0 to 512 [ 41.948424][ T4604] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.950098][ T4604] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.971986][ T4607] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.435834][ T4604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.464532][ T4604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.799974][ T4614] loop1: detected capacity change from 0 to 32768 [ 42.822762][ T4614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.70 (4614) [ 42.829805][ T4604] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.831454][ T4604] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.833118][ T4604] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.836090][ T4604] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.841268][ T4614] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 42.846299][ T4614] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 42.847868][ T4614] BTRFS info (device loop1): force clearing of disk cache [ 42.849025][ T4614] BTRFS info (device loop1): enabling auto defrag [ 42.850050][ T4614] BTRFS info (device loop1): max_inline at 0 [ 42.850959][ T4614] BTRFS info (device loop1): enabling disk space caching [ 42.852125][ T4614] BTRFS info (device loop1): disk space caching is enabled [ 42.954669][ T4614] BTRFS info (device loop1): enabling ssd optimizations [ 42.964212][ T4614] BTRFS info (device loop1): rebuilding free space tree [ 42.972816][ T4614] BTRFS info (device loop1): disabling free space tree [ 42.974701][ T4614] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 42.976674][ T4614] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 43.022571][ T640] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 43.059740][ T4333] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.120639][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 43.487286][ T4648] Zero length message leads to an empty skb [ 43.537931][ T4338] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 43.542598][ T4338] Bluetooth: hci4: Injecting HCI hardware error event [ 43.544326][ T4329] Bluetooth: hci4: hardware error 0x00 [ 43.737457][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.739146][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.065844][ T4661] loop2: detected capacity change from 0 to 512 [ 44.068537][ T4661] EXT4-fs: Ignoring removed orlov option [ 44.072489][ T4661] EXT4-fs (loop2): Test dummy encryption mode enabled [ 44.092114][ T4661] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.169921][ T4661] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.172492][ T4661] EXT4-fs (loop2): 1 truncate cleaned up [ 44.179250][ T4661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.496576][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 44.568069][ T4679] loop2: detected capacity change from 0 to 512 [ 44.586226][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.607590][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.615527][ T4679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.889568][ T4653] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.890989][ T4653] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.892550][ T4653] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.894192][ T4653] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.154784][ T4668] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 45.253384][ T4677] device macvlan1 entered promiscuous mode [ 45.255676][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 45.325812][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 45.357624][ T4701] loop3: detected capacity change from 0 to 512 [ 45.369316][ T4701] EXT4-fs: Ignoring removed orlov option [ 45.373787][ T4701] EXT4-fs (loop3): Test dummy encryption mode enabled [ 45.376111][ T4701] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.388504][ T4701] EXT4-fs (loop3): 1 truncate cleaned up [ 45.389595][ T4701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.429518][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 45.434375][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.435669][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.753542][ T4329] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 46.428389][ T4726] loop3: detected capacity change from 0 to 512 [ 46.464560][ T4726] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.522679][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.536794][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.542097][ T4730] fuse: Bad value for 'fd' [ 46.568288][ T4732] bpf_jit: unknown opcode 06 [ 46.670637][ T4736] loop2: detected capacity change from 0 to 512 [ 46.672198][ T4736] EXT4-fs: Ignoring removed orlov option [ 46.674763][ T4736] EXT4-fs (loop2): Test dummy encryption mode enabled [ 46.676303][ T4736] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.680207][ T4736] EXT4-fs (loop2): 1 truncate cleaned up [ 46.681223][ T4736] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.706211][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 46.901372][ T4686] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.903062][ T4686] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.905219][ T4686] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.906859][ T4686] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.435503][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 47.478911][ T4762] loop1: detected capacity change from 0 to 512 [ 47.488202][ T4762] EXT4-fs: Ignoring removed orlov option [ 47.490410][ T4762] EXT4-fs (loop1): Test dummy encryption mode enabled [ 47.491574][ T4762] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.495561][ T4762] EXT4-fs (loop1): 1 truncate cleaned up [ 47.496723][ T4762] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.541980][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 48.153139][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.154466][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.289200][ T4791] loop0: detected capacity change from 0 to 512 [ 48.320425][ T4791] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.420209][ T4795] loop1: detected capacity change from 0 to 764 [ 48.441927][ T4795] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.552078][ T4802] loop1: detected capacity change from 0 to 512 [ 48.554735][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.562403][ T4802] EXT4-fs: Ignoring removed orlov option [ 48.571915][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.573815][ T4802] EXT4-fs (loop1): Test dummy encryption mode enabled [ 48.576330][ T4802] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.585541][ T4802] EXT4-fs (loop1): 1 truncate cleaned up [ 48.586759][ T4802] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.631944][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 48.755324][ T4780] device macvlan1 left promiscuous mode [ 49.109433][ T4780] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.110959][ T4780] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.112397][ T4780] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.114196][ T4780] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.403396][ T4780] device macvtap1 left promiscuous mode [ 49.440843][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 50.005372][ T4830] loop1: detected capacity change from 0 to 128 [ 50.037514][ T4830] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 50.054332][ T4830] FAT-fs (loop1): Filesystem has been set read-only [ 50.318678][ T4833] loop4: detected capacity change from 0 to 512 [ 50.344470][ T4833] EXT4-fs: Ignoring removed orlov option [ 50.355686][ T4833] EXT4-fs (loop4): Test dummy encryption mode enabled [ 50.360060][ T4833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.380106][ T4833] EXT4-fs (loop4): 1 truncate cleaned up [ 50.381076][ T4833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.403046][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 50.447075][ T4847] loop4: detected capacity change from 0 to 512 [ 50.498569][ T4851] TCP: TCP_TX_DELAY enabled [ 50.504522][ T4853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 50.508226][ T4853] device vlan2 entered promiscuous mode [ 50.509141][ T4853] device gretap0 entered promiscuous mode [ 50.543474][ T4847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 50.867452][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 50.880688][ T4867] loop1: detected capacity change from 0 to 512 [ 50.882163][ T4867] EXT4-fs: Ignoring removed orlov option [ 50.885649][ T4867] EXT4-fs (loop1): Test dummy encryption mode enabled [ 50.886904][ T4867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.890479][ T4867] EXT4-fs (loop1): 1 truncate cleaned up [ 50.891536][ T4867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.917138][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 51.352585][ T4891] netlink: 52 bytes leftover after parsing attributes in process `syz.4.160'. [ 51.410538][ T4894] loop4: detected capacity change from 0 to 512 [ 51.415637][ T4894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.428883][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 51.432196][ T4897] process 'syz.3.157' launched './file2' with NULL argv: empty string added [ 51.755419][ T4903] loop4: detected capacity change from 0 to 512 [ 51.764158][ T4903] EXT4-fs: Ignoring removed orlov option [ 51.765726][ T4903] EXT4-fs (loop4): Test dummy encryption mode enabled [ 51.766952][ T4903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.776419][ T4903] EXT4-fs (loop4): 1 truncate cleaned up [ 51.777530][ T4903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 51.827314][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 52.368634][ T4927] loop1: detected capacity change from 0 to 128 [ 52.371975][ T4923] loop2: detected capacity change from 0 to 512 [ 52.455677][ T4923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.816455][ T4938] loop1: detected capacity change from 0 to 512 [ 52.817853][ T4938] EXT4-fs: Ignoring removed orlov option [ 52.820413][ T4938] EXT4-fs (loop1): Test dummy encryption mode enabled [ 52.820704][ T4929] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.821496][ T4938] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.822909][ T4929] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.839243][ T4938] EXT4-fs (loop1): 1 truncate cleaned up [ 52.840403][ T4938] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.889636][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 53.262966][ T4929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.296591][ T4929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.809610][ T4929] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.811287][ T4929] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.812814][ T4929] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.814375][ T4929] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.043402][ T4946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.179'. [ 54.049498][ T4946] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 54.057835][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 54.104786][ T4963] loop9: detected capacity change from 0 to 7 [ 54.109311][ T4963] Dev loop9: unable to read RDB block 7 [ 54.110202][ T4963] loop9: unable to read partition table [ 54.111178][ T4963] loop9: partition table beyond EOD, truncated [ 54.112123][ T4963] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 54.551524][ T4979] xt_hashlimit: size too large, truncated to 1048576 [ 55.052466][ T4990] loop2: detected capacity change from 0 to 512 [ 55.107267][ T4990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.151317][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 55.888340][ T5026] loop2: detected capacity change from 0 to 512 [ 55.937131][ T5026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.972758][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 56.624555][ T5054] loop0: detected capacity change from 0 to 512 [ 56.709600][ T5054] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 56.723559][ T5054] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.221'. [ 56.742525][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 57.584405][ T5085] fuse: Bad value for 'fd' [ 57.657666][ T5087] loop1: detected capacity change from 0 to 512 [ 57.724261][ T5087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 57.735341][ T5087] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.234'. [ 57.739445][ T5085] fuse: root generation should be zero [ 57.771540][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 57.968366][ T4378] kernel write not supported for file [eventfd] (pid: 4378 comm: kworker/1:6) [ 58.268942][ T5113] loop1: detected capacity change from 0 to 512 [ 58.306566][ T5122] loop2: detected capacity change from 0 to 256 [ 58.310747][ T5113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.320279][ T5113] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.245'. [ 58.359498][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 58.807422][ T5140] loop3: detected capacity change from 0 to 128 [ 58.868855][ T5147] loop1: detected capacity change from 0 to 512 [ 58.910044][ T5147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.041477][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 59.507214][ T5196] loop1: detected capacity change from 0 to 512 [ 59.521080][ T5196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.534436][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 60.107407][ T5224] loop0: detected capacity change from 0 to 512 [ 60.135994][ T5224] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 60.218015][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 60.625525][ T5250] loop0: detected capacity change from 0 to 256 [ 60.662504][ T5250] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.083745][ T5263] loop2: detected capacity change from 0 to 512 [ 61.111456][ T5263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.139457][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 61.751752][ T5300] loop0: detected capacity change from 0 to 512 [ 61.787055][ T5300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.814020][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 62.454861][ T5328] loop0: detected capacity change from 0 to 512 [ 62.472956][ T5331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 62.495794][ T5328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.542769][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 62.572892][ T5339] loop2: detected capacity change from 0 to 7 [ 62.582770][ T5339] Dev loop2: unable to read RDB block 7 [ 62.586999][ T5339] loop2: unable to read partition table [ 62.592412][ T5339] loop2: partition table beyond EOD, truncated [ 62.598864][ T5339] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 63.263091][ T5362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.337'. [ 63.362195][ T5365] loop4: detected capacity change from 0 to 512 [ 63.392656][ T5365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.432455][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 63.534988][ T5373] loop1: detected capacity change from 0 to 128 [ 63.991747][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 64.031705][ T5392] loop1: detected capacity change from 0 to 512 [ 64.050238][ T5392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.070955][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 64.118615][ T5404] loop1: detected capacity change from 0 to 128 [ 64.215515][ T4320] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.471344][ T5427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.485062][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486357][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.503016][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 65.369852][ T5458] set_capacity_and_notify: 2 callbacks suppressed [ 65.369862][ T5458] loop1: detected capacity change from 0 to 512 [ 65.395866][ T5458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.400221][ T5458] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.374'. [ 65.673323][ T4329] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 65.674633][ T4329] Bluetooth: hci0: Injecting HCI hardware error event [ 65.676195][ T4338] Bluetooth: hci0: hardware error 0x00 [ 67.273524][ T4329] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 67.275021][ T4329] Bluetooth: hci3: Injecting HCI hardware error event [ 67.276850][ T4344] Bluetooth: hci3: hardware error 0x00 [ 67.843424][ T4338] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 68.393341][ T4338] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 68.394881][ T4338] Bluetooth: hci1: Injecting HCI hardware error event [ 68.396462][ T4329] Bluetooth: hci1: hardware error 0x00 [ 69.513318][ T4344] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 69.604434][ T111] cfg80211: failed to load regulatory.db [ 70.633352][ T4329] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 75.585160][ T5475] device batadv_slave_1 entered promiscuous mode [ 75.596925][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 75.891618][ T5516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.392'. [ 76.291538][ T5520] loop0: detected capacity change from 0 to 512 [ 76.331030][ T5520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.351542][ T5520] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.393'. [ 76.386738][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 76.665363][ T5545] loop1: detected capacity change from 0 to 512 [ 76.715673][ T5545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 76.727925][ T5545] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.404'. [ 76.773014][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 77.692403][ T5582] loop1: detected capacity change from 0 to 512 [ 77.717933][ T5582] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.721632][ T5582] netlink: 'syz.1.417': attribute type 72 has an invalid length. [ 77.741505][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 77.764675][ T5591] loop1: detected capacity change from 0 to 128 [ 78.591883][ T5620] loop2: detected capacity change from 0 to 512 [ 78.609833][ T5620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.613930][ T5620] netlink: 'syz.2.432': attribute type 72 has an invalid length. [ 78.626157][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 79.262541][ T5651] loop4: detected capacity change from 0 to 512 [ 79.296409][ T5651] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.306428][ T5651] netlink: 'syz.4.443': attribute type 72 has an invalid length. [ 79.316615][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 79.428772][ T5655] loop4: detected capacity change from 0 to 32768 [ 79.489859][ T5655] loop4: p1 < > p3 < p5 p6 > p4 [ 79.493858][ T5655] loop4: p4 start 4294967295 is beyond EOD, truncated [ 79.497414][ T5655] loop4: p6 start 2164271104 is beyond EOD, truncated [ 79.563033][ T5484] udevd[5484]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 79.563185][ T5495] udevd[5495]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 79.569614][ T5482] udevd[5482]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 79.920082][ T5680] loop1: detected capacity change from 0 to 512 [ 79.928819][ T5680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.933087][ T5680] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.454'. [ 79.942992][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 80.163739][ T5688] loop1: detected capacity change from 0 to 128 [ 80.663695][ T5707] loop3: detected capacity change from 0 to 512 [ 80.691952][ T5707] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.698077][ T5707] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.465'. [ 80.746455][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 81.459294][ T5743] loop4: detected capacity change from 0 to 512 [ 81.487771][ T5743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.494167][ T5743] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.480'. [ 81.514493][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 81.641167][ T5757] loop3: detected capacity change from 0 to 16 [ 81.661686][ T5757] erofs: (device loop3): mounted with root inode @ nid 36. [ 81.962667][ T5775] loop3: detected capacity change from 0 to 512 [ 82.007317][ T5775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 82.173524][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 82.930028][ T5808] loop3: detected capacity change from 0 to 512 [ 82.960400][ T5808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 82.977538][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 83.191725][ T5825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'. [ 83.193418][ T5825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.511'. [ 83.976150][ T5837] loop1: detected capacity change from 0 to 512 [ 83.990914][ T5837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.010150][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 94.110998][ T5876] loop2: detected capacity change from 0 to 512 [ 94.317876][ T5876] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.372666][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 94.495529][ T5906] device syzkaller0 entered promiscuous mode [ 94.601787][ T5909] device syzkaller0 entered promiscuous mode [ 94.666189][ T5911] loop2: detected capacity change from 0 to 512 [ 94.687827][ T5911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.706766][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 94.767480][ T5915] loop2: detected capacity change from 0 to 128 [ 95.017799][ T5929] loop3: detected capacity change from 0 to 512 [ 95.086261][ T5929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.121073][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 95.184735][ T5933] binder: 5926:5933 tried to acquire reference to desc 0, got 1 instead [ 95.750164][ T4650] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.752962][ T4650] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.801031][ T5943] loop2: detected capacity change from 0 to 4096 [ 95.809164][ T5939] loop4: detected capacity change from 0 to 131072 [ 95.814465][ T5939] F2FS-fs (loop4): invalid crc value [ 95.817648][ T5943] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 95.898888][ T5943] ntfs: volume version 3.1. [ 95.924447][ T5955] loop1: detected capacity change from 0 to 256 [ 95.938681][ T5939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.947402][ T5939] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 95.951037][ T5955] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 95.951346][ T5943] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 95.964277][ T5939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 95.965978][ T5943] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 95.969383][ T5943] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 95.970703][ T5943] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 96.365867][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 96.505201][ T5970] loop2: detected capacity change from 0 to 512 [ 96.528915][ T5970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.561172][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 96.582884][ T5976] loop3: detected capacity change from 0 to 2048 [ 96.597199][ T5976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.140996][ T5990] overlayfs: failed to set xattr on upper [ 97.150573][ T5990] overlayfs: ...falling back to index=off,metacopy=off. [ 97.298803][ T5995] loop2: detected capacity change from 0 to 32768 [ 97.314382][ T5995] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 97.321335][ T5995] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 97.355019][ T5995] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 97.362919][ T4643] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 97.368010][ T4643] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 97.394355][ T4643] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 26ms [ 97.399278][ T4643] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 97.401274][ T5995] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 97.573470][ T4643] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.580048][ T6008] sctp: [Deprecated]: syz.3.574 (pid 6008) Use of int in maxseg socket option. [ 97.580048][ T6008] Use struct sctp_assoc_value instead [ 97.603691][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.607973][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.621092][ T6011] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.655913][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 97.733870][ T5968] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.755518][ T4643] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.758608][ T4643] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.760514][ T4643] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 97.768025][ T4643] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 97.770653][ T4643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.773039][ T4643] usb 1-1: Product: syz [ 97.774994][ T4643] usb 1-1: Manufacturer: syz [ 97.776854][ T4643] usb 1-1: SerialNumber: syz [ 98.658201][ T4643] usb 1-1: USB disconnect, device number 2 [ 98.742665][ T6039] EXT4-fs: Ignoring removed orlov option [ 98.763189][ T6039] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.986854][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 100.009038][ T6058] set_capacity_and_notify: 3 callbacks suppressed [ 100.009048][ T6058] loop1: detected capacity change from 0 to 512 [ 100.368482][ T6058] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.412377][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 102.700179][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 102.713129][ T6109] loop4: detected capacity change from 0 to 2048 [ 102.729374][ T6109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.744778][ T6111] loop2: detected capacity change from 0 to 512 [ 102.764754][ T6111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.779554][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 103.321954][ T6127] loop1: detected capacity change from 0 to 1024 [ 103.355126][ T6129] loop2: detected capacity change from 0 to 512 [ 103.356580][ T6129] ext4: Unknown parameter 'smackfsfloor' [ 103.448344][ T6129] tipc: Can't bind to reserved service type 2 [ 104.218094][ T6150] loop3: detected capacity change from 0 to 512 [ 104.274182][ T6150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.303321][ T6155] loop2: detected capacity change from 0 to 2048 [ 104.310376][ T6155] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.327747][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 104.374471][ T6159] loop3: detected capacity change from 0 to 1024 [ 104.375944][ T6159] EXT4-fs: inline encryption not supported [ 104.377507][ T6159] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.383429][ T6159] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.619: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.386257][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.387324][ T6159] Quota error (device loop3): write_blk: dquota write failed [ 104.388580][ T6159] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 104.390152][ T6159] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.619: Failed to acquire dquot type 0 [ 104.392007][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.394123][ T6159] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.619: Freeing blocks not in datazone - block = 0, count = 4096 [ 104.397469][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.399058][ T6159] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.619: Invalid inode bitmap blk 0 in block_group 0 [ 104.401139][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.402217][ T6159] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 104.403784][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.404866][ T6159] EXT4-fs (loop3): 1 orphan inode deleted [ 104.405818][ T6159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.412160][ T9] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.415311][ T9] EXT4-fs (loop3): Remounting filesystem read-only [ 104.416644][ T9] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 104.423901][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 104.438649][ T9] EXT4-fs (loop3): Remounting filesystem read-only [ 104.523052][ T6159] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.619: iget: bad extra_isize 65535 (inode size 256) [ 104.528238][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.534606][ T6159] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.619: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 104.540024][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.563423][ T6159] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.619: iget: bad extra_isize 65535 (inode size 256) [ 104.566187][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.572892][ T6159] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.619: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 104.575858][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.577521][ T6159] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.619: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 104.581006][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.584842][ T6159] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.619: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 104.587732][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.588813][ T6159] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.619: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 104.592021][ T6159] EXT4-fs (loop3): Remounting filesystem read-only [ 104.987993][ T6185] loop3: detected capacity change from 0 to 512 [ 105.010078][ T6185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.011415][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 105.037123][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 105.240124][ T6200] can0: slcan on ttynull. [ 105.293838][ T6200] can0 (unregistered): slcan off ttynull. [ 105.647739][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.649204][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.665401][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.666847][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.698354][ T6209] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.839383][ T6223] loop1: detected capacity change from 0 to 8192 [ 106.852641][ T6223] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.855164][ T6223] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 106.856868][ T6223] REISERFS (device loop1): using ordered data mode [ 106.858150][ T6223] reiserfs: using flush barriers [ 106.859926][ T6223] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.862640][ T6223] REISERFS (device loop1): checking transaction log (loop1) [ 107.544631][ T6236] loop3: detected capacity change from 0 to 512 [ 107.549695][ T6236] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.581076][ T6223] REISERFS (device loop1): Using tea hash to sort names [ 107.587850][ T6223] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 108.246845][ T6262] loop3: detected capacity change from 0 to 512 [ 108.293215][ T6262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.336554][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 108.386895][ T6259] loop1: detected capacity change from 0 to 32768 [ 108.774634][ T6267] loop3: detected capacity change from 0 to 131072 [ 108.777057][ T6267] F2FS-fs (loop3): invalid crc value [ 109.196028][ T6267] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.203511][ T6267] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 109.259428][ T6267] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 109.377562][ T6282] ALSA: mixer_oss: invalid OSS volume '' [ 110.695171][ T6287] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 110.856965][ T6294] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 110.960944][ T6298] loop4: detected capacity change from 0 to 512 [ 112.043270][ T6298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.111634][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 112.118414][ T6311] binder: 6309:6311 tried to acquire reference to desc 0, got 1 instead [ 112.174288][ T6315] device ip6gre1 entered promiscuous mode [ 112.179716][ T4643] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.181629][ T4643] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.183760][ T111] binder: release 6309:6311 transaction 9 out, still active [ 112.184809][ T6315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.193907][ T4643] binder: send failed reply for transaction 9, target dead [ 112.207501][ T4643] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.743985][ T4650] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.937048][ T4650] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.653341][ T6348] loop3: detected capacity change from 0 to 512 [ 113.684102][ T6348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.687301][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.688948][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.700308][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 113.781881][ T6357] device batadv_slave_1 left promiscuous mode [ 113.789552][ T4650] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.984594][ T4650] usb 1-1: Using ep0 maxpacket: 32 [ 113.986748][ T4650] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.988079][ T4650] usb 1-1: config 0 has no interface number 0 [ 113.991048][ T4650] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.992632][ T4650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.993960][ T4650] usb 1-1: Product: syz [ 113.994614][ T4650] usb 1-1: Manufacturer: syz [ 113.995457][ T4650] usb 1-1: SerialNumber: syz [ 114.000525][ T4650] usb 1-1: config 0 descriptor?? [ 114.005944][ T4650] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 114.255888][ T4650] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 114.259125][ T4650] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 114.377647][ T6364] loop2: detected capacity change from 0 to 64 [ 114.576935][ T6372] syz.1.686 uses obsolete (PF_INET,SOCK_PACKET) [ 114.708584][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 114.710138][ T4650] usb 1-1: USB disconnect, device number 3 [ 114.715821][ T4650] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 114.720294][ T4650] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.726311][ T4650] quatech2 1-1:0.51: device disconnected [ 115.686331][ T4650] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.881037][ T6392] loop2: detected capacity change from 0 to 32768 [ 115.891875][ T4650] usb 1-1: Using ep0 maxpacket: 8 [ 115.896232][ T4650] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 115.897771][ T4650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 115.899067][ T4650] usb 1-1: Product: syz [ 115.899770][ T4650] usb 1-1: Manufacturer: syz [ 115.900482][ T4650] usb 1-1: SerialNumber: syz [ 115.945458][ T6392] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.955968][ T4650] usb 1-1: config 0 descriptor?? [ 115.959367][ T4650] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 116.031119][ T4328] ocfs2: Unmounting device (7,2) on (node local) [ 116.405468][ T4650] gspca_sn9c2028: read1 error -32 [ 116.604849][ T6410] netlink: 4104 bytes leftover after parsing attributes in process `syz.1.698'. [ 116.624460][ T6410] loop1: detected capacity change from 0 to 256 [ 116.745000][ T6410] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 116.805493][ T4650] gspca_sn9c2028: read1 error -71 [ 116.806419][ T4650] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 116.809078][ T4650] usb 1-1: USB disconnect, device number 4 [ 117.008080][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.265645][ T6466] loop2: detected capacity change from 0 to 8192 [ 119.284709][ T6466] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 119.287519][ T6466] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 119.291767][ T6466] REISERFS (device loop2): using ordered data mode [ 119.292957][ T6466] reiserfs: using flush barriers [ 119.300823][ T6466] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.308177][ T6466] REISERFS (device loop2): checking transaction log (loop2) [ 119.375848][ T6466] REISERFS (device loop2): Using tea hash to sort names [ 119.377426][ T6466] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 119.436011][ T6466] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=81, len=3 - odd [ 121.081049][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.092986][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.026639][ T6517] 9pnet_fd: Insufficient options for proto=fd [ 123.887615][ T6555] binder: 6554:6555 tried to acquire reference to desc 0, got 1 instead [ 123.892295][ T6555] binder: cannot allocate buffer: no space left [ 123.892319][ T6555] binder: 6554:6555 transaction async to 6554:0 failed 14/29201/-28, size 0-65530 line 3230 [ 124.597137][ T6570] loop3: detected capacity change from 0 to 4096 [ 125.015119][ T6570] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 125.043466][ T6570] ntfs3: loop3: Failed to load $Extend. [ 125.682037][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.700629][ T6590] loop4: detected capacity change from 0 to 128 [ 125.806724][ T6590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.297524][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 126.461816][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.074800][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 127.138654][ T27] audit: type=1326 audit(125.247:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.145302][ T27] audit: type=1326 audit(125.256:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.150667][ T27] audit: type=1326 audit(125.256:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.181085][ T27] audit: type=1326 audit(125.256:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.186178][ T27] audit: type=1326 audit(125.266:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.190400][ T27] audit: type=1326 audit(125.266:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.196804][ T27] audit: type=1326 audit(125.266:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.200818][ T27] audit: type=1326 audit(125.266:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.204902][ T27] audit: type=1326 audit(125.266:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.210334][ T27] audit: type=1326 audit(125.266:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.3.771" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 127.351519][ T6640] netlink: 72 bytes leftover after parsing attributes in process `syz.3.771'. [ 127.710422][ T6649] loop2: detected capacity change from 0 to 164 [ 127.721932][ T6649] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 127.833674][ T6658] device syzkaller0 entered promiscuous mode [ 127.866566][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.867776][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.404439][ T6668] loop1: detected capacity change from 0 to 64 [ 128.469308][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.470917][ T6664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.472923][ T6664] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.506789][ T6664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.140057][ T6696] loop4: detected capacity change from 0 to 1024 [ 129.152909][ T6696] EXT4-fs: inline encryption not supported [ 129.156035][ T6696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.164475][ T6696] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 1: comm syz.4.791: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.170163][ T6696] EXT4-fs (loop4): Remounting filesystem read-only [ 129.171422][ T6696] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.791: Failed to acquire dquot type 0 [ 129.173530][ T6696] EXT4-fs (loop4): Remounting filesystem read-only [ 129.175334][ T6696] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.791: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.178883][ T6696] EXT4-fs (loop4): Remounting filesystem read-only [ 129.179975][ T6696] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.791: Invalid inode bitmap blk 0 in block_group 0 [ 129.182266][ T6696] EXT4-fs (loop4): Remounting filesystem read-only [ 129.183315][ T6696] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 129.185015][ T6696] EXT4-fs (loop4): Remounting filesystem read-only [ 129.186235][ T6696] EXT4-fs (loop4): 1 orphan inode deleted [ 129.187171][ T6696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.191145][ T1589] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.197982][ T1589] EXT4-fs (loop4): Remounting filesystem read-only [ 129.201392][ T1589] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 129.207562][ T1589] EXT4-fs (loop4): Remounting filesystem read-only [ 129.225844][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 129.264852][ T6700] loop4: detected capacity change from 0 to 1024 [ 129.267787][ T6700] EXT4-fs: Ignoring removed bh option [ 129.289467][ T6700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.303238][ T6700] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.792: lblock 3 mapped to illegal pblock 3 (length 3) [ 129.319530][ T6700] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 129.325235][ T6700] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.325235][ T6700] [ 129.338184][ T6700] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm syz.4.792: lblock 8 mapped to illegal pblock 8 (length 8) [ 129.349518][ T6700] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 129.358743][ T6700] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.358743][ T6700] [ 129.393175][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 129.610806][ T6711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'. [ 129.640205][ T6716] device syzkaller0 entered promiscuous mode [ 129.666528][ T6711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'. [ 129.744325][ T6719] device syzkaller0 entered promiscuous mode [ 130.338691][ T6724] block device autoloading is deprecated and will be removed. [ 131.532247][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'. [ 131.877355][ T6754] HTB: quantum of class 80030008 is small. Consider r2q change. [ 132.410074][ T6769] loop4: detected capacity change from 0 to 32768 [ 132.443674][ T6769] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 132.445004][ T6769] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 132.455336][ T6769] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 132.457306][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 132.458370][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 132.481998][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms [ 132.486871][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 132.488554][ T6769] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 132.792485][ T6769] gfs2: fsid=syz:syz.0: found 1 quota changes [ 132.811454][ T6779] netlink: 100 bytes leftover after parsing attributes in process `syz.3.815'. [ 132.897642][ T6780] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 132.897642][ T6780] inode = 11 2339 [ 132.897642][ T6780] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 132.900958][ T6780] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 132.902570][ T6780] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6780 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x500 [ 132.904729][ T6780] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000001 s:0 p:0 [ 132.950321][ T6780] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 133.116733][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 133.321426][ T6789] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 133.323113][ T6789] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 133.932629][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.015077][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.049719][ T6796] loop1: detected capacity change from 0 to 2048 [ 134.050044][ T6801] loop3: detected capacity change from 0 to 1024 [ 134.288212][ T6801] EXT4-fs: Ignoring removed oldalloc option [ 134.289542][ T6801] EXT4-fs: Ignoring removed oldalloc option [ 134.361089][ T6801] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.378539][ T6801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.384032][ T6796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.053420][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 137.351401][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 137.420969][ T6854] loop2: detected capacity change from 0 to 2048 [ 137.436159][ T6854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.471817][ T6858] loop1: detected capacity change from 0 to 4096 [ 137.487302][ T6858] ntfs: volume version 3.1. [ 138.426438][ T6780] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 138.428948][ T6780] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 138.431028][ T6780] gfs2: fsid=syz:syz.0: File system withdrawn [ 138.433421][ T6780] CPU: 0 PID: 6780 Comm: gfs2_quotad Not tainted syzkaller #0 [ 138.434657][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 138.436315][ T6780] Call trace: [ 138.436856][ T6780] dump_backtrace+0x1c0/0x1ec [ 138.437641][ T6780] show_stack+0x2c/0x3c [ 138.438367][ T6780] __dump_stack+0x30/0x40 [ 138.439110][ T6780] dump_stack_lvl+0xf4/0x15c [ 138.439959][ T6780] dump_stack+0x1c/0x5c [ 138.440668][ T6780] gfs2_withdraw+0x9ec/0x127c [ 138.441459][ T6780] gfs2_consist_inode_i+0xf0/0x10c [ 138.442371][ T6780] gfs2_inode_refresh+0x988/0xe50 [ 138.443129][ T6780] inode_go_instantiate+0x4c/0x68 [ 138.443969][ T6780] gfs2_instantiate+0x178/0x2b4 [ 138.444829][ T6780] gfs2_glock_wait+0x1b4/0x298 [ 138.445637][ T6780] gfs2_glock_nq+0x8bc/0x11c4 [ 138.446454][ T6780] do_sync+0x41c/0xaec [ 138.447154][ T6780] gfs2_quota_sync+0x2cc/0x500 [ 138.447932][ T6780] gfs2_quotad+0x2d8/0x500 [ 138.448707][ T6780] kthread+0x250/0x2d8 [ 138.449417][ T6780] ret_from_fork+0x10/0x20 [ 138.784523][ T6875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.994639][ T4339] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 138.997298][ T4339] CPU: 1 PID: 4339 Comm: syz-executor Not tainted syzkaller #0 [ 138.998335][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 139.000159][ T4339] Call trace: [ 139.000737][ T4339] dump_backtrace+0x1c0/0x1ec [ 139.001514][ T4339] show_stack+0x2c/0x3c [ 139.002211][ T4339] __dump_stack+0x30/0x40 [ 139.002940][ T4339] dump_stack_lvl+0xf4/0x15c [ 139.003720][ T4339] dump_stack+0x1c/0x5c [ 139.004419][ T4339] gfs2_assert_warn_i+0x16c/0x26c [ 139.005282][ T4339] gfs2_quota_cleanup+0x464/0x668 [ 139.006131][ T4339] gfs2_put_super+0x1f0/0x760 [ 139.006848][ T4339] generic_shutdown_super+0x130/0x324 [ 139.007761][ T4339] kill_block_super+0x70/0xdc [ 139.008635][ T4339] gfs2_kill_sb+0xc0/0xd4 [ 139.009367][ T4339] deactivate_locked_super+0xac/0x120 [ 139.010259][ T4339] deactivate_super+0xe4/0x104 [ 139.011121][ T4339] cleanup_mnt+0x390/0x418 [ 139.011924][ T4339] __cleanup_mnt+0x20/0x30 [ 139.012696][ T4339] task_work_run+0x1ec/0x278 [ 139.013464][ T4339] do_notify_resume+0x1fa0/0x2aa4 [ 139.014263][ T4339] el0_svc+0x98/0x128 [ 139.014937][ T4339] el0t_64_sync_handler+0x84/0xf0 [ 139.015795][ T4339] el0t_64_sync+0x18c/0x190 [ 141.012038][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 142.758562][ T6929] loop3: detected capacity change from 0 to 64 [ 142.778344][ T6928] loop1: detected capacity change from 0 to 4096 [ 144.062727][ T6938] Trying to free block not in datazone [ 144.071921][ T6938] Trying to free block not in datazone [ 144.085984][ T6939] loop4: detected capacity change from 0 to 512 [ 144.093505][ T6939] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.110552][ T6936] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.175038][ T5880] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.275740][ T6946] loop2: detected capacity change from 0 to 256 [ 144.370791][ T6947] loop4: detected capacity change from 0 to 512 [ 144.651270][ T6946] FAT-fs (loop2): Directory bread(block 64) failed [ 144.652533][ T6946] FAT-fs (loop2): Directory bread(block 65) failed [ 144.654432][ T6946] FAT-fs (loop2): Directory bread(block 66) failed [ 144.655604][ T6946] FAT-fs (loop2): Directory bread(block 67) failed [ 144.666738][ T6946] FAT-fs (loop2): Directory bread(block 68) failed [ 144.667988][ T6946] FAT-fs (loop2): Directory bread(block 69) failed [ 144.736338][ T6946] FAT-fs (loop2): Directory bread(block 70) failed [ 144.740080][ T6946] FAT-fs (loop2): Directory bread(block 71) failed [ 144.744830][ T6946] FAT-fs (loop2): Directory bread(block 72) failed [ 144.748735][ T6946] FAT-fs (loop2): Directory bread(block 73) failed [ 145.093962][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.103414][ T6974] loop2: detected capacity change from 0 to 2048 [ 146.144643][ T6974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.165426][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 146.541744][ T6980] loop2: detected capacity change from 0 to 4096 [ 146.859474][ T6991] set match dimension is over the limit! [ 147.068519][ T6993] loop3: detected capacity change from 0 to 512 [ 147.119198][ T6993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.139833][ T6993] EXT4-fs error (device loop3): ext4_xattr_block_list:713: inode #12: comm syz.3.875: corrupted xattr block 6 [ 147.215192][ T4337] EXT4-fs (loop3): unmounting filesystem. [ 147.916478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.918238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.153594][ T7017] loop4: detected capacity change from 0 to 164 [ 148.192931][ T7017] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 149.925041][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.926579][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.497339][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 150.777896][ T7068] hub 1-0:1.0: USB hub found [ 150.798133][ T7068] hub 1-0:1.0: 1 port detected [ 150.931613][ T7068] loop2: detected capacity change from 0 to 32768 [ 150.956964][ T7068] XFS (loop2): Mounting V5 Filesystem [ 151.278237][ T7068] XFS (loop2): Ending clean mount [ 151.289599][ T7068] XFS (loop2): Quotacheck needed: Please wait. [ 151.319743][ T7092] loop1: detected capacity change from 0 to 512 [ 151.320341][ T7068] XFS (loop2): Quotacheck: Done. [ 151.326772][ T7092] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.330638][ T7094] binder: 7093:7094 got transaction to invalid handle, 1 [ 151.332159][ T7094] binder: 7094:7093 cannot find target node [ 151.333194][ T7094] binder: 7093:7094 transaction call to 0:0 failed 15/29201/-22, size 0-0 line 3045 [ 151.352130][ T7092] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.905: corrupted in-inode xattr [ 151.357259][ T4328] XFS (loop2): Unmounting Filesystem [ 151.358918][ T7092] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.905: couldn't read orphan inode 15 (err -117) [ 151.365612][ T7092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.369914][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.404978][ T7092] EXT4-fs: Ignoring removed bh option [ 151.413199][ T7092] System zones: 1-12 [ 151.414272][ T7092] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 151.429597][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 151.979002][ T7117] device bridge0 entered promiscuous mode [ 152.016371][ T7121] device syzkaller0 entered promiscuous mode [ 152.020188][ T7121] tipc: Started in network mode [ 152.021104][ T7121] tipc: Node identity 8aaadab4e099, cluster identity 4711 [ 152.022731][ T7121] tipc: Enabled bearer , priority 0 [ 152.027228][ T7121] tipc: Resetting bearer [ 152.032989][ T7120] tipc: Resetting bearer [ 152.484244][ T7120] tipc: Disabling bearer [ 152.605531][ T7133] loop2: detected capacity change from 0 to 8192 [ 152.632606][ T7133] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 152.634970][ T7133] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 152.637285][ T7133] REISERFS (device loop2): using ordered data mode [ 152.638871][ T7133] reiserfs: using flush barriers [ 152.641795][ T7133] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.646032][ T7133] REISERFS (device loop2): checking transaction log (loop2) [ 152.649583][ T7133] REISERFS (device loop2): Using r5 hash to sort names [ 152.651550][ T7133] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 153.606672][ T7131] loop4: detected capacity change from 0 to 32768 [ 153.623648][ T7131] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.919 (7131) [ 153.659347][ T7131] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.661066][ T7131] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 153.662625][ T7131] BTRFS info (device loop4): force clearing of disk cache [ 153.663812][ T7131] BTRFS info (device loop4): turning off barriers [ 153.698281][ T7131] BTRFS info (device loop4): use no compression [ 153.699387][ T7131] BTRFS info (device loop4): disabling free space tree [ 153.700573][ T7131] BTRFS info (device loop4): enabling ssd optimizations [ 153.701757][ T7131] BTRFS info (device loop4): using spread ssd allocation scheme [ 153.702907][ T7131] BTRFS info (device loop4): not using ssd optimizations [ 153.704006][ T7131] BTRFS info (device loop4): not using spread ssd allocation scheme [ 154.000250][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.927'. [ 154.103330][ T7131] BTRFS info (device loop4): rebuilding free space tree [ 154.111418][ T7131] BTRFS info (device loop4): disabling free space tree [ 154.114893][ T7131] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.121756][ T7131] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.137574][ T7131] BTRFS info (device loop4): checking UUID tree [ 154.186038][ T4339] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.229907][ T7175] loop3: detected capacity change from 0 to 32768 [ 154.246373][ T7175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.929 (7175) [ 154.261779][ T7175] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.263768][ T7175] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 154.265313][ T7175] BTRFS info (device loop3): setting nodatasum [ 154.266259][ T7175] BTRFS info (device loop3): force zlib compression, level 3 [ 154.267552][ T7175] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 154.270547][ T7175] BTRFS info (device loop3): use lzo compression, level 0 [ 154.271765][ T7175] BTRFS info (device loop3): turning on flush-on-commit [ 154.272983][ T7175] BTRFS info (device loop3): enabling auto defrag [ 154.275486][ T7175] BTRFS info (device loop3): max_inline at 4096 [ 154.276597][ T7175] BTRFS info (device loop3): using free space tree [ 154.327459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.344606][ T7197] loop1: detected capacity change from 0 to 4096 [ 154.451267][ T7175] BTRFS info (device loop3): enabling ssd optimizations [ 156.321249][ T7219] xt_TPROXY: Can be used only with -p tcp or -p udp [ 156.522828][ T4337] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.714236][ T5874] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5874) [ 157.546635][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.548264][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.441106][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.443238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.803528][ T7269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.805358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.946150][ T7282] device syzkaller0 entered promiscuous mode [ 159.548337][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 160.961379][ T7312] loop1: detected capacity change from 0 to 40427 [ 160.968746][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 161.006942][ T7312] F2FS-fs (loop1): invalid crc value [ 161.098802][ T7312] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.165814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.437843][ T7312] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 161.484938][ T7327] loop4: detected capacity change from 0 to 32768 [ 161.505879][ T7332] loop2: detected capacity change from 0 to 32768 [ 161.513737][ T4333] syz-executor: attempt to access beyond end of device [ 161.513737][ T4333] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.517294][ T7327] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.517916][ T7332] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.972 (7332) [ 161.519320][ T7327] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 161.522472][ T7327] BTRFS info (device loop4): setting nodatasum [ 161.536037][ T7327] BTRFS info (device loop4): force zlib compression, level 3 [ 161.543926][ T7332] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 161.544779][ T7327] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 161.547146][ T7327] BTRFS info (device loop4): use lzo compression, level 0 [ 161.548064][ T7332] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 161.548328][ T7327] BTRFS info (device loop4): turning on flush-on-commit [ 161.551430][ T7332] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 161.553649][ T7332] BTRFS info (device loop2): use zstd compression, level 3 [ 161.555220][ T7332] BTRFS info (device loop2): force clearing of disk cache [ 161.557087][ T7332] BTRFS info (device loop2): enabling disk space caching [ 161.558685][ T7332] BTRFS info (device loop2): disk space caching is enabled [ 161.559091][ T7327] BTRFS info (device loop4): enabling auto defrag [ 161.572286][ T7327] BTRFS info (device loop4): max_inline at 4096 [ 161.573260][ T7327] BTRFS info (device loop4): using free space tree [ 161.718829][ T7327] BTRFS info (device loop4): enabling ssd optimizations [ 161.720424][ T7332] BTRFS info (device loop2): enabling ssd optimizations [ 161.727662][ T7332] BTRFS info (device loop2): rebuilding free space tree [ 161.737731][ T7332] BTRFS info (device loop2): disabling free space tree [ 161.741065][ T7327] BTRFS error (device loop4: state M): unrecognized mount option '01777777777777777777777' [ 161.745543][ T7332] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 161.750594][ T7332] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.484339][ T4339] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.987904][ T4328] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 163.178447][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.179895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.854099][ T7399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.855512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.009994][ T5968] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop2 scanned by udevd (5968) [ 164.530875][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 167.364967][ T7442] netlink: 'syz.2.993': attribute type 4 has an invalid length. [ 167.739351][ T7494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.740699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.618758][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 169.618767][ T27] audit: type=1326 audit(164.859:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.3.1027" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 169.623873][ T27] audit: type=1326 audit(164.859:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.3.1027" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 169.628261][ T27] audit: type=1326 audit(164.859:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.3.1027" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 169.640706][ T27] audit: type=1326 audit(164.859:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.3.1027" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 169.653237][ T27] audit: type=1326 audit(164.859:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.3.1027" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 169.657397][ T27] audit: type=1326 audit(164.859:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.3.1027" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 169.664013][ T27] audit: type=1326 audit(164.859:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.3.1027" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 169.667836][ T27] audit: type=1326 audit(164.868:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.3.1027" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 169.683071][ T27] audit: type=1326 audit(164.868:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.3.1027" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffaff77aa8 code=0x7ffc0000 [ 169.804083][ T7541] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1030'. [ 170.652765][ T27] audit: type=1326 audit(165.814:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.1055" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef77aa8 code=0x7ffc0000 [ 171.082443][ T6780] ================================================================== [ 171.083778][ T6780] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x6800 [ 171.084976][ T6780] Read of size 8 at addr ffff0000d9ff0bb0 by task gfs2_quotad/6780 [ 171.086286][ T6780] [ 171.086704][ T6780] CPU: 1 PID: 6780 Comm: gfs2_quotad Not tainted syzkaller #0 [ 171.087979][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.089726][ T6780] Call trace: [ 171.090284][ T6780] dump_backtrace+0x1c0/0x1ec [ 171.091052][ T6780] show_stack+0x2c/0x3c [ 171.091717][ T6780] __dump_stack+0x30/0x40 [ 171.092426][ T6780] dump_stack_lvl+0xf4/0x15c [ 171.093219][ T6780] print_address_description+0x88/0x218 [ 171.094115][ T6780] print_report+0x50/0x68 [ 171.094840][ T6780] kasan_report+0xa8/0xfc [ 171.095577][ T6780] __asan_report_load8_noabort+0x2c/0x38 [ 171.096515][ T6780] __lock_acquire+0x104/0x6800 [ 171.097380][ T6780] lock_acquire+0x20c/0x63c [ 171.098170][ T6780] _raw_spin_lock_irqsave+0x6c/0xb0 [ 171.099042][ T6780] finish_wait+0xc8/0x1ac [ 171.099755][ T6780] gfs2_quotad+0x390/0x500 [ 171.100527][ T6780] kthread+0x250/0x2d8 [ 171.101186][ T6780] ret_from_fork+0x10/0x20 [ 171.101948][ T6780] [ 171.102339][ T6780] Allocated by task 7592: [ 171.103089][ T6780] kasan_set_track+0x4c/0x80 [ 171.103881][ T6780] kasan_save_alloc_info+0x24/0x30 [ 171.104743][ T6780] __kasan_kmalloc+0xa0/0xb8 [ 171.105509][ T6780] kmalloc_trace+0x7c/0x94 [ 171.106277][ T6780] audit_log_d_path+0xcc/0x260 [ 171.107086][ T6780] audit_log_d_path_exe+0x48/0x80 [ 171.107962][ T6780] audit_log_task+0x1c4/0x29c [ 171.108772][ T6780] audit_seccomp+0x74/0x14c [ 171.109590][ T6780] __seccomp_filter+0x924/0x1930 [ 171.110482][ T6780] __secure_computing+0xf4/0x290 [ 171.111339][ T6780] syscall_trace_enter+0x380/0x748 [ 171.112187][ T6780] el0_svc_common+0x1d0/0x258 [ 171.112915][ T6780] do_el0_svc+0x58/0x130 [ 171.113576][ T6780] el0_svc+0x58/0x128 [ 171.114236][ T6780] el0t_64_sync_handler+0x84/0xf0 [ 171.115070][ T6780] el0t_64_sync+0x18c/0x190 [ 171.115791][ T6780] [ 171.116144][ T6780] Freed by task 7592: [ 171.116770][ T6780] kasan_set_track+0x4c/0x80 [ 171.117556][ T6780] kasan_save_free_info+0x38/0x5c [ 171.118486][ T6780] ____kasan_slab_free+0x148/0x1b0 [ 171.119406][ T6780] __kasan_slab_free+0x18/0x28 [ 171.120207][ T6780] slab_free_freelist_hook+0x16c/0x1e8 [ 171.121121][ T6780] __kmem_cache_free+0xbc/0x218 [ 171.121886][ T6780] kfree+0xd0/0x1a8 [ 171.122529][ T6780] audit_log_d_path+0x1ec/0x260 [ 171.123375][ T6780] audit_log_d_path_exe+0x48/0x80 [ 171.124265][ T6780] audit_log_task+0x1c4/0x29c [ 171.125061][ T6780] audit_seccomp+0x74/0x14c [ 171.125778][ T6780] __seccomp_filter+0x924/0x1930 [ 171.126672][ T6780] __secure_computing+0xf4/0x290 [ 171.127491][ T6780] syscall_trace_enter+0x380/0x748 [ 171.128318][ T6780] el0_svc_common+0x1d0/0x258 [ 171.129111][ T6780] do_el0_svc+0x58/0x130 [ 171.129771][ T6780] el0_svc+0x58/0x128 [ 171.130477][ T6780] el0t_64_sync_handler+0x84/0xf0 [ 171.131365][ T6780] el0t_64_sync+0x18c/0x190 [ 171.132150][ T6780] [ 171.132547][ T6780] The buggy address belongs to the object at ffff0000d9ff0000 [ 171.132547][ T6780] which belongs to the cache kmalloc-8k of size 8192 [ 171.134910][ T6780] The buggy address is located 2992 bytes inside of [ 171.134910][ T6780] 8192-byte region [ffff0000d9ff0000, ffff0000d9ff2000) [ 171.137235][ T6780] [ 171.137639][ T6780] The buggy address belongs to the physical page: [ 171.138722][ T6780] page:000000000ec8d428 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119ff0 [ 171.140497][ T6780] head:000000000ec8d428 order:3 compound_mapcount:0 compound_pincount:0 [ 171.141937][ T6780] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 171.143347][ T6780] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0002c00 [ 171.144732][ T6780] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 171.146147][ T6780] page dumped because: kasan: bad access detected [ 171.147255][ T6780] [ 171.147645][ T6780] Memory state around the buggy address: [ 171.148549][ T6780] ffff0000d9ff0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.149902][ T6780] ffff0000d9ff0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.151277][ T6780] >ffff0000d9ff0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.152613][ T6780] ^ [ 171.153564][ T6780] ffff0000d9ff0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.154877][ T6780] ffff0000d9ff0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 171.156199][ T6780] ================================================================== [ 171.157490][ T6780] Disabling lock debugging due to kernel taint [ 171.158477][ T6780] INFO: trying to register non-static key. [ 171.159422][ T6780] The code is fine but needs lockdep annotation, or maybe [ 171.160531][ T6780] you didn't initialize this object before use? [ 171.161527][ T6780] turning off the locking correctness validator. [ 171.162549][ T6780] CPU: 1 PID: 6780 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 171.164058][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.165730][ T6780] Call trace: [ 171.166280][ T6780] dump_backtrace+0x1c0/0x1ec [ 171.167033][ T6780] show_stack+0x2c/0x3c [ 171.167753][ T6780] __dump_stack+0x30/0x40 [ 171.168475][ T6780] dump_stack_lvl+0xf4/0x15c [ 171.169197][ T6780] dump_stack+0x1c/0x5c [ 171.169839][ T6780] assign_lock_key+0x230/0x264 [ 171.170634][ T6780] register_lock_class+0x1ac/0x694 [ 171.171423][ T6780] __lock_acquire+0x164/0x6800 [ 171.172185][ T6780] lock_acquire+0x20c/0x63c [ 171.172904][ T6780] _raw_spin_lock_irqsave+0x6c/0xb0 [ 171.173720][ T6780] finish_wait+0xc8/0x1ac [ 171.174394][ T6780] gfs2_quotad+0x390/0x500 [ 171.175067][ T6780] kthread+0x250/0x2d8 [ 171.175721][ T6780] ret_from_fork+0x10/0x20 [ 171.176370][ T6780] list_del corruption. prev->next should be ffff800021b87d98, but was 0000000000000000. (prev=ffff0000d9ff0bd8) [ 171.178198][ T6780] ------------[ cut here ]------------ [ 171.179008][ T6780] kernel BUG at lib/list_debug.c:61! [ 171.179799][ T6780] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 171.181064][ T6780] Modules linked in: [ 171.181708][ T6780] CPU: 1 PID: 6780 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 171.183220][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.184860][ T6780] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 171.186223][ T6780] pc : __list_del_entry_valid+0x13c/0x158 [ 171.187178][ T6780] lr : __list_del_entry_valid+0x13c/0x158 [ 171.188187][ T6780] sp : ffff800021b87c70 [ 171.188932][ T6780] x29: ffff800021b87c70 x28: 0000000000000000 x27: 0000000000000bb8 [ 171.190214][ T6780] x26: 0000000000001770 x25: dfff800000000000 x24: dfff800000000000 [ 171.191498][ T6780] x23: ffff0000d9ff07c0 x22: dfff800000000000 x21: ffff0000d9ff0bd8 [ 171.192722][ T6780] x20: ffff0000d9ff0bd8 x19: ffff800021b87d98 x18: ffff800011babf60 [ 171.194139][ T6780] x17: 20747562202c3839 x16: ffff800011a529a8 x15: 0000000000000000 [ 171.195468][ T6780] x14: 0000000000000001 x13: 1fffe00033ea39a3 x12: 0000000000ff0100 [ 171.196801][ T6780] x11: ff008000083121f4 x10: 0000000000000000 x9 : 2aef1ae0669f6a00 [ 171.198209][ T6780] x8 : 2aef1ae0669f6a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 171.199525][ T6780] x5 : ffff800021b87738 x4 : ffff800015324ea0 x3 : ffff80000853974c [ 171.200944][ T6780] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 000000000000006d [ 171.202294][ T6780] Call trace: [ 171.202832][ T6780] __list_del_entry_valid+0x13c/0x158 [ 171.203697][ T6780] finish_wait+0xd4/0x1ac [ 171.204368][ T6780] gfs2_quotad+0x390/0x500 [ 171.205155][ T6780] kthread+0x250/0x2d8 [ 171.205832][ T6780] ret_from_fork+0x10/0x20 [ 171.206598][ T6780] Code: 911b0000 aa1303e1 aa1503e3 95c246f3 (d4210000) [ 171.207735][ T6780] ---[ end trace 0000000000000000 ]--- [ 171.448977][ T6780] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 171.450143][ T6780] SMP: stopping secondary CPUs [ 171.450974][ T6780] Kernel Offset: disabled [ 171.451694][ T6780] CPU features: 0x080000,000f0097,a65bfea7 [ 171.452710][ T6780] Memory Limit: none [ 171.686721][ T6780] Rebooting in 86400 seconds..