last executing test programs: 39.11016268s ago: executing program 4 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x5, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x8000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x10865ce4, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 38.459945928s ago: executing program 0 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, &(0x7f00000002c0)=""/4095}, 0x20) 38.412738306s ago: executing program 0 (id=96): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x14, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8007, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x2, 0x0, 0xe7}}}}}}, 0x0) 38.238465919s ago: executing program 4 (id=97): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 38.137380016s ago: executing program 4 (id=99): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 38.031381093s ago: executing program 4 (id=101): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_lower}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@utf8}, {@uni_xlateno}, {@fat=@showexec}, {@fat=@nfs_stale_rw}, {@shortname_win95}, {@utf8}, {@fat=@check_strict}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001900)=""/4079, 0xfef, 0x66) 37.996943669s ago: executing program 4 (id=102): openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x84) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0x128a785c, 0xe26, 0x7, "0441920887e87fcb367800000000080100", 0x81, 0x200}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x403, &(0x7f0000000000)={0x0, 0x4c}) 37.582282664s ago: executing program 4 (id=107): personality(0xfe47fef9f5ff7379) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 37.520729528s ago: executing program 32 (id=107): personality(0xfe47fef9f5ff7379) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 37.505091462s ago: executing program 0 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 37.447256911s ago: executing program 0 (id=112): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@utf8}]}, 0x0, 0x2ba, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 37.300787282s ago: executing program 0 (id=115): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000780)=ANY=[@ANYBLOB="757466383d312c756e695f786c6174653d312c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c757466383d312c64656275672c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c757466383d302c636f6465706167653d383635302c73686f72746e616d653d6c6f7765722c726f6469722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c00dc01f959e6af6324d5052895f65641ea2ec5cfa318da63c85e39f20b946216cad66ec9ae542bef2c6423726482c000"/244], 0x1, 0x370, &(0x7f0000000400)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x265, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = io_uring_setup(0xad5, &(0x7f0000000040)={0x0, 0xfffffffc}) close(r2) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 36.846283747s ago: executing program 0 (id=120): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x100) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffff2c, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x8, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0x400000000000f]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={r5}) 36.746208055s ago: executing program 33 (id=120): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x100) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xffffffffffffff2c, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x8, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0x400000000000f]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={r5}) 15.406677097s ago: executing program 2 (id=660): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 15.132449935s ago: executing program 2 (id=666): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 15.02187251s ago: executing program 2 (id=670): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x1) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00005e9000/0x3000)=nil, 0x3000}) 14.951559893s ago: executing program 2 (id=673): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 14.904001445s ago: executing program 2 (id=675): unshare(0x6a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0x8004745a, 0x0) 14.474137027s ago: executing program 2 (id=684): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018", 0x5}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, &(0x7f0000000400)=""/154}, 0x20) 14.444934376s ago: executing program 34 (id=684): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018", 0x5}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, &(0x7f0000000400)=""/154}, 0x20) 8.947567576s ago: executing program 6 (id=826): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 8.906507222s ago: executing program 6 (id=828): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 8.860469155s ago: executing program 6 (id=832): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.818763706s ago: executing program 6 (id=835): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@discard}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@rodir}, {@shortname_lower}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@utf8}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 8.745358776s ago: executing program 6 (id=840): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, &(0x7f0000000240)=""/204, 0xcc, 0x40000000, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 8.306237379s ago: executing program 6 (id=853): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000009, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/235, 0xeb}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x20, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 8.286431544s ago: executing program 35 (id=853): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000009, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/235, 0xeb}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x20, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.714083659s ago: executing program 1 (id=940): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500), r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 2.696925191s ago: executing program 1 (id=941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)="2481", 0x2}], 0x1}, 0x2004085) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2002) close(0x3) 2.618448373s ago: executing program 1 (id=942): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0xd) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @multicast2, 0x1, 0x5, [@empty, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @loopback]}, 0x24) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 2.576047276s ago: executing program 1 (id=943): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d07e, 0x2) io_setup(0x80, &(0x7f0000000340)=0x0) io_submit(r2, 0x200000000000013a, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe3b, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2.442870687s ago: executing program 1 (id=946): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2.034201983s ago: executing program 1 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8702}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 2.001282578s ago: executing program 36 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8702}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1.994770893s ago: executing program 5 (id=962): r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x15) setreuid(0xffffffffffffffff, 0xee00) utimensat(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)={{}, {0x0, 0x2710}}, 0x100) 1.940568031s ago: executing program 5 (id=964): pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) unshare(0x22060600) tee(r2, r1, 0xff, 0x8) r4 = fanotify_init(0x2, 0x0) fanotify_mark(r4, 0x1, 0x1009, r0, 0x0) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) 1.830652176s ago: executing program 5 (id=965): r0 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x11d8) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.702529311s ago: executing program 5 (id=970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/236, 0xec}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.644384423s ago: executing program 7 (id=971): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 1.38267709s ago: executing program 7 (id=975): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001780)="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", 0x35b}, {&(0x7f0000000440)="e0e99ce86197666ec528ba68c0defd06062fba4b3c06992749fa10311cfb4326d701289490b6d9e2402cb2e38f51a4c9b11351c03d4764844edd60cce0c6b66ccdc22b44365e9091e2be3f62db0e06f5436130f3c5034bdb98af372086a09e6658eb634eb6cb7802d0f7a5083fae12b69f1a36a8a8a02f09fa7c27281f3e168b1c845d88b897576641d4f94cd0", 0x8d}, {&(0x7f0000000540)="16f0552ef6a84aebe40f9dcb437a8bc22f8c5fe9398b9f5d2b65218cf898f05e89ae02ab4f16de08671f04db60d8189bdefdc3189b8f1ecece7b1bc5d8fece2e7cc168fdffb56ac79f67a0da40e8a501fc0a85036d43189cdff284e772a2c4cf453370c81295dfd53227b7662b4b4c78108d", 0x72}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000cc0)="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", 0x11d}, {&(0x7f0000000980)="bbac16fcc4d7f544650412d99d848131e90c3ddb46328254d612a7137dc0fef685c549edea047466f98e315c404278f30041195c9258323be608bc4f3bd7fffb49f496ff336b01064dbda605139f2f216ee4bb009da26bc8b9290bbd3e6e9bf79d62123a72d33f70e6266109cf777dce8b918ea73612fc05d067f822c4006712d8430f698dd7a12f125f17da6d0c0fc5bfec9e243bd269dfce6877fe1529c1cc59e1cb7f50b311986abf05a0ea27cd6877e2b641e23047937ae413a3e174d879479206240ed9f29c702bbdb8aa274844", 0xd0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000002c0)="03a2", 0x2}], 0x1}}], 0x4, 0x24008844) sendto$inet(r1, 0x0, 0x0, 0x32000800, 0x0, 0x0) 1.335616058s ago: executing program 7 (id=977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet6(r0, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002180)=""/120, 0x78}], 0x1}, 0x9}], 0x1, 0x20, 0x0) 887.223995ms ago: executing program 5 (id=981): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x205b) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000027c0)={0x0, "f558add7c239b5486ffc7f9402039cdf"}) 524.033362ms ago: executing program 3 (id=988): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x8, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x0, 0xae3, 0x10, r2, 0xffffffffffffffff, 0x6000, '\x00', 0x6, 0x81, 0x1000000000001, 0x4, {0x1, 0x5}, {0x4000000000006, 0x42}, {0x2000005, 0xd}, {0x1, 0xa00}, 0x2, 0x6, 0x81, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x2810901}}, 0x50) 451.603505ms ago: executing program 7 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$packet(0x11, 0x3, 0x300) write$tun(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb810000008847"], 0x16d) 380.784838ms ago: executing program 8 (id=992): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20) sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8811}, 0x40) 337.437212ms ago: executing program 3 (id=993): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x10}], 0x1, 0x0, 0x0, 0x0) 322.649325ms ago: executing program 8 (id=994): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x103a83) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) close(0x3) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x3, 0x10, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x801, 0xf6ac]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 295.170719ms ago: executing program 3 (id=995): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0xc841}}], 0x1, 0x20040804) accept4$unix(r0, 0x0, 0x0, 0x0) 268.754665ms ago: executing program 8 (id=996): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[], 0x0) 250.153806ms ago: executing program 3 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 200.800571ms ago: executing program 3 (id=998): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 136.7788ms ago: executing program 7 (id=999): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={0x0, 0x0, r2, r5, 0x0, 0x5d9b, 0x80000000, 0xa, {0xb, 0x0, 0x7fff, 0x10, 0xb, 0x8000, 0x1ff, 0x8, 0x33a, 0x3, 0x40, 0xe37, 0x0, 0x7fff, "a3753e060000ecffffffa555864e9149a227ec00"}}) 120.218501ms ago: executing program 8 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x3, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, 0x0, 0x5}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) 95.368144ms ago: executing program 8 (id=1001): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c64d2, &(0x7f0000000180)={r4, 0x80000}) close_range(r3, 0xffffffffffffffff, 0x0) 94.943878ms ago: executing program 3 (id=1002): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) 54.268877ms ago: executing program 7 (id=1003): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) accept(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 24.537212ms ago: executing program 8 (id=1004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x259fdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 0s ago: executing program 5 (id=1005): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/63, 0x3f) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x33fe, 0x0, 0xfffc}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) kernel console output (not intermixed with test programs): atadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.358562][ T4677] hsr_slave_0: entered promiscuous mode [ 30.358839][ T4677] hsr_slave_1: entered promiscuous mode [ 30.359037][ T4677] debugfs: 'hsr0' already exists in 'hsr' [ 30.359067][ T4677] Cannot create hsr debugfs directory [ 30.383444][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.384886][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.390068][ T4685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.402414][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.403922][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.408867][ T4685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.411253][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.412798][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.414657][ T4676] bridge_slave_0: entered allmulticast mode [ 30.416436][ T4676] bridge_slave_0: entered promiscuous mode [ 30.432472][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.434218][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.435945][ T4676] bridge_slave_1: entered allmulticast mode [ 30.437539][ T4676] bridge_slave_1: entered promiscuous mode [ 30.444690][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.446051][ T4667] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.448002][ T4667] bridge_slave_0: entered allmulticast mode [ 30.449680][ T4667] bridge_slave_0: entered promiscuous mode [ 30.460078][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.460753][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.460822][ T4667] bridge_slave_1: entered allmulticast mode [ 30.461280][ T4667] bridge_slave_1: entered promiscuous mode [ 30.471300][ T4676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.474059][ T4676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.484100][ T4685] hsr_slave_0: entered promiscuous mode [ 30.484426][ T4685] hsr_slave_1: entered promiscuous mode [ 30.484609][ T4685] debugfs: 'hsr0' already exists in 'hsr' [ 30.484619][ T4685] Cannot create hsr debugfs directory [ 30.495845][ T4667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.502597][ T4667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.508026][ T4676] team0: Port device team_slave_0 added [ 30.508893][ T4676] team0: Port device team_slave_1 added [ 30.523318][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.524649][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.529647][ T4676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.534427][ T4667] team0: Port device team_slave_0 added [ 30.536799][ T4667] team0: Port device team_slave_1 added [ 30.537364][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.537375][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.537393][ T4676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.550598][ T4666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.554482][ T4666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.562606][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.562631][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.562646][ T4667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.564417][ T4666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.570660][ T4666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.574980][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.575001][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.575019][ T4667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.586697][ T4666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.589004][ T4666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.590614][ T4666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.592894][ T4666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.595304][ T4676] hsr_slave_0: entered promiscuous mode [ 30.595873][ T4676] hsr_slave_1: entered promiscuous mode [ 30.596101][ T4676] debugfs: 'hsr0' already exists in 'hsr' [ 30.596112][ T4676] Cannot create hsr debugfs directory [ 30.614144][ T4667] hsr_slave_0: entered promiscuous mode [ 30.614461][ T4667] hsr_slave_1: entered promiscuous mode [ 30.614656][ T4667] debugfs: 'hsr0' already exists in 'hsr' [ 30.614665][ T4667] Cannot create hsr debugfs directory [ 30.647564][ T4677] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.650261][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.652016][ T4677] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.654308][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.664764][ T4677] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.667103][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.667643][ T4677] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.669312][ T4677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.677648][ T4666] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.677720][ T4666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.677868][ T4666] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.677897][ T4666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.717498][ T4685] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.720534][ T4685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.721763][ T4685] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.724138][ T4685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.726011][ T4685] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.728153][ T4685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.730042][ T4685] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.732172][ T4685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.737557][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.737687][ T4677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.737778][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.737813][ T4677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.746729][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.746772][ T4685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.746854][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.746887][ T4685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.773583][ T4676] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.776399][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.778621][ T4666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.780896][ T4676] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.783872][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.786125][ T4676] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.788264][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.789945][ T4676] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.792115][ T4676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.802454][ T4685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.814558][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.826229][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.827760][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.830762][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.832293][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.834237][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.835927][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.846700][ T4667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.848848][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.850576][ T4667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.852852][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.856639][ T4677] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.858763][ T4666] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.859286][ T4667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.860929][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.861191][ T4667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.864001][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.865976][ T4685] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.875199][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.875247][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.878480][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.878526][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.887903][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.887947][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.888372][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.888391][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.902132][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.902185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.913387][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.913435][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.915858][ T4677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.950787][ T4685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.950820][ T4685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.957596][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.966802][ T4666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.969033][ T4666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.989822][ T4667] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.994681][ T4676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.000607][ T4676] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.019250][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.019491][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.020043][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.020085][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.021237][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.021265][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.021747][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.021775][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.047395][ T4676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.047432][ T4676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.155152][ T4685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.176927][ T4685] veth0_vlan: entered promiscuous mode [ 31.179848][ T4685] veth1_vlan: entered promiscuous mode [ 31.185861][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.201548][ T4685] veth0_macvtap: entered promiscuous mode [ 31.207576][ T4685] veth1_macvtap: entered promiscuous mode [ 31.228082][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.231634][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.239424][ T700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.239559][ T700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.239618][ T700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.239667][ T700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.288586][ T4676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.314391][ T4667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.326973][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.327005][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.330064][ T4676] veth0_vlan: entered promiscuous mode [ 31.340654][ T4666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.351674][ T3908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.354232][ T3908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.360535][ T4676] veth1_vlan: entered promiscuous mode [ 31.375381][ T4667] veth0_vlan: entered promiscuous mode [ 31.378524][ T4666] veth0_vlan: entered promiscuous mode [ 31.380112][ T4666] veth1_vlan: entered promiscuous mode [ 31.381586][ T4667] veth1_vlan: entered promiscuous mode [ 31.387199][ T4677] veth0_vlan: entered promiscuous mode [ 31.390377][ T4677] veth1_vlan: entered promiscuous mode [ 31.399893][ T4676] veth0_macvtap: entered promiscuous mode [ 31.402382][ T4676] veth1_macvtap: entered promiscuous mode [ 31.405899][ T4685] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.416411][ T4667] veth0_macvtap: entered promiscuous mode [ 31.420504][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.429432][ T4667] veth1_macvtap: entered promiscuous mode [ 31.433493][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.441232][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.441457][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.441480][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.441497][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.447310][ T4666] veth0_macvtap: entered promiscuous mode [ 31.448545][ T4666] veth1_macvtap: entered promiscuous mode [ 31.454645][ T4666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.459511][ T4666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.476242][ T4677] veth0_macvtap: entered promiscuous mode [ 31.478020][ T3908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.478071][ T3908] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.478093][ T3908] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.478109][ T3908] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.497132][ T4677] veth1_macvtap: entered promiscuous mode [ 31.509651][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.512591][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.517935][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.527398][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527491][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.527512][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.527619][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.528896][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.528934][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.538471][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.545153][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.545204][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.545235][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.545251][ T15] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.577874][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.577902][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.583605][ T700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.583633][ T700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.643168][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.643199][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.661612][ T700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.661642][ T700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.692842][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.692870][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.699667][ T4860] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 31.710277][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.710305][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.730380][ T700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.730411][ T700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.781838][ T4867] Bluetooth: MGMT ver 1.23 [ 31.781882][ T4867] Bluetooth: hci1: expected 4473 bytes, got 2 bytes [ 31.832481][ T4877] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14'. [ 31.838592][ T4670] Bluetooth: hci3: command tx timeout [ 31.838594][ T4683] Bluetooth: hci1: command tx timeout [ 31.838824][ T4670] Bluetooth: hci2: command tx timeout [ 31.838828][ T4683] Bluetooth: hci0: command tx timeout [ 31.843483][ T4673] Bluetooth: hci4: command tx timeout [ 31.846539][ T4877] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 31.962105][ T4887] ======================================================= [ 31.962105][ T4887] WARNING: The mand mount option has been deprecated and [ 31.962105][ T4887] and is ignored by this kernel. Remove the mand [ 31.962105][ T4887] option from the mount to silence this warning. [ 31.962105][ T4887] ======================================================= [ 31.972562][ T4887] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 31.977076][ T4887] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 31.991055][ T4887] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 31.995801][ T4887] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 32.276101][ T4913] loop4: detected capacity change from 0 to 1024 [ 32.305595][ T4913] syz.4.31 uses obsolete (PF_INET,SOCK_PACKET) [ 32.307854][ T4913] syzkaller1: entered promiscuous mode [ 32.309282][ T4913] syzkaller1: entered allmulticast mode [ 32.482740][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 32.482828][ T4925] netlink: 'syz.3.36': attribute type 15 has an invalid length. [ 32.497517][ T39] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.497549][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 32.497564][ T39] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.497575][ T4925] netlink: 'syz.3.36': attribute type 15 has an invalid length. [ 32.497597][ T39] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.497631][ T39] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.502296][ T4925] Zero length message leads to an empty skb [ 32.546502][ T4929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 32.551803][ T4673] Bluetooth: hci4: connection err: -111 [ 32.601194][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'. [ 32.603971][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 32.606433][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 32.671862][ T700] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.671923][ T700] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.671952][ T700] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.671969][ T700] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.672061][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'. [ 32.672078][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 32.677219][ T4934] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.685422][ T4934] bridge_slave_1 (unregistering): left allmulticast mode [ 32.685438][ T4934] bridge_slave_1 (unregistering): left promiscuous mode [ 32.685466][ T4934] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.348478][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 33.621981][ T5002] capability: warning: `syz.4.67' uses 32-bit capabilities (legacy support in use) [ 33.682647][ T5004] loop4: detected capacity change from 0 to 2048 [ 33.704454][ T5006] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 33.704485][ T5006] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 33.713872][ T5004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.790476][ T5004] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.68: bg 0: block 234: padding at end of block bitmap is not set [ 33.792659][ T5004] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 738 with error 28 [ 33.792675][ T5004] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.792675][ T5004] [ 33.792683][ T5004] EXT4-fs (loop4): Total free blocks count 0 [ 33.792690][ T5004] EXT4-fs (loop4): Free/Dirty block details [ 33.792821][ T5004] EXT4-fs (loop4): free_blocks=0 [ 33.792838][ T5004] EXT4-fs (loop4): dirty_blocks=752 [ 33.792844][ T5004] EXT4-fs (loop4): Block reservation details [ 33.792850][ T5004] EXT4-fs (loop4): i_reserved_data_blocks=47 [ 33.893494][ T4677] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 33.896292][ T4677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.913064][ T4673] Bluetooth: hci4: command tx timeout [ 33.913096][ T4673] Bluetooth: hci0: command tx timeout [ 33.913116][ T4673] Bluetooth: hci2: command tx timeout [ 33.913134][ T4673] Bluetooth: hci1: command tx timeout [ 33.913154][ T4673] Bluetooth: hci3: command tx timeout [ 34.236055][ T5049] loop3: detected capacity change from 0 to 2048 [ 34.238990][ T5049] EXT4-fs: Ignoring removed i_version option [ 34.260785][ T5049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.290277][ T4676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.443812][ T5056] loop0: detected capacity change from 0 to 32768 [ 34.489291][ T5056] loop0: p1 p3 < > [ 34.507863][ T5068] capability: warning: `syz.3.91' uses deprecated v2 capabilities in a way that may be insecure [ 34.666527][ T4656] udevd[4656]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 34.670833][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 35.032994][ T30] audit: type=1400 audit(35.010:2): lsm=SMACK fn=smack_task_kill action=denied subject="w" object="_" requested=w pid=5088 comm="syz.4.99" opid=5088 ocomm="syz.4.99" [ 35.066546][ T5094] loop4: detected capacity change from 0 to 128 [ 35.288470][ T5100] Bluetooth: MGMT ver 1.23 [ 35.536412][ T3908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.640821][ T3908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.653405][ T4670] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.654018][ T4670] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.654220][ T4670] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.654559][ T4670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.654767][ T4670] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.700282][ T5119] loop0: detected capacity change from 0 to 128 [ 35.724326][ T3908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.822752][ T3908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.993827][ T4673] Bluetooth: hci1: command tx timeout [ 35.993865][ T4673] Bluetooth: hci0: command tx timeout [ 35.993938][ T4670] Bluetooth: hci3: command tx timeout [ 36.111152][ T1013] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.117167][ T1013] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.316177][ T3908] bridge_slave_1: left allmulticast mode [ 36.316239][ T3908] bridge_slave_1: left promiscuous mode [ 36.316592][ T3908] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.325195][ T3908] bridge_slave_0: left allmulticast mode [ 36.325228][ T3908] bridge_slave_0: left promiscuous mode [ 36.325443][ T3908] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.468166][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.470744][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.471958][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.474242][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.493778][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.572185][ T3908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.606423][ T3908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.643815][ T3908] bond0 (unregistering): Released all slaves [ 36.701634][ T5154] loop3: detected capacity change from 0 to 1024 [ 36.716502][ T5154] EXT4-fs: Ignoring removed bh option [ 36.719809][ T5154] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 36.739047][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.745748][ T5154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.761514][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.761633][ T5110] bridge_slave_0: entered allmulticast mode [ 36.767229][ T5110] bridge_slave_0: entered promiscuous mode [ 36.774989][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.775063][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.775155][ T5110] bridge_slave_1: entered allmulticast mode [ 36.775622][ T5110] bridge_slave_1: entered promiscuous mode [ 36.861109][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.862129][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.865349][ T4676] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.866001][ T4676] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /24/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 36.871120][ T4676] EXT4-fs (loop3): Remounting filesystem read-only [ 36.884239][ T5110] team0: Port device team_slave_0 added [ 36.886219][ T5110] team0: Port device team_slave_1 added [ 36.903634][ T4676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.964988][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.965013][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.965394][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.979689][ T4355] 8021q: adding VLAN 0 to HW filter on device eth0 [ 36.991266][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.991296][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.991311][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.081863][ T5110] hsr_slave_0: entered promiscuous mode [ 37.082200][ T5110] hsr_slave_1: entered promiscuous mode [ 37.082703][ T5110] debugfs: 'hsr0' already exists in 'hsr' [ 37.082713][ T5110] Cannot create hsr debugfs directory [ 37.130151][ T3908] hsr_slave_0: left promiscuous mode [ 37.131627][ T3908] hsr_slave_1: left promiscuous mode [ 37.133169][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.134683][ T3908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.136868][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.138371][ T3908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.150402][ T3908] veth1_macvtap: left promiscuous mode [ 37.150449][ T3908] veth0_macvtap: left promiscuous mode [ 37.150488][ T3908] veth1_vlan: left promiscuous mode [ 37.150520][ T3908] veth0_vlan: left promiscuous mode [ 37.281413][ T3908] team0 (unregistering): Port device team_slave_1 removed [ 37.285536][ T3908] team0 (unregistering): Port device team_slave_0 removed [ 37.369977][ T4683] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 37.534870][ T4683] Bluetooth: hci0: unexpected event for opcode 0x8c11 [ 37.589260][ T4355] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.618689][ T5110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.629414][ T5110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.638755][ T5110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.644087][ T5110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.654309][ T5110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.666478][ T5110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.673178][ T4683] Bluetooth: hci2: command tx timeout [ 37.703440][ T5110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.713490][ T5110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.804566][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.806315][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.807821][ T5143] bridge_slave_0: entered allmulticast mode [ 37.809767][ T5143] bridge_slave_0: entered promiscuous mode [ 37.821086][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.822646][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.824368][ T5143] bridge_slave_1: entered allmulticast mode [ 37.838785][ T5143] bridge_slave_1: entered promiscuous mode [ 37.855632][ T30] audit: type=1326 audit(37.850:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5266 comm="syz.1.144" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86377a28 code=0x0 [ 37.886056][ T5143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.889943][ T5143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.952074][ T3908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.966857][ T5278] loop2: detected capacity change from 0 to 4096 [ 37.968647][ T5278] EXT4-fs: inline encryption not supported [ 37.971877][ T5278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.971909][ T5278] EXT4-fs (loop2): Test dummy encryption mode enabled [ 37.979073][ T5278] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 37.979152][ T5278] System zones: 0-5 [ 37.985700][ T5143] team0: Port device team_slave_0 added [ 37.987805][ T5143] team0: Port device team_slave_1 added [ 37.988223][ T5278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.995919][ T5278] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 38.000408][ T5281] netlink: 'syz.3.148': attribute type 30 has an invalid length. [ 38.044788][ T4355] 8021q: adding VLAN 0 to HW filter on device eth2 [ 38.050939][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.051391][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.051436][ T5143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.058478][ T5143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.058487][ T5143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.058500][ T5143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.073268][ T4683] Bluetooth: hci3: command tx timeout [ 38.073304][ T4683] Bluetooth: hci1: command tx timeout [ 38.079384][ T3908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.085192][ T5281] netlink: 'syz.3.148': attribute type 30 has an invalid length. [ 38.101371][ T5143] hsr_slave_0: entered promiscuous mode [ 38.103182][ T5143] hsr_slave_1: entered promiscuous mode [ 38.104507][ T5143] debugfs: 'hsr0' already exists in 'hsr' [ 38.105582][ T5143] Cannot create hsr debugfs directory [ 38.151324][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.171216][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.186590][ T3908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.191412][ T4667] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.217296][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.217339][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.236655][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.236699][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.291946][ T3908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.304571][ T4355] 8021q: adding VLAN 0 to HW filter on device eth3 [ 38.562992][ T50] Bluetooth: hci4: command tx timeout [ 38.564900][ T3908] bridge_slave_1: left allmulticast mode [ 38.564937][ T3908] bridge_slave_1: left promiscuous mode [ 38.565034][ T3908] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.567933][ T3908] bridge_slave_0: left allmulticast mode [ 38.567946][ T3908] bridge_slave_0: left promiscuous mode [ 38.568032][ T3908] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.709787][ T3908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.716357][ T3908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.753874][ T3908] bond0 (unregistering): Released all slaves [ 38.830824][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.860971][ T5337] loop1: detected capacity change from 0 to 128 [ 38.882728][ T5337] syz.1.158: attempt to access beyond end of device [ 38.882728][ T5337] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 38.884205][ T5337] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 38.884257][ T5337] syz.1.158: attempt to access beyond end of device [ 38.884257][ T5337] loop1: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 38.884273][ T5337] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 38.884296][ T5337] syz.1.158: attempt to access beyond end of device [ 38.884296][ T5337] loop1: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 38.884307][ T5337] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 38.884333][ T5337] syz.1.158: attempt to access beyond end of device [ 38.884333][ T5337] loop1: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 38.884343][ T5337] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 38.884364][ T5337] syz.1.158: attempt to access beyond end of device [ 38.884364][ T5337] loop1: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 38.884374][ T5337] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 38.884403][ T5337] syz.1.158: attempt to access beyond end of device [ 38.884403][ T5337] loop1: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 38.884414][ T5337] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 38.884434][ T5337] syz.1.158: attempt to access beyond end of device [ 38.884434][ T5337] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 38.884444][ T5337] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 38.884463][ T5337] syz.1.158: attempt to access beyond end of device [ 38.884463][ T5337] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 38.884473][ T5337] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 38.884494][ T5337] syz.1.158: attempt to access beyond end of device [ 38.884494][ T5337] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 38.884503][ T5337] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 38.884523][ T5337] syz.1.158: attempt to access beyond end of device [ 38.884523][ T5337] loop1: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 38.884532][ T5337] Buffer I/O error on dev loop1, logical block 145, lost async page write [ 39.018046][ T5110] veth0_vlan: entered promiscuous mode [ 39.021415][ T5110] veth1_vlan: entered promiscuous mode [ 39.031580][ T5110] veth0_macvtap: entered promiscuous mode [ 39.080204][ T5298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.109453][ T5110] veth1_macvtap: entered promiscuous mode [ 39.112012][ T5143] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 39.127559][ T5143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.127895][ T5143] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 39.130124][ T5143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.135240][ T5143] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 39.138854][ T5143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.140997][ T5143] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 39.144028][ T5143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.189240][ T3908] hsr_slave_0: left promiscuous mode [ 39.189804][ T5361] netlink: 'syz.3.165': attribute type 1 has an invalid length. [ 39.192708][ T3908] hsr_slave_1: left promiscuous mode [ 39.195977][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.197680][ T3908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.200177][ T3908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.202062][ T3908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.207583][ T3908] veth1_macvtap: left promiscuous mode [ 39.209056][ T3908] veth0_macvtap: left promiscuous mode [ 39.210416][ T3908] veth1_vlan: left promiscuous mode [ 39.210447][ T3908] veth0_vlan: left promiscuous mode [ 39.343444][ T3908] team0 (unregistering): Port device team_slave_1 removed [ 39.347632][ T3908] team0 (unregistering): Port device team_slave_0 removed [ 39.414758][ T5367] gretap1: entered allmulticast mode [ 39.417239][ T5367] bond1: (slave gretap1): making interface the new active one [ 39.419307][ T5367] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 39.422012][ T4355] 8021q: adding VLAN 0 to HW filter on device eth4 [ 39.439914][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.446181][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.461689][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.468473][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.468528][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.468559][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.502886][ T5143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.515005][ T5143] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.531568][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.531615][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.548440][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.548485][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.550745][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.550756][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.578132][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.578168][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.671366][ T5402] loop5: detected capacity change from 0 to 128 [ 39.695257][ T5402] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.736741][ T5110] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.764648][ T50] Bluetooth: hci2: command tx timeout [ 39.835552][ T4355] 8021q: adding VLAN 0 to HW filter on device eth5 [ 39.868868][ T5143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.027662][ T5143] veth0_vlan: entered promiscuous mode [ 40.036621][ T5143] veth1_vlan: entered promiscuous mode [ 40.058811][ T5143] veth0_macvtap: entered promiscuous mode [ 40.062387][ T5143] veth1_macvtap: entered promiscuous mode [ 40.088280][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.094351][ T5143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.099922][ T15] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.099969][ T15] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.099990][ T15] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.100004][ T15] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.123065][ T4355] 8021q: adding VLAN 0 to HW filter on device eth7 [ 40.148703][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.148729][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.169191][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.169219][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.260953][ C1] vcan0: j1939_tp_rxtimer: 0x000000004295ebeb: rx timeout, send abort [ 40.376508][ T4355] 8021q: adding VLAN 0 to HW filter on device eth6 [ 40.632964][ T50] Bluetooth: hci4: command tx timeout [ 40.684820][ T5518] loop6: detected capacity change from 0 to 1024 [ 40.705643][ T5518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.729630][ T5518] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.195: bg 0: block 112: padding at end of block bitmap is not set [ 40.759852][ T40] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm kworker/u8:3: lblock 3 mapped to illegal pblock 3 (length 3) [ 40.763495][ C1] vcan0: j1939_tp_rxtimer: 0x000000004bfcbae2: rx timeout, send abort [ 40.763525][ C1] vcan0: j1939_tp_rxtimer: 0x000000004295ebeb: abort rx timeout. Force session deactivation [ 40.769978][ T40] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 40.770028][ T40] EXT4-fs (loop6): This should not happen!! Data will be lost [ 40.770028][ T40] [ 40.776951][ T3908] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 5) [ 40.782938][ T3908] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 40.783714][ T3908] EXT4-fs (loop6): This should not happen!! Data will be lost [ 40.783714][ T3908] [ 40.819438][ T5143] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.820227][ T5143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.916135][ T5527] batman_adv: batadv0: Adding interface: dummy0 [ 40.916174][ T5527] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.916203][ T5527] batman_adv: batadv0: Interface activated: dummy0 [ 40.939423][ T5527] batadv0: mtu less than device minimum [ 40.941389][ T5527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.943162][ T5527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.944845][ T5527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.946521][ T5527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.948197][ T5527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.949882][ T5527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.951567][ T5527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.953258][ T5527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.954930][ T5527] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.983497][ T5529] __nla_validate_parse: 3 callbacks suppressed [ 40.983531][ T5529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 40.983760][ T5529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 41.015692][ T5535] loop1: detected capacity change from 0 to 128 [ 41.016159][ T5535] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.171751][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.210'. [ 41.196243][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.196303][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.196324][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.196341][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.197837][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.210'. [ 41.263573][ C1] vcan0: j1939_tp_rxtimer: 0x000000004bfcbae2: abort rx timeout. Force session deactivation [ 41.483344][ T5590] ªªªªªª: renamed from vlan0 (while UP) [ 41.852985][ T50] Bluetooth: hci2: command tx timeout [ 41.971729][ T5604] input: syz0 as /devices/virtual/input/input2 [ 41.975885][ T5604] input: failed to attach handler leds to device input2, error: -6 [ 42.430087][ T5630] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 42.454001][ T5636] binder: 5635:5636 got reply transaction with no transaction stack [ 42.455818][ T5636] binder: 5635:5636 transaction reply to 0:0 failed 3/29201/-71, code 0 size 0-0 line 3139 [ 42.526012][ T5645] binder: tried to use weak ref as strong ref [ 42.526044][ T5645] binder: 5641:5645 Acquire 1 refcount change on invalid ref 0 ret -22 [ 42.526861][ T5645] binder: 5641:5645 got transaction to invalid handle, 1 [ 42.526890][ T5645] binder: 5641:5645 cannot find target node [ 42.526916][ T5645] binder: 5641:5645 transaction call to 0:0 failed 6/29201/-22, code 0 size 72-24 line 3236 [ 42.528367][ T4427] binder: undelivered TRANSACTION_ERROR: 29201 [ 42.557234][ T5649] loop3: detected capacity change from 0 to 128 [ 42.644670][ T4427] IPVS: starting estimator thread 0... [ 42.653919][ T5659] tipc: Started in network mode [ 42.653956][ T5659] tipc: Node identity ac14140f, cluster identity 4711 [ 42.654176][ T5659] tipc: New replicast peer: 255.255.255.255 [ 42.654397][ T5659] tipc: Enabled bearer , priority 10 [ 42.721505][ T50] Bluetooth: hci4: command tx timeout [ 42.733018][ T5660] IPVS: using max 58 ests per chain, 139200 per kthread [ 42.774554][ T5666] netlink: 24 bytes leftover after parsing attributes in process `syz.6.252'. [ 43.190375][ T5681] loop1: detected capacity change from 0 to 512 [ 43.205970][ T5681] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.206005][ T5681] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 43.206024][ T5681] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.259: Corrupt directory, running e2fsck is recommended [ 43.206961][ T5681] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 43.207353][ T5681] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.259: corrupted in-inode xattr: e_name out of bounds [ 43.207421][ T5681] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.207833][ T5681] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.259: couldn't read orphan inode 15 (err -117) [ 43.207874][ T5681] loop1: lost filesystem error report for type 5 error -117 [ 43.208454][ T5681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.218153][ C1] Unknown status report in ack skb [ 43.255752][ T5681] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.259494][ T5681] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 43.261726][ T5681] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.259: Corrupt directory, running e2fsck is recommended [ 43.269710][ T5681] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.269761][ T5681] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 43.269778][ T5681] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.259: Corrupt directory, running e2fsck is recommended [ 43.282030][ T5681] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.283307][ T5681] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 43.283332][ T5681] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.259: Corrupt directory, running e2fsck is recommended [ 43.287309][ T5681] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 43.316645][ T4763] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.316695][ T4763] binder: undelivered death notification, 0000000000000000 [ 43.344674][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.360325][ T5700] netlink: 20 bytes leftover after parsing attributes in process `syz.6.266'. [ 43.384641][ T5700] : entered promiscuous mode [ 43.384669][ T5700] : entered allmulticast mode [ 43.387168][ T5700] netlink: 20 bytes leftover after parsing attributes in process `syz.6.266'. [ 43.435995][ T30] audit: type=1400 audit(43.430:4): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=5707 comm="syz.6.269" name="file1" dev="tmpfs" ino=144 [ 43.436190][ T30] audit: type=1400 audit(43.430:5): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=5707 comm="syz.6.269" name="file1" dev="tmpfs" ino=144 [ 43.436267][ T30] audit: type=1400 audit(43.430:6): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=5707 comm="syz.6.269" name="file1" dev="tmpfs" ino=144 [ 43.436606][ T30] audit: type=1400 audit(43.430:7): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=5707 comm="syz.6.269" name="file1" dev="tmpfs" ino=144 [ 43.436678][ T30] audit: type=1400 audit(43.430:8): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lowerdir" requested=r pid=5707 comm="syz.6.269" name="file1" dev="tmpfs" ino=144 [ 43.436719][ T5708] evm: overlay not supported [ 43.437084][ T30] audit: type=1400 audit(43.430:9): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="lowerdir" requested=r pid=5707 comm="syz.6.269" path="/file1" dev="tmpfs" ino=144 [ 43.450939][ T5710] input: syz0 as /devices/virtual/input/input3 [ 43.590265][ T5727] loop1: detected capacity change from 0 to 512 [ 43.597093][ T5727] EXT4-fs: Ignoring removed bh option [ 43.600401][ T5727] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c11c, mo2=0002] [ 43.600548][ T5727] System zones: 1-12 [ 43.604479][ T5727] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.279: iget: bad extra_isize 957 (inode size 256) [ 43.604513][ T5727] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.604700][ T5727] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.279: couldn't read orphan inode 15 (err -117) [ 43.604719][ T5727] loop1: lost filesystem error report for type 5 error -117 [ 43.605761][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.633969][ T5727] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 9: comm syz.1.279: lblock 1 mapped to illegal pblock 9 (length 1) [ 43.646354][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.773995][ T4427] tipc: Node number set to 2886997007 [ 43.834577][ T5741] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 43.913514][ T4683] Bluetooth: hci2: command tx timeout [ 44.028475][ T5753] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 44.028698][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.032046][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.032115][ T5753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.038271][ T5753] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 44.088208][ T5757] loop3: detected capacity change from 0 to 128 [ 44.090153][ T5757] ext2: Unknown parameter 'subj_type' [ 44.102163][ T5757] loop3: detected capacity change from 0 to 128 [ 44.323798][ T5778] netlink: 9 bytes leftover after parsing attributes in process `syz.5.300'. [ 44.334092][ T5778] netlink: 9 bytes leftover after parsing attributes in process `syz.5.300'. [ 44.522222][ T5792] loop2: detected capacity change from 0 to 512 [ 44.545900][ T5794] loop6: detected capacity change from 0 to 512 [ 44.546050][ T5792] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 44.558408][ T5794] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 44.564642][ T5794] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 44.564802][ T5794] EXT4-fs (loop6): orphan cleanup on readonly fs [ 44.569592][ T5794] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 44.569624][ T5794] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 44.575248][ T5794] EXT4-fs (loop6): 1 orphan inode deleted [ 44.575853][ T5794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.709181][ T5806] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 44.709213][ T5806] overlayfs: failed to set xattr on upper [ 44.709234][ T5806] overlayfs: ...falling back to redirect_dir=nofollow. [ 44.709246][ T5806] overlayfs: ...falling back to index=off. [ 44.709256][ T5806] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 44.743705][ T5143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.793254][ T4683] Bluetooth: hci4: command tx timeout [ 44.914602][ T5833] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 44.940784][ T5825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.320'. [ 45.011845][ T5842] netlink: 'syz.5.327': attribute type 8 has an invalid length. [ 45.015647][ T5842] veth1_to_team: entered promiscuous mode [ 45.016167][ T5842] gretap0: entered promiscuous mode [ 45.016871][ T5842] veth1_to_team: left promiscuous mode [ 45.018032][ T5842] gretap0: left promiscuous mode [ 45.043875][ T5844] syzkaller1: entered promiscuous mode [ 45.043903][ T5844] syzkaller1: entered allmulticast mode [ 45.129253][ T5848] loop6: detected capacity change from 0 to 512 [ 45.174257][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.174661][ T5851] bridge_slave_1: left allmulticast mode [ 45.174678][ T5851] bridge_slave_1: left promiscuous mode [ 45.174759][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.178808][ T5851] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 45.206216][ T5854] xfrm0: entered allmulticast mode [ 45.365467][ T5870] loop6: detected capacity change from 0 to 128 [ 45.368228][ T5870] EXT4-fs: Ignoring removed nobh option [ 45.374266][ T5870] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.387979][ T5874] bridge0: port 3(syz_tun) entered blocking state [ 45.389648][ T5874] bridge0: port 3(syz_tun) entered disabled state [ 45.391380][ T5874] syz_tun: entered allmulticast mode [ 45.393650][ T5874] syz_tun: entered promiscuous mode [ 45.395171][ T5874] bridge0: port 3(syz_tun) entered blocking state [ 45.395225][ T5874] bridge0: port 3(syz_tun) entered forwarding state [ 45.407394][ T5143] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.504556][ T15] nci: nci_ntf_packet: unknown ntf opcode 0x5 [ 45.522976][ T4683] Bluetooth: hci0: command 0x0419 tx timeout [ 45.682326][ T5884] loop1: detected capacity change from 0 to 512 [ 45.688185][ T5884] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.688215][ T5884] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.700242][ T5884] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.343: invalid indirect mapped block 4294967295 (level 0) [ 45.700292][ T5884] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 45.701253][ T5884] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.343: invalid indirect mapped block 4294967295 (level 1) [ 45.701275][ T5884] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 45.702962][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 45.702981][ C0] EXT4-fs (loop1): initial error at time 45: ext4_free_branches:1023: inode 16 [ 45.702997][ C0] EXT4-fs (loop1): last error at time 45: ext4_free_branches:1023: inode 16 [ 45.704673][ T5884] EXT4-fs (loop1): 1 orphan inode deleted [ 45.704687][ T5884] EXT4-fs (loop1): 1 truncate cleaned up [ 45.705171][ T5884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.738593][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.836877][ T5887] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 46.002577][ T5905] loop3: detected capacity change from 0 to 8192 [ 46.045150][ T5905] loop3: p1 p2 [ 46.045186][ T5905] loop3: partition table partially beyond EOD, truncated [ 46.045292][ T5905] loop3: p1 start 16777216 is beyond EOD, truncated [ 46.045302][ T5905] loop3: p2 size 515840 extends beyond EOD, truncated [ 46.200284][ T5912] Injecting memory failure for pfn 0x137fa7 at process virtual address 0x2010e000 [ 46.208883][ T5912] Memory failure: 0x137fa7: recovery action for clean LRU page: Recovered [ 46.271236][ T5878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.331477][ T5915] __nla_validate_parse: 2 callbacks suppressed [ 46.333024][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.352'. [ 46.531757][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 46.601267][ T5940] input: syz0 as /devices/virtual/input/input4 [ 46.909394][ T5959] syz_tun: entered allmulticast mode [ 46.923063][ T5958] syz_tun: left allmulticast mode [ 47.298961][ T5998] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 47.327122][ T5998] bond1: entered promiscuous mode [ 47.327360][ T5998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.351735][ T5998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.351935][ T5998] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 47.351946][ T5998] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 47.357752][ T5998] bond1: (slave ip6gre1): making interface the new active one [ 47.358879][ T5998] ip6gre1: entered promiscuous mode [ 47.360127][ T5998] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 47.817922][ T6045] gre0: entered promiscuous mode [ 47.817955][ T6045] gre0: entered allmulticast mode [ 48.078795][ T6076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.099756][ T6082] mmap: syz.1.423 (6082) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.145055][ T4667] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.159270][ T6088] netlink: 'syz.5.424': attribute type 4 has an invalid length. [ 48.288670][ T6105] netlink: 'syz.6.434': attribute type 1 has an invalid length. [ 48.292472][ T6107] set_capacity_and_notify: 5 callbacks suppressed [ 48.294233][ T6107] loop3: detected capacity change from 0 to 4096 [ 48.301424][ T6107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.360845][ T4676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.499221][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 48.619005][ T6137] net_ratelimit: 12 callbacks suppressed [ 48.619043][ T6137] Set syz1 is full, maxelem 14 reached [ 48.692436][ T3908] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.692482][ T3908] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.692500][ T3908] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.692517][ T3908] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.709329][ T6147] loop3: detected capacity change from 0 to 128 [ 48.712369][ T6147] FAT-fs (loop3): bogus logical sector size 0 [ 48.712428][ T6147] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 48.712439][ T6147] FAT-fs (loop3): Can't find a valid FAT filesystem [ 48.779041][ T6151] loop3: detected capacity change from 0 to 2048 [ 48.807135][ T6151] loop3: p1 p3 p4 [ 48.807135][ T6151] p1: [ 48.810511][ T6151] loop3: p4 size 589824 extends beyond EOD, truncated [ 48.925935][ T6159] binder: 6156:6159 ioctl c0306201 20000000 returned -14 [ 49.063848][ T6161] loop5: detected capacity change from 0 to 512 [ 49.066236][ T6161] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 49.069663][ T6161] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.458: bad orphan inode 131083 [ 49.072365][ T6161] loop5: lost filesystem error report for type 5 error -117 [ 49.073482][ T6161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.083826][ T6161] syz.5.458 (pid 6161) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 49.096602][ T5110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.164246][ T3908] Bluetooth: hci5: Frame reassembly failed (-84) [ 49.420909][ T6194] netlink: 'syz.2.467': attribute type 2 has an invalid length. [ 49.481842][ T6198] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 49.843477][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.481'. [ 49.961225][ T6254] loop2: detected capacity change from 0 to 512 [ 49.969611][ T6254] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.969658][ T6254] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 49.969681][ T6254] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.486: Corrupt directory, running e2fsck is recommended [ 49.972441][ T6254] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 49.981367][ T6254] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.486: corrupted in-inode xattr: e_name out of bounds [ 49.981406][ T6254] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.990992][ T6254] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.486: couldn't read orphan inode 15 (err -117) [ 49.991034][ T6254] loop2: lost filesystem error report for type 5 error -117 [ 49.992935][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 49.992960][ C0] EXT4-fs (loop2): initial error at time 49: ext4_iget_extra_inode:5128: inode 15 [ 49.993000][ C0] EXT4-fs (loop2): last error at time 49: ext4_orphan_get:1402 [ 50.002182][ T6254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.008752][ T6254] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 50.020107][ T4667] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.089049][ T6272] trusted_key: syz.3.490 sent an empty control message without MSG_MORE. [ 50.151034][ T6279] loop1: detected capacity change from 0 to 4096 [ 50.177713][ T6279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.194612][ T6292] loop6: detected capacity change from 0 to 512 [ 50.194952][ T6292] EXT4-fs: Ignoring removed orlov option [ 50.194966][ T6292] EXT4-fs: Ignoring removed i_version option [ 50.194974][ T6292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.200621][ T6279] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.493: corrupted inode contents [ 50.204212][ T6279] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.493: mark_inode_dirty error [ 50.204702][ T6279] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.493: corrupted inode contents [ 50.205163][ T6292] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 50.205174][ T6292] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 50.205268][ T6292] EXT4-fs (loop6): orphan cleanup on readonly fs [ 50.205294][ T6292] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 50.205325][ T6292] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.205337][ T6292] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 50.205764][ T6279] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.493: mark_inode_dirty error [ 50.205949][ T6279] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.493: corrupted inode contents [ 50.206088][ T6279] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.493: mark_inode_dirty error [ 50.206248][ T6279] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.493: corrupted inode contents [ 50.206846][ T6292] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.496: bg 0: block 40: padding at end of block bitmap is not set [ 50.206867][ T6292] loop6: lost filesystem error report for type 5 error -117 [ 50.207128][ T6279] EXT4-fs error (device loop1): ext4_truncate:4690: inode #15: comm syz.1.493: mark_inode_dirty error [ 50.207761][ T6279] EXT4-fs error (device loop1) in ext4_setattr:6120: Corrupt filesystem [ 50.208748][ T6292] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 50.208766][ T6292] loop6: lost filesystem error report for type 5 error -117 [ 50.209237][ T6292] EXT4-fs (loop6): 1 truncate cleaned up [ 50.217325][ T6279] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.493: corrupted inode contents [ 50.252832][ T6292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.259324][ T6292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.265081][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.499127][ T6323] loop1: detected capacity change from 0 to 2048 [ 50.524001][ T6323] loop1: p1 < > p4 < > [ 50.524025][ T6323] loop1: partition table partially beyond EOD, truncated [ 50.528455][ T6323] loop1: p4 start 42180 is beyond EOD, truncated [ 50.667470][ T50] block nbd2: Receive control failed (result -107) [ 50.703657][ T6332] nbd2: detected capacity change from 0 to 10 [ 50.754072][ T6332] nbd2: detected capacity change from 10 to 8589934592 [ 50.756489][ T4660] block nbd2: Dead connection, failed to find a fallback [ 50.756517][ T4660] block nbd2: shutting down sockets [ 50.756549][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.756568][ T4660] buffer_io_error: 20 callbacks suppressed [ 50.756578][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.756652][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.756669][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.756711][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.756724][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.756764][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.756778][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.756817][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.756830][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.756872][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.756885][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.756927][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.756940][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.756980][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.756992][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.757017][ T4660] ldm_validate_partition_table(): Disk read failed. [ 50.757039][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.757052][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.757096][ T4660] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.757109][ T4660] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.757212][ T4660] Dev nbd2: unable to read RDB block 0 [ 50.757362][ T4660] nbd2: unable to read partition table [ 50.783688][ T4660] ldm_validate_partition_table(): Disk read failed. [ 50.783816][ T4660] Dev nbd2: unable to read RDB block 0 [ 50.783962][ T4660] nbd2: unable to read partition table [ 51.203183][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 51.487320][ T4683] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 52.020448][ T30] audit: type=1326 audit(52.010:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6405 comm="syz.6.534" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0577a28 code=0x0 [ 52.051637][ T6409] binder: 6408:6409 ioctl c0306201 200003c0 returned -14 [ 52.233629][ T6420] netlink: 'syz.5.540': attribute type 4 has an invalid length. [ 52.235630][ T6420] netlink: 'syz.5.540': attribute type 4 has an invalid length. [ 53.154600][ T6284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.346693][ T6489] vfat: Unknown parameter '017777777777777777777770x0000000000000000' [ 53.482311][ T6503] netlink: 'syz.2.555': attribute type 13 has an invalid length. [ 53.482342][ T6503] netlink: 'syz.2.555': attribute type 17 has an invalid length. [ 53.579163][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.560'. [ 53.611341][ T6503] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 53.630367][ T6503] bond1: left promiscuous mode [ 53.631695][ T6503] ip6gre1: left promiscuous mode [ 53.657551][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.560'. [ 53.832565][ T6521] set_capacity_and_notify: 1 callbacks suppressed [ 53.832615][ T6521] loop1: detected capacity change from 0 to 1024 [ 53.861657][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.995153][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.602608][ T6619] loop3: detected capacity change from 0 to 128 [ 54.604516][ T6615] netlink: 'syz.2.590': attribute type 9 has an invalid length. [ 54.604527][ T6615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.590'. [ 54.610686][ T6619] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.701809][ T6631] loop3: detected capacity change from 0 to 128 [ 54.707076][ T6631] vfat: Bad value for 'shortname' [ 54.828269][ T6646] loop3: detected capacity change from 0 to 512 [ 54.834859][ T6646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.840915][ T6646] EXT4-fs (loop3): 1 truncate cleaned up [ 54.841387][ T6646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.864582][ T6646] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.3.596: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 54.869174][ T6646] EXT4-fs error (device loop3) in ext4_delete_entry:2744: Corrupt filesystem [ 54.871139][ T6646] EXT4-fs warning (device loop3): ext4_rename_delete:3739: inode #2: comm syz.3.596: Deleting old file: nlink 5, error=-117 [ 54.908273][ T4676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.911972][ T6653] loop2: detected capacity change from 0 to 1024 [ 54.943258][ T6653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.961609][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 54.988058][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.051889][ T4667] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.132523][ T6688] loop2: detected capacity change from 0 to 256 [ 55.156655][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.156868][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.157631][ T6693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.157803][ T6693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.182524][ T6698] loop1: detected capacity change from 0 to 512 [ 55.186140][ T6698] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 55.202119][ T6698] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 55.202250][ T6698] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.207940][ T6698] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 55.207975][ T6698] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 55.208237][ T6698] EXT4-fs (loop1): 1 orphan inode deleted [ 55.208667][ T6698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.284878][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.313703][ T6711] loop1: detected capacity change from 0 to 512 [ 55.329149][ T6711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.348880][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.367779][ T6709] block nbd5: shutting down sockets [ 55.375000][ T6717] loop6: detected capacity change from 0 to 512 [ 55.383781][ T6717] EXT4-fs: Ignoring removed bh option [ 55.383823][ T6717] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.400992][ T6717] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 55.406472][ T6717] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 55.406606][ T6717] EXT4-fs (loop6): orphan cleanup on readonly fs [ 55.411222][ T6717] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 55.411278][ T6717] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 55.411704][ T6717] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.613: Failed to acquire dquot type 1 [ 55.411719][ T6717] loop6: lost filesystem error report for type 5 error -5 [ 55.417415][ T6717] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.613: Invalid block bitmap block 0 in block_group 0 [ 55.417433][ T6717] loop6: lost filesystem error report for type 5 error -117 [ 55.418481][ T6717] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.613: Invalid block bitmap block 0 in block_group 0 [ 55.418498][ T6717] loop6: lost filesystem error report for type 5 error -117 [ 55.418998][ T6717] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.613: Invalid block bitmap block 0 in block_group 0 [ 55.419013][ T6717] loop6: lost filesystem error report for type 5 error -117 [ 55.419191][ T6717] Quota error (device loop6): write_blk: dquota write failed [ 55.419227][ T6717] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 55.419240][ T6717] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.613: Failed to acquire dquot type 1 [ 55.419249][ T6717] loop6: lost filesystem error report for type 5 error -28 [ 55.419620][ T6717] Quota error (device loop6): write_blk: dquota write failed [ 55.419658][ T6717] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 55.419671][ T6717] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.613: Failed to acquire dquot type 1 [ 55.419680][ T6717] loop6: lost filesystem error report for type 5 error -28 [ 55.420351][ T6717] EXT4-fs (loop6): 1 orphan inode deleted [ 55.422933][ C0] EXT4-fs (loop6): error count since last fsck: 6 [ 55.422947][ C0] EXT4-fs (loop6): last error at time 55: ext4_acquire_dquot:7034 [ 55.461975][ T6717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.466396][ T6709] block nbd5: NBD_DISCONNECT [ 55.466538][ T6709] block nbd5: Send disconnect failed -32 [ 55.732833][ T6747] loop3: detected capacity change from 0 to 1024 [ 55.735930][ T6747] EXT4-fs: Ignoring removed bh option [ 55.739357][ T6747] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 55.754049][ T6747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.808143][ T6747] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.623: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 55.818369][ T6747] EXT4-fs (loop3): Remounting filesystem read-only [ 55.869811][ T4676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.926839][ T6755] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.932651][ T6755] EXT4-fs (loop3): 1 truncate cleaned up [ 55.935632][ T6755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.976966][ T4676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.220135][ T5143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.440072][ T6732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.775078][ T6804] tipc: Failed to remove unknown binding: 66,1,1/0:2526185513/2526185515 [ 56.777410][ T6804] tipc: Failed to remove unknown binding: 66,1,1/0:2526185513/2526185515 [ 56.951569][ C0] vcan0: j1939_tp_rxtimer: 0x00000000149e84f0: rx timeout, send abort [ 57.071140][ T6812] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 57.079964][ T6812] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 57.081605][ T6812] FAT-fs (loop3): Filesystem has been set read-only [ 57.084813][ T39] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 57.119176][ T6812] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 57.451624][ C0] vcan0: j1939_tp_rxtimer: 0x00000000149e84f0: abort rx timeout. Force session deactivation [ 57.451776][ C0] vcan0: j1939_tp_rxtimer: 0x0000000042ed6309: rx timeout, send abort [ 57.720690][ T6842] netlink: 'syz.5.661': attribute type 1 has an invalid length. [ 57.951817][ C0] vcan0: j1939_tp_rxtimer: 0x0000000042ed6309: abort rx timeout. Force session deactivation [ 57.975133][ T6855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.037184][ T6861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 58.049237][ T4667] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 58.052035][ T4667] EXT4-fs (loop2): Remounting filesystem read-only [ 58.071381][ T4667] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.095266][ T5110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 58.149471][ T6874] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.272553][ T6870] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.333540][ T6880] netlink: 'syz.3.676': attribute type 16 has an invalid length. [ 58.336126][ T6880] netlink: 'syz.3.676': attribute type 17 has an invalid length. [ 58.356894][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.356945][ T6880] bridge0: port 1(bridge_slave_0) entered listening state [ 58.378500][ T6880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.380622][ T6880] gretap1: left allmulticast mode [ 58.387865][ T6870] bridge0: port 3(syz_tun) entered disabled state [ 58.403518][ T6870] syz_tun (unregistering): left allmulticast mode [ 58.403548][ T6870] syz_tun (unregistering): left promiscuous mode [ 58.403587][ T6870] bridge0: port 3(syz_tun) entered disabled state [ 58.444738][ T6884] netlink: 84 bytes leftover after parsing attributes in process `syz.3.678'. [ 58.486078][ T6889] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 58.487939][ T6889] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 58.517163][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.682'. [ 58.519865][ T6891] netlink: 3 bytes leftover after parsing attributes in process `syz.1.682'. [ 58.546229][ T6895] EXT4-fs: Ignoring removed oldalloc option [ 58.550857][ T6895] EXT4-fs (loop3): 1 truncate cleaned up [ 58.552769][ T6895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.601163][ T4676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.601639][ T15] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.689868][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.690601][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.690927][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.691663][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.691904][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.700403][ T15] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.808700][ T15] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.920739][ T15] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.018832][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.018927][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.019004][ T6902] bridge_slave_0: entered allmulticast mode [ 59.019452][ T6902] bridge_slave_0: entered promiscuous mode [ 59.020326][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.020377][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.020465][ T6902] bridge_slave_1: entered allmulticast mode [ 59.020866][ T6902] bridge_slave_1: entered promiscuous mode [ 59.028824][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.029752][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.036298][ T6902] team0: Port device team_slave_0 added [ 59.037109][ T6902] team0: Port device team_slave_1 added [ 59.044203][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.044228][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.044254][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.044789][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.044800][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.044816][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.055191][ T6902] hsr_slave_0: entered promiscuous mode [ 59.055526][ T6902] hsr_slave_1: entered promiscuous mode [ 59.055721][ T6902] debugfs: 'hsr0' already exists in 'hsr' [ 59.055730][ T6902] Cannot create hsr debugfs directory [ 59.235807][ T6936] set_capacity_and_notify: 7 callbacks suppressed [ 59.237340][ T6936] loop5: detected capacity change from 0 to 1024 [ 59.241389][ T6936] EXT4-fs: Ignoring removed bh option [ 59.243348][ T6936] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 59.255594][ T6936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.275532][ T6936] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.696: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 59.286176][ T6936] EXT4-fs (loop5): Remounting filesystem read-only [ 59.287657][ T6936] overlayfs: cleanup of 'work/#51' failed (-30) [ 59.289982][ T6936] overlayfs: Failed to link whiteout - disabling whiteout inode sharing(nlink=2, err=4294967266) [ 59.292473][ T6936] overlayfs: cleanup of 'work/#50' failed (-30) [ 59.306540][ T5110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.364564][ T15] bridge_slave_1: left allmulticast mode [ 59.364605][ T15] bridge_slave_1: left promiscuous mode [ 59.364722][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.369108][ T15] bridge_slave_0: left allmulticast mode [ 59.369132][ T15] bridge_slave_0: left promiscuous mode [ 59.369240][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.409388][ T6947] loop5: detected capacity change from 0 to 128 [ 59.409812][ T6947] vfat: Bad value for 'gid' [ 59.409836][ T6947] vfat: Bad value for 'gid' [ 59.436566][ T6773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.550592][ T15] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 59.631461][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.654259][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.664623][ T15] bond0 (unregistering): Released all slaves [ 59.667336][ T15] bond1 (unregistering): Released all slaves [ 59.671647][ T6902] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 59.674133][ T6902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.674482][ T6902] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 59.676492][ T6902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.679126][ T6902] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 59.683654][ T6902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.686607][ T6902] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 59.690439][ T6902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.756529][ T6902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.761950][ T6902] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.792377][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.792424][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.798510][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.798553][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.886278][ T6994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.886488][ T6994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.938888][ T4355] 8021q: adding VLAN 0 to HW filter on device eth8 [ 59.991016][ T15] hsr_slave_0: left promiscuous mode [ 59.992239][ T15] hsr_slave_1: left promiscuous mode [ 60.000835][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.000871][ T15] batadv0: mtu less than device minimum [ 60.002532][ T15] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.004200][ T15] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.005841][ T15] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.007479][ T15] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.009130][ T15] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.010770][ T15] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.012404][ T15] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.014054][ T15] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.015684][ T15] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 60.032511][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.036199][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.068658][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.070652][ T15] batman_adv: batadv0: Interface deactivated: dummy0 [ 60.070662][ T15] batman_adv: batadv0: Removing interface: dummy0 [ 60.076362][ T15] veth1_macvtap: left promiscuous mode [ 60.076395][ T15] veth0_macvtap: left promiscuous mode [ 60.076463][ T15] veth1_vlan: left promiscuous mode [ 60.076486][ T15] veth0_vlan: left promiscuous mode [ 60.248113][ T15] team0 (unregistering): Port device team_slave_1 removed [ 60.255833][ T15] team0 (unregistering): Port device team_slave_0 removed [ 60.386288][ T6902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.532529][ T4355] 8021q: adding VLAN 0 to HW filter on device eth9 [ 60.621659][ T6902] veth0_vlan: entered promiscuous mode [ 60.638649][ T6902] veth1_vlan: entered promiscuous mode [ 60.656573][ T7072] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 60.659965][ T6902] veth0_macvtap: entered promiscuous mode [ 60.666546][ T6902] veth1_macvtap: entered promiscuous mode [ 60.669928][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.689456][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.706519][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.706564][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.706595][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.706614][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.713045][ T4683] Bluetooth: hci1: command tx timeout [ 60.783201][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.783236][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.829253][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.829288][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.834123][ T4355] 8021q: adding VLAN 0 to HW filter on device eth10 [ 60.864071][ T7097] netlink: 'syz.5.734': attribute type 1 has an invalid length. [ 60.887275][ T7097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.908190][ T7097] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 61.014605][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 61.014645][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 61.014723][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 61.014733][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 61.051252][ T7131] loop5: detected capacity change from 0 to 512 [ 61.064943][ T7131] EXT4-fs (loop5): Test dummy encryption mode enabled [ 61.064984][ T7131] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 61.071656][ T7131] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.739: bad orphan inode 131083 [ 61.071700][ T7131] loop5: lost filesystem error report for type 5 error -117 [ 61.072936][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 61.072951][ C1] EXT4-fs (loop5): initial error at time 61: ext4_orphan_get:1423 [ 61.072965][ C1] EXT4-fs (loop5): last error at time 61: ext4_orphan_get:1423 [ 61.074896][ T7131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.090408][ T7131] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 61.120613][ T5110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.149268][ T4355] 8021q: adding VLAN 0 to HW filter on device eth11 [ 61.195071][ T7151] loop1: detected capacity change from 0 to 2048 [ 61.197316][ T7151] EXT4-fs: Ignoring removed i_version option [ 61.216181][ T7151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.273833][ T4683] Bluetooth: hci5: command 0x1003 tx timeout [ 61.274267][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 61.349018][ T7174] loop3: detected capacity change from 0 to 512 [ 61.362622][ T7174] EXT4-fs (loop3): 1 truncate cleaned up [ 61.364759][ T7174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.480763][ T4676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.518103][ T7190] loop3: detected capacity change from 0 to 256 [ 61.545261][ T7191] vlan0: entered promiscuous mode [ 61.551214][ T7191] team0: Port device vlan0 added [ 61.781023][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.825776][ T7223] loop6: detected capacity change from 0 to 512 [ 61.867483][ T7227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 61.881365][ T7232] loop1: detected capacity change from 0 to 512 [ 61.883861][ T7232] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 61.989002][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.764'. [ 62.181198][ T7254] loop3: detected capacity change from 0 to 2048 [ 62.290886][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 62.372798][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 62.409191][ T7274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.437028][ T7274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.437810][ T7274] bond1: (slave bond2): Enslaving as an active interface with an up link [ 62.453980][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 62.479008][ T7274] bond1 (unregistering): (slave bond2): Releasing backup interface [ 62.532858][ T7274] bond1 (unregistering): Released all slaves [ 62.793014][ T50] Bluetooth: hci1: command tx timeout [ 62.823944][ T7309] syzkaller1: entered promiscuous mode [ 62.826343][ T7309] syzkaller1: entered allmulticast mode [ 62.870961][ T7315] netlink: 'syz.5.795': attribute type 1 has an invalid length. [ 62.872664][ T7315] netlink: 'syz.5.795': attribute type 4 has an invalid length. [ 62.877165][ T7315] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.795'. [ 62.929560][ T7322] all: renamed from bridge_slave_0 (while UP) [ 63.076790][ T7337] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 63.083555][ T7335] loop5: detected capacity change from 0 to 512 [ 63.098263][ T7337] bond1: (slave geneve2): making interface the new active one [ 63.099952][ T7337] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 63.100199][ T40] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.100235][ T40] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.100265][ T40] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.100286][ T40] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 63.321271][ T7347] syzkaller1: entered promiscuous mode [ 63.321300][ T7347] syzkaller1: entered allmulticast mode [ 63.583446][ T7360] EXT4-fs (loop5): Test dummy encryption mode enabled [ 63.584916][ T7360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.587742][ T7360] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.815: bad orphan inode 131083 [ 63.589790][ T7360] loop5: lost filesystem error report for type 5 error -117 [ 64.107031][ C1] Unknown status report in ack skb [ 64.196233][ T7397] option changes via remount are deprecated (pid=7396 comm=syz.6.828) [ 64.292468][ T7413] set_capacity_and_notify: 1 callbacks suppressed [ 64.292509][ T7413] loop6: detected capacity change from 0 to 128 [ 64.299309][ T7415] netlink: 'syz.1.834': attribute type 8 has an invalid length. [ 64.299340][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 64.321751][ T7415] veth1_to_team: entered promiscuous mode [ 64.322774][ T7415] gretap0: entered promiscuous mode [ 64.342841][ T7415] veth1_to_team: left promiscuous mode [ 64.346719][ T5143] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 64.347075][ T5143] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 64.351811][ T7415] gretap0: left promiscuous mode [ 64.382782][ T7425] netlink: 'syz.5.841': attribute type 2 has an invalid length. [ 64.400536][ T7426] loop7: detected capacity change from 0 to 1024 [ 64.417374][ T7426] EXT4-fs mount: 8 callbacks suppressed [ 64.418198][ T7426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.435219][ T7426] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.842: missing EA_INODE flag [ 64.445324][ T7426] EXT4-fs (loop7): Remounting filesystem read-only [ 64.450312][ T7433] binder: 7432:7433 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 64.450345][ T7433] binder: 7433 RLIMIT_NICE not set [ 64.474597][ T1574] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.475930][ T1574] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.482282][ T9] cfg80211: failed to load regulatory.db [ 64.490227][ T6902] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.503695][ T7433] binder: 7432:7433 ioctl c0306201 20000040 returned -14 [ 64.538698][ T7441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.538894][ T7441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.651067][ T7450] loop1: detected capacity change from 0 to 4096 [ 64.651457][ T7450] EXT4-fs: inline encryption not supported [ 64.654643][ T700] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.654667][ T700] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.660117][ T7450] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.661912][ T7450] EXT4-fs (loop1): Test dummy encryption mode enabled [ 64.670433][ T7450] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c1a8, mo2=0003] [ 64.673266][ T7450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.681775][ T7452] loop5: detected capacity change from 0 to 2048 [ 64.682462][ T7452] EXT4-fs: Ignoring removed i_version option [ 64.701522][ T7452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.764475][ T5110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.781107][ T700] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.781147][ T700] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.799947][ T4666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.838399][ T4683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.840070][ T4683] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.844150][ T4683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.847517][ T4683] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.853442][ T4683] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.854504][ T700] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.854525][ T700] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.873295][ T50] Bluetooth: hci1: command tx timeout [ 64.904622][ T700] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.904669][ T700] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.303136][ T700] bridge_slave_1: left allmulticast mode [ 65.303176][ T700] bridge_slave_1: left promiscuous mode [ 65.303281][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.315871][ T700] bridge_slave_0: left allmulticast mode [ 65.315893][ T700] bridge_slave_0: left promiscuous mode [ 65.315998][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.560837][ T700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.584117][ T700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.603867][ T700] bond0 (unregistering): Released all slaves [ 65.606308][ T700] bond1 (unregistering): Released all slaves [ 65.685385][ T7514] input: syz1 as /devices/virtual/input/input5 [ 65.722411][ T7520] process 'syz.7.875' launched './file1' with NULL argv: empty string added [ 65.812221][ T7536] loop7: detected capacity change from 0 to 512 [ 65.820811][ T7536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.948366][ T6902] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.951269][ T30] audit: type=1326 audit(65.940:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7547 comm="syz.3.882" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b77a28 code=0x0 [ 65.991726][ T4355] 8021q: adding VLAN 0 to HW filter on device eth13 [ 66.104922][ T700] hsr_slave_0: left promiscuous mode [ 66.109096][ T700] hsr_slave_1: left promiscuous mode [ 66.110809][ T700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.112431][ T700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.123756][ T700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.125245][ T700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.137838][ T700] veth1_macvtap: left promiscuous mode [ 66.137888][ T700] veth0_macvtap: left promiscuous mode [ 66.137962][ T700] veth1_vlan: left promiscuous mode [ 66.137990][ T700] veth0_vlan: left promiscuous mode [ 66.144935][ T40] Bluetooth: (null): Invalid header checksum [ 66.245436][ T7583] loop7: detected capacity change from 0 to 1024 [ 66.246508][ T7583] EXT4-fs: Ignoring removed bh option [ 66.246946][ T7583] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 66.261547][ T7583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.296704][ T7583] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.895: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 66.298316][ T7583] EXT4-fs (loop7): Remounting filesystem read-only [ 66.298502][ T7583] overlayfs: cleanup of 'work/#62' failed (-30) [ 66.332419][ T700] team0 (unregistering): Port device team_slave_1 removed [ 66.340943][ T700] team0 (unregistering): Port device team_slave_0 removed [ 66.357334][ T6902] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.457844][ T7598] veth0: entered promiscuous mode [ 66.466864][ T7598] bond0: entered promiscuous mode [ 66.466917][ T7598] bond_slave_0: entered promiscuous mode [ 66.466991][ T7598] bond_slave_1: entered promiscuous mode [ 66.479763][ T7597] bond0: left promiscuous mode [ 66.479795][ T7597] bond_slave_0: left promiscuous mode [ 66.480156][ T7597] bond_slave_1: left promiscuous mode [ 66.483549][ T7597] veth0: left promiscuous mode [ 66.500090][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.500136][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.500214][ T7459] bridge_slave_0: entered allmulticast mode [ 66.502940][ T7459] bridge_slave_0: entered promiscuous mode [ 66.504646][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.505803][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.505880][ T7459] bridge_slave_1: entered allmulticast mode [ 66.508340][ T7459] bridge_slave_1: entered promiscuous mode [ 66.564530][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.575541][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.634111][ T7615] loop7: detected capacity change from 0 to 1024 [ 66.637433][ T7615] EXT4-fs: Ignoring removed bh option [ 66.657292][ T7615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.683336][ T7615] EXT4-fs (loop7): shut down requested (2) [ 66.709468][ T7459] team0: Port device team_slave_0 added [ 66.724185][ T7459] team0: Port device team_slave_1 added [ 66.747309][ T6902] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.752366][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.763026][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.763077][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.763724][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.763757][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.763777][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.791125][ T7459] hsr_slave_0: entered promiscuous mode [ 66.794819][ T7459] hsr_slave_1: entered promiscuous mode [ 66.796172][ T7459] debugfs: 'hsr0' already exists in 'hsr' [ 66.797264][ T7459] Cannot create hsr debugfs directory [ 66.851382][ T7642] loop5: detected capacity change from 0 to 512 [ 66.852328][ T7641] netlink: 'syz.7.910': attribute type 11 has an invalid length. [ 66.852340][ T7641] __nla_validate_parse: 2 callbacks suppressed [ 66.852347][ T7641] netlink: 36 bytes leftover after parsing attributes in process `syz.7.910'. [ 66.862867][ T7642] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.874707][ T50] Bluetooth: hci4: command tx timeout [ 66.886511][ T7642] EXT4-fs (loop5): 1 truncate cleaned up [ 66.887178][ T7642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.936694][ T39] Bluetooth: hci5: Frame reassembly failed (-84) [ 66.953181][ T4683] Bluetooth: hci1: command tx timeout [ 66.981018][ T4355] 8021q: adding VLAN 0 to HW filter on device eth12 [ 66.984646][ T5110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.065738][ T7459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 67.068277][ T7459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.069100][ T7459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 67.071694][ T7459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.072013][ T7459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 67.081830][ T7459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.084925][ T7459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 67.087411][ T7459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.161494][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.188274][ T7459] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.193403][ T3908] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.193450][ T3908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.193992][ T3908] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.194011][ T3908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.220288][ T7459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.240400][ T4355] 8021q: adding VLAN 0 to HW filter on device eth15 [ 67.313783][ T7691] loop1: detected capacity change from 0 to 512 [ 67.470915][ T7706] bridge_slave_0: left allmulticast mode [ 67.475390][ T7706] bridge_slave_0: left promiscuous mode [ 67.475550][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.500679][ T7706] bond0: (slave bridge_slave_1): Releasing backup interface [ 67.520181][ T7706] bond0: (slave bond_slave_0): Releasing backup interface [ 67.535507][ T7706] bond0: (slave bond_slave_1): Releasing backup interface [ 67.569852][ T7706] team0: Port device team_slave_0 removed [ 67.573495][ T7706] team0: Port device team_slave_1 removed [ 67.575543][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.577469][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.580024][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.581789][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.585681][ T7706] net_ratelimit: 30 callbacks suppressed [ 67.587340][ T7706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.596738][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.609050][ T4355] 8021q: adding VLAN 0 to HW filter on device eth14 [ 67.713894][ T7459] veth0_vlan: entered promiscuous mode [ 67.719498][ T7459] veth1_vlan: entered promiscuous mode [ 67.736253][ T7459] veth0_macvtap: entered promiscuous mode [ 67.737894][ T7459] veth1_macvtap: entered promiscuous mode [ 67.747035][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.749964][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.755333][ T15] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.755376][ T15] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.755395][ T15] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.755411][ T15] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.504057][ T7759] overlayfs: upper fs does not support tmpfile. [ 68.953493][ T4670] Bluetooth: hci4: command tx timeout [ 68.954368][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 68.954425][ T4683] Bluetooth: hci5: command 0x1003 tx timeout [ 70.478396][ T7790] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 70.482120][ T7790] team0: Port device dummy0 added [ 70.486985][ T7790] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 70.489508][ T7790] team0: Port device dummy0 removed [ 70.491401][ T7790] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 70.518990][ T7792] loop1: detected capacity change from 0 to 512 [ 70.520346][ T7792] EXT4-fs: Ignoring removed bh option [ 70.520498][ T7792] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.538181][ T7792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.598096][ T7727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.635576][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.635602][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.638913][ T4666] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 70.641565][ T4666] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 70.663403][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.663437][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.722120][ T5444] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.809933][ T7818] sctp: [Deprecated]: syz.5.954 (pid 7818) Use of int in max_burst socket option deprecated. [ 70.809933][ T7818] Use struct sctp_assoc_value instead [ 70.868243][ T7826] loop5: detected capacity change from 0 to 256 [ 70.870858][ T7826] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.033599][ T50] Bluetooth: hci4: command tx timeout [ 71.067955][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.068001][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.068014][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.146458][ T4683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.147760][ T4683] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.148257][ T4683] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.148961][ T4683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.149193][ T4683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.166216][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.166741][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.166762][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.235572][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.235614][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.235641][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.303463][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.303505][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.303536][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.360094][ T7851] netlink: 1315 bytes leftover after parsing attributes in process `syz.5.965'. [ 71.382769][ T7862] loop7: detected capacity change from 0 to 512 [ 71.410126][ T7862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.438970][ T6902] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 71.449981][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.450267][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.450354][ T7834] bridge_slave_0: entered allmulticast mode [ 71.450913][ T7834] bridge_slave_0: entered promiscuous mode [ 71.463655][ T6902] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.464610][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.464744][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.464829][ T7834] bridge_slave_1: entered allmulticast mode [ 71.465309][ T7834] bridge_slave_1: entered promiscuous mode [ 71.522706][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.532080][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.714019][ T39] bridge_slave_1: left allmulticast mode [ 71.714057][ T39] bridge_slave_1: left promiscuous mode [ 71.714151][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.729563][ T39] bridge_slave_0: left allmulticast mode [ 71.729596][ T39] bridge_slave_0: left promiscuous mode [ 71.729665][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.900502][ T39] bond1 (unregistering): (slave geneve2): Releasing active interface [ 71.958269][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.984977][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.004148][ T39] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 72.034735][ T39] bond0 (unregistering): Released all slaves [ 72.037281][ T39] bond2 (unregistering): Released all slaves [ 72.041227][ T39] bond1 (unregistering): Released all slaves [ 72.047777][ T7834] team0: Port device team_slave_0 added [ 72.048673][ T7834] team0: Port device team_slave_1 added [ 72.084471][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.084509][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.084537][ T7834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.085168][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.085175][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.085191][ T7834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.176379][ T7834] hsr_slave_0: entered promiscuous mode [ 72.176774][ T7834] hsr_slave_1: entered promiscuous mode [ 72.176971][ T7834] debugfs: 'hsr0' already exists in 'hsr' [ 72.176982][ T7834] Cannot create hsr debugfs directory [ 72.245596][ T7916] loop8: detected capacity change from 0 to 8192 [ 72.436953][ T39] hsr_slave_0: left promiscuous mode [ 72.438381][ T39] hsr_slave_1: left promiscuous mode [ 72.439447][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.439460][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.439806][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.439815][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.445955][ T39] veth1_macvtap: left promiscuous mode [ 72.445977][ T39] veth0_macvtap: left promiscuous mode [ 72.446159][ T39] veth1_vlan: left promiscuous mode [ 72.446237][ T39] veth0_vlan: left promiscuous mode [ 72.687259][ T39] team0 (unregistering): Port device team_slave_1 removed [ 72.692000][ T39] team0 (unregistering): Port device team_slave_0 removed [ 72.838512][ T4355] 8021q: adding VLAN 0 to HW filter on device eth16 [ 72.856363][ T7834] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 72.862822][ T7834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.863266][ T7834] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 72.866875][ T7834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.890890][ T7834] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 72.894085][ T7834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.927360][ T7834] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 72.941981][ T7834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.100563][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.108863][ T8022] netlink: 'syz.7.1003': attribute type 2 has an invalid length. [ 73.113370][ T50] Bluetooth: hci4: command tx timeout [ 73.115114][ T8020] loop5: detected capacity change from 0 to 1024 [ 73.117746][ C1] [ 73.118226][ C1] ================================ [ 73.119135][ C1] WARNING: inconsistent lock state [ 73.120081][ C1] syzkaller #0 Not tainted [ 73.120890][ C1] -------------------------------- [ 73.121817][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 73.123065][ C1] syz.7.1003/8013 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 73.124351][ C1] ffff0000db3b35e8 (slock-AF_PHONET/1){+.?.}-{3:3}, at: __sk_receive_skb+0x1ac/0x8d4 [ 73.126309][ C1] {SOFTIRQ-ON-W} state was registered at: [ 73.127484][ C1] lock_acquire+0x140/0x368 [ 73.128423][ C1] _raw_spin_lock_nested+0x50/0x6c [ 73.129431][ C1] __sk_receive_skb+0x1ac/0x8d4 [ 73.130462][ C1] pep_do_rcv+0x208/0x684 [ 73.131336][ C1] __release_sock+0x178/0x2c0 [ 73.132294][ C1] release_sock+0x174/0x228 [ 73.133204][ C1] pep_sock_accept+0x804/0xc08 [ 73.134193][ C1] pn_socket_accept+0xc8/0x26c [ 73.135174][ C1] do_accept+0x304/0x42c [ 73.136015][ C1] __sys_accept4+0x11c/0x1f8 [ 73.136964][ C1] __arm64_sys_accept+0x80/0x98 [ 73.137978][ C1] invoke_syscall+0x98/0x244 [ 73.138861][ C1] el0_svc_common+0xe8/0x23c [ 73.139742][ C1] do_el0_svc+0x48/0x58 [ 73.140580][ C1] el0_svc+0x64/0x260 [ 73.141359][ C1] el0t_64_sync_handler+0x48/0x148 [ 73.142307][ C1] el0t_64_sync+0x198/0x19c [ 73.143162][ C1] irq event stamp: 1492 [ 73.143886][ C1] hardirqs last enabled at (1492): [] _raw_spin_unlock_irq+0x30/0x80 [ 73.145688][ C1] hardirqs last disabled at (1491): [] _raw_spin_lock_irq+0x28/0x70 [ 73.147542][ C1] softirqs last enabled at (1486): [] netif_rx+0xac/0xd4 [ 73.149205][ C1] softirqs last disabled at (1487): [] __do_softirq+0x14/0x20 [ 73.150839][ C1] [ 73.150839][ C1] other info that might help us debug this: [ 73.152286][ C1] Possible unsafe locking scenario: [ 73.152286][ C1] [ 73.153775][ C1] CPU0 [ 73.154501][ C1] ---- [ 73.155163][ C1] lock(slock-AF_PHONET/1); [ 73.156063][ C1] [ 73.156712][ C1] lock(slock-AF_PHONET/1); [ 73.157640][ C1] [ 73.157640][ C1] *** DEADLOCK *** [ 73.157640][ C1] [ 73.159188][ C1] 5 locks held by syz.7.1003/8013: [ 73.160197][ C1] #0: ffff0000d11ae240 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4 [ 73.162292][ C1] #1: ffff0000db3b3ce0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x90/0x4a8 [ 73.164246][ C1] #2: ffff800088ad72a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x574/0x16f8 [ 73.166189][ C1] #3: ffff0000db3b42e8 (slock-AF_PHONET){+.-.}-{3:3}, at: __sk_receive_skb+0x1e0/0x8d4 [ 73.168171][ C1] #4: ffff0000db3b4360 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x64c/0xa94 [ 73.170015][ C1] [ 73.170015][ C1] stack backtrace: [ 73.171173][ C1] CPU: 1 UID: 0 PID: 8013 Comm: syz.7.1003 Not tainted syzkaller #0 PREEMPT [ 73.172984][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 73.174778][ C1] Call trace: [ 73.175383][ C1] show_stack+0x2c/0x3c (C) [ 73.176204][ C1] __dump_stack+0x30/0x40 [ 73.177041][ C1] dump_stack_lvl+0xd8/0x12c [ 73.177898][ C1] dump_stack+0x1c/0x28 [ 73.178786][ C1] print_usage_bug+0x310/0x384 [ 73.179748][ C1] mark_lock_irq+0x4a0/0x4a8 [ 73.180680][ C1] mark_lock+0x144/0x1a4 [ 73.181493][ C1] __lock_acquire+0x6bc/0x2f44 [ 73.182394][ C1] lock_acquire+0x140/0x368 [ 73.183217][ C1] _raw_spin_lock_nested+0x50/0x6c [ 73.184159][ C1] __sk_receive_skb+0x1ac/0x8d4 [ 73.185073][ C1] pep_do_rcv+0x208/0x684 [ 73.185882][ C1] __sk_receive_skb+0x458/0x8d4 [ 73.186805][ C1] phonet_rcv+0x64c/0xa94 [ 73.187685][ C1] __netif_receive_skb_one_core+0xc4/0x10c [ 73.188846][ C1] __netif_receive_skb+0x34/0x128 [ 73.189871][ C1] process_backlog+0x610/0x16f8 [ 73.190812][ C1] __napi_poll+0xb0/0x324 [ 73.191643][ C1] net_rx_action+0x568/0xbcc [ 73.192585][ C1] handle_softirqs+0x2e4/0xd34 [ 73.193546][ C1] __do_softirq+0x14/0x20 [ 73.194441][ C1] ____do_softirq+0x14/0x20 [ 73.195364][ C1] call_on_irq_stack+0x30/0x48 [ 73.196313][ C1] do_softirq_own_stack+0x20/0x2c [ 73.197327][ C1] do_softirq+0x90/0xf8 [ 73.198137][ C1] __local_bh_enable_ip+0x240/0x35c [ 73.199177][ C1] netif_rx+0xb4/0xd4 [ 73.199975][ C1] pn_send+0x4e8/0x780 [ 73.200770][ C1] pn_skb_send+0x1dc/0x508 [ 73.201658][ C1] pipe_handler_request+0x128/0x234 [ 73.202743][ C1] pep_sock_close+0x124/0x4a8 [ 73.203647][ C1] pn_socket_release+0x9c/0xbc [ 73.204589][ C1] __sock_release+0xa0/0x1d4 [ 73.205501][ C1] sock_close+0x24/0x38 [ 73.206290][ C1] __fput+0x340/0x744 [ 73.207059][ C1] ____fput+0x20/0x30 [ 73.207810][ C1] task_work_run+0x1c4/0x254 [ 73.208675][ C1] exit_to_user_mode_loop+0x10c/0x17c [ 73.209710][ C1] el0_svc+0x18c/0x260 [ 73.210483][ C1] el0t_64_sync_handler+0x48/0x148 [ 73.211467][ C1] el0t_64_sync+0x198/0x19c [ 73.221518][ T50] Bluetooth: hci0: command tx timeout [ 73.230137][ T7834] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.231780][ T3908] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.231816][ T3908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.240855][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.240896][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.252407][ T8020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.322444][ T5110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.376917][ T7834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.428060][ T7834] veth0_vlan: entered promiscuous mode [ 73.430204][ T7834] veth1_vlan: entered promiscuous mode [ 73.437200][ T7834] veth0_macvtap: entered promiscuous mode [ 73.438270][ T7834] veth1_macvtap: entered promiscuous mode [ 73.441424][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.446385][ T7834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.448221][ T4836] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.448493][ T4836] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.448513][ T4836] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.448528][ T4836] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.461240][ T7834] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 73.469824][ T3908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.469852][ T3908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.472513][ T7834] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 73.478969][ T4836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.478997][ T4836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.545501][ T4355] 8021q: adding VLAN 0 to HW filter on device eth17 [ 73.646124][ T4355] 8021q: adding VLAN 0 to HW filter on device eth18 [ 73.735442][ T4355] 8021q: adding VLAN 0 to HW filter on device eth19 [ 75.272972][ T50] Bluetooth: hci0: command tx timeout [ 77.353035][ T50] Bluetooth: hci0: command tx timeout [ 79.432972][ T50] Bluetooth: hci0: command tx timeout