last executing test programs: 35.170172957s ago: executing program 0 (id=56): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x4000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 35.132252783s ago: executing program 0 (id=58): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "88d43ab161e9013bb562ad5ecd"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x50}}, 0x0) 35.10332513s ago: executing program 0 (id=61): r0 = socket$inet6(0xa, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4f484}, 0x4000040) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 35.063918001s ago: executing program 0 (id=62): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000100)={[{@quota}, {@data_err_ignore}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000a00)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x4) 34.994058374s ago: executing program 0 (id=64): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 32.690087366s ago: executing program 0 (id=147): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ppoll(&(0x7f0000000200)=[{r0, 0x2060}], 0x1, 0x0, 0x0, 0x0) 32.548835897s ago: executing program 32 (id=147): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ppoll(&(0x7f0000000200)=[{r0, 0x2060}], 0x1, 0x0, 0x0, 0x0) 32.045634757s ago: executing program 2 (id=173): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x119088, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 31.97647238s ago: executing program 2 (id=175): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x80, 0x0) 31.895852397s ago: executing program 2 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x20}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 31.058159902s ago: executing program 2 (id=191): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0xaa0d9a51e63453c5, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 30.992585188s ago: executing program 2 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r1, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 30.469909077s ago: executing program 2 (id=209): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) 30.381888089s ago: executing program 33 (id=209): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) 16.50826562s ago: executing program 6 (id=759): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r0, 0x25, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9}) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x8}) 16.440973765s ago: executing program 6 (id=763): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 16.310366572s ago: executing program 6 (id=770): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 16.235781017s ago: executing program 6 (id=775): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbHb7+32bQilvX15eCj1Yqd00iT8qeKhH0WJBPdclmYaSTbdkN6WJBduDvXiRIohYEO969+ChePHoX1HQQpES9OBlZTazybbZJJt0Y2L384Fpn2dmNs8888z34Zl9dpgABtaJ7J9CxPGI+CyJONyxrRj5xhNL+y0+vjmRLUk0m+/9lkSSr2vvn+T/H8wz/4mIHz+JOF1YXW59fmG6Uq2ms3l+pDFzbaQ+v3DmykxlKp1Kr46Nj597ZXzs9dde7VtdX7z4x5fv3n/r3KcnF7/47uGRu0mcj0P5ts56PINbnZkTzWZ+Tkpx/qkdR/tQ2G6S7PQBsCVDeZyXIuJ46XCpHfXA8+/jiGgCAyrZZPzv1V/Ac6I9Dmjf2/fpPvgf49GbSzdAq+tfXPpuJPa17o0OLCZP3Bll97vDfSg/K+P7X+/dzZbo3/cQABu6dTsizhaLq/u/JO//tu5sD/s8XYb+D/4+97Pxz0vdxj+F5fFPdBn/HOwSu1uxcfwXHvahmDVl4783uo5/lyethofy3L9aY75ScvlKNc36tn9HxKko7c3y683nnFt80FxrW+f4L1uy8ttjwfw4Hhb3PvmZyUqj8ix17vTodsR/u45/k+X2T7q0f3Y+PuixjGPpvf+vtW3j+m+v5jcRL3Rt/5UZrWT9+cmR1vUw0r4qVvv9zrGf1yq/e/1/+mEbqtpV1v4H1q//cNI5X1vffBlf7/szXWvbVq//Pcn7rfSefN2NSqMxOxqxJ3ln9fqxlc+28+39s/qfOrl+/9ft+t8fER/2WP87R7/939brv72y+k9uqv03n3jw9kdfrVV+b+3/cit1Kl/TS//X6wE+y7kDAAAAAACA3aYQEYciKZRjX54uFMrlpd93HI0DhWqt3jh9uTZ3dTJaz8oOR6nQnuk+3PF7iNH897Dt/NhT+fGIOBIRnw/tb+XLE7Xq5E5XHgAAAAAAAAAAAAAAAAAAAHaJg8vP/8cTz/9nfhna6aMDtl1x6f3fwADa8JX//XjTE7ArbRj/wHNL/MPgEv8wuMQ/DKTWFJ/4h8El/mFwiX8YXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAA+urihQvZ0lx8fHMiy09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZmN/l61Vrs2OhZzN0Yaab0xUp9fuDRTm7vauHRlpjKVXkq9ZxwAAAAAAAAAAAAAAAAAAABWq88vTFeq1XS2D4lStZoWIqKXnSP6VOgAJrJ2u1Xs7TxvTyKJlTXF3XJaJPqa2OmeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABW/BUAAP//2SsyHQ==") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 16.154775506s ago: executing program 6 (id=779): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0xfe, 0x4ac, &(0x7f0000000680)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) 15.771898516s ago: executing program 6 (id=798): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x3) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0xb, 0x5, 0x2) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 15.67601076s ago: executing program 34 (id=798): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x3) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0xb, 0x5, 0x2) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 12.034880201s ago: executing program 5 (id=912): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') 12.006885033s ago: executing program 5 (id=914): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x80, 0x100, @void}}}}}}}}, 0x0) 11.987833892s ago: executing program 5 (id=915): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300000001000000000000000000000000000000000000001d7d1f2d55a2c418ef257aad8e62e22e3793698204e9dd6efc6c391f21407349818aa6efd59f7dc01332c4fb4bf29a1897cf98930f393eeeeba52385029378dea95a1640c660d6d3399e481178b1e46a22e50b60a3585535e412588fdef8935422a6ae9f2404252d6c613d9a119f47e9390feda919285bdef7063f5a7d000473"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.847617219s ago: executing program 5 (id=921): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x80000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 11.754858574s ago: executing program 5 (id=925): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x59455247, 0x0, 0x6, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 11.413838875s ago: executing program 5 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "ff55987e7b5bdee2dcd837ddfef6aea6"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000004}, 0x8000) 11.413637519s ago: executing program 35 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "ff55987e7b5bdee2dcd837ddfef6aea6"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000004}, 0x8000) 9.72718724s ago: executing program 4 (id=1005): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x12f, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 9.694180578s ago: executing program 4 (id=1006): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 9.604785267s ago: executing program 4 (id=1007): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4a7, @loopback, 0x62a5}, {0xa, 0x4e24, 0x80, @empty, 0x8}, r1, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18) 9.569503656s ago: executing program 4 (id=1008): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x102) 9.534374008s ago: executing program 4 (id=1009): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @host}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 8.901025965s ago: executing program 4 (id=1024): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x5, 0x7, 0x10, 0xfff, 0x2}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_DELAY_DIST={0x6, 0x18, 'E1'}]}}}]}, 0x58}}, 0x0) 8.818633851s ago: executing program 36 (id=1024): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x5, 0x7, 0x10, 0xfff, 0x2}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_DELAY_DIST={0x6, 0x18, 'E1'}]}}}]}, 0x58}}, 0x0) 435.966377ms ago: executing program 1 (id=1397): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x405, 0xd, 0x10000001, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0xffffffffffffff59) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 377.78652ms ago: executing program 7 (id=1399): io_setup(0x8, &(0x7f0000004200)=0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 377.063553ms ago: executing program 8 (id=1400): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c L'], 0xa) 318.356166ms ago: executing program 9 (id=1401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x28, r1, 0x921, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) 318.074049ms ago: executing program 1 (id=1402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 317.559948ms ago: executing program 9 (id=1404): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000180)) 289.47389ms ago: executing program 8 (id=1405): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'wp512-generic\x00'}}) 288.876524ms ago: executing program 1 (id=1406): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r1, r0, 0x0, 0x7ffffffd) 265.009354ms ago: executing program 3 (id=1407): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1d, 0x21, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x100, r1}, 0x38) 249.743059ms ago: executing program 7 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = memfd_create(&(0x7f0000001580)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\xff\a\xb4\xf9\x1f\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v2*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\x10\xbf\x90/wU\xf3\xc1\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x03\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\t\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa8\xe1\x84i\xce\xa1\xff\x95\x80\x00T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\x80\x00\x00\x00\x00\x00\x00\x00\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xae\xa60k2\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99e\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad\xff\x03\x00\x00\x00\x00\x00\x00\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1\f\xa5#w\xdaU\xa8>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\x0f?\xab\xe5\x13\x02\xc4\b\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\xbc\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%\x04\x00\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\x05O\xfe\x0e\xd2N\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\f1\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8c\x16)\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;}\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xe5L\xban?\'\x11B\xeav\xbf|\xc6\xc9>\xfc\x14\xbe7T\x00\x05\x05\x13}#\x1d\xc85*\xe7\n\xdf\xd4d\xf9k\xb1\xdcT1\xecH\xea\xe0\x1c\xe5;I\r\xf2;\xa1\xbfz0Ij\xddn\xe1U\xd6\xfd4\x98\fD\xe5f\x15\xf3\x8fr\x17\xd8/\xde\xaf(\xe1\xd3\xdfF\xbe\x88\xc6\xd3\tO \xbb0#\xb3\x99\xef\xb1\x00\x00\x00l\xc6\x8fi\x91N,|\xff<0\xe3\xd8\xe9(\xb9\x90\x9f1\x10/\x1b`W*\a\x00W\xe0kV\x02\x89%\xbe%\x8a\v\xbaI\x11Z\xed\xc4\xd6\xd7\xdf\xb9\xa2fS\x0510\xb3\xa9D\x9e\xa7\x06\xc82*m1\xa0\xb6\x91K\xe0\\\xd2\x8e\xb3\xcdn|\x1f3\x01\xee\xb8\x13\\q\xf6 \xa89\xeb\nN\xde\xbe2J\x1cu\xabA\x06S\xc5\x8e\xa1\xa8\xd2\xf2\xe1\xa1\x88 l-\xdb\xd9\x7f\xbe}\xee\x03\xc7\xad@\xcc\x10cxr\xb1\xcc\xa7\x84\xf0\xb4\xe6\xea\xaah\x12x\x91\x9bwU\x96\x85\xb6\xdd\'\xf1\a\xa6\xf25\xa0,:\x89\xfc8M:]U^\x9c\xbd\x1bAhB\x9e5\x16\x96\x11\x00$\xc0X\xf9\x15\xad\x87j\x93\x8ay\x10\xbft\xb9z\xcb\x8f\xfc\xaa\xdd\xfb{\x0e\x93\xaf\x80', 0xd) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/166, 0xa6}], 0x1, 0x4, 0x2, 0x31) 249.480551ms ago: executing program 9 (id=1409): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}], 0x2, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x8}, 0x8) 219.002905ms ago: executing program 3 (id=1410): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04061120"], 0x7) 215.966251ms ago: executing program 7 (id=1411): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0xc, 0xffff0000}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000340)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x159) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 209.611193ms ago: executing program 8 (id=1412): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) readv(r1, &(0x7f00000017c0)=[{&(0x7f0000000000)=""/153, 0x99}], 0x1) close_range(r0, r2, 0x0) 197.793748ms ago: executing program 9 (id=1413): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 162.910811ms ago: executing program 1 (id=1414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(0x3) 152.961022ms ago: executing program 9 (id=1415): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000000070000000200000022ff000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000040), &(0x7f0000002100)=""/4096}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r0, &(0x7f0000000100), 0x0}, 0x20) 152.452797ms ago: executing program 3 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, r0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) 151.141414ms ago: executing program 7 (id=1417): r0 = gettid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4113, 0x0, 0xae0b9951e676bac7}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 123.032075ms ago: executing program 3 (id=1418): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x25a, &(0x7f0000000240)="$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") capset(&(0x7f0000000080)={0x20080522}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 102.091759ms ago: executing program 8 (id=1419): r0 = msgget$private(0x0, 0x3fc) msgsnd(r0, &(0x7f0000000300)={0x2}, 0x8, 0x0) msgrcv(r0, 0xffffffffffffffff, 0x0, 0x2, 0x1000) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000001c0)=""/26) 101.730685ms ago: executing program 1 (id=1420): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000000)=0xfd, 0x4) 93.476712ms ago: executing program 7 (id=1421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 91.790938ms ago: executing program 9 (id=1422): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x24000087, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) 40.174438ms ago: executing program 1 (id=1423): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000765000/0x2000)=nil, 0x2000, 0x3) 39.920283ms ago: executing program 8 (id=1424): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x0, 0x2810}, [@IFLA_MTU={0x8, 0x4, 0x7fff}]}, 0x28}}, 0x0) 39.435584ms ago: executing program 3 (id=1425): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@multicast2, @multicast1, 0x1, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x0, 0x7}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x1, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x7}, 0x3c) 2.366491ms ago: executing program 7 (id=1426): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0xfffffffe, 0x0, 0x30, 0x0, @ib={0x1b, 0x4, 0x9, {"96fdb4533b97a668d4d081f2cf2d61a5"}, 0x2, 0x40, 0x9c}, @ib={0x1b, 0x6, 0x7fffffe, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f00000006c0), r1, 0x2}}, 0x18) 1.938017ms ago: executing program 3 (id=1427): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 8 (id=1428): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r1, 0x13, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7b) kernel console output (not intermixed with test programs): blocking state [ 31.754800][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.769206][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.771005][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.773148][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.775099][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.777247][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.791448][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.791515][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.791838][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.791857][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.797044][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.799459][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.801384][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.803378][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.838162][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.844353][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.851788][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.851826][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.852241][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.852277][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.863679][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.884681][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.888959][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.896267][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.896312][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.906898][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.906941][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.919023][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.949002][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.949055][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.949383][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.949400][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.961872][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.988866][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.988901][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.039442][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.086587][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.108424][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.154413][ T4719] veth0_vlan: entered promiscuous mode [ 32.161765][ T4706] veth0_vlan: entered promiscuous mode [ 32.164738][ T4706] veth1_vlan: entered promiscuous mode [ 32.178183][ T4706] veth0_macvtap: entered promiscuous mode [ 32.181261][ T4706] veth1_macvtap: entered promiscuous mode [ 32.185740][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.190635][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.194504][ T4719] veth1_vlan: entered promiscuous mode [ 32.208894][ T1277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.211131][ T1277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.211159][ T1277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.211177][ T1277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.227274][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.229496][ T4707] veth0_vlan: entered promiscuous mode [ 32.241809][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.244991][ T4707] veth1_vlan: entered promiscuous mode [ 32.256904][ T1418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.256933][ T1418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.262418][ T4719] veth0_macvtap: entered promiscuous mode [ 32.267305][ T4719] veth1_macvtap: entered promiscuous mode [ 32.285829][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.285911][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.285924][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.289119][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.294140][ T4707] veth0_macvtap: entered promiscuous mode [ 32.297773][ T4707] veth1_macvtap: entered promiscuous mode [ 32.300468][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300527][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300552][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300570][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.313622][ T4717] veth0_vlan: entered promiscuous mode [ 32.316359][ T4717] veth1_vlan: entered promiscuous mode [ 32.323598][ T4705] veth0_vlan: entered promiscuous mode [ 32.339357][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.346642][ T4706] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.351895][ T1418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.351924][ T1418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.355947][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.367808][ T1243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.367875][ T1243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.367911][ T1243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.367932][ T1243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.384201][ T4705] veth1_vlan: entered promiscuous mode [ 32.397147][ T4717] veth0_macvtap: entered promiscuous mode [ 32.406997][ T4717] veth1_macvtap: entered promiscuous mode [ 32.408780][ T1418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.408809][ T1418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.431171][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.431194][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.435403][ T4705] veth0_macvtap: entered promiscuous mode [ 32.443867][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.448968][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.459238][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.459265][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.463286][ T4705] veth1_macvtap: entered promiscuous mode [ 32.492742][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.493729][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.523842][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523901][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523927][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523943][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.529371][ T1418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.529509][ T1418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.529636][ T1418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.529688][ T1418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.686553][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.686583][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.700699][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.700727][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.708941][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.708969][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.725553][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.725577][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.774197][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 32.811249][ T50] Bluetooth: hci0: command tx timeout [ 32.811251][ T4713] Bluetooth: hci3: command tx timeout [ 32.811460][ T4713] Bluetooth: hci2: command tx timeout [ 32.811465][ T50] Bluetooth: hci4: command tx timeout [ 32.820766][ T4708] Bluetooth: hci1: command tx timeout [ 32.869181][ T4928] Zero length message leads to an empty skb [ 32.998432][ T4944] loop3: detected capacity change from 0 to 1024 [ 32.998852][ T4944] ======================================================= [ 32.998852][ T4944] WARNING: The mand mount option has been deprecated and [ 32.998852][ T4944] and is ignored by this kernel. Remove the mand [ 32.998852][ T4944] option from the mount to silence this warning. [ 32.998852][ T4944] ======================================================= [ 33.019042][ T4941] loop0: detected capacity change from 0 to 4096 [ 33.033366][ T4944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.065530][ T4941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.071956][ T4954] loop2: detected capacity change from 0 to 512 [ 33.077307][ T4944] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.23: lblock 3 mapped to illegal pblock 3 (length 3) [ 33.087489][ T4944] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 33.087535][ T4944] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.087535][ T4944] [ 33.090103][ T4954] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.29: corrupted in-inode xattr: invalid ea_ino [ 33.090146][ T4954] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.090782][ T4954] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.29: couldn't read orphan inode 15 (err -117) [ 33.090821][ T4954] loop2: lost filesystem error report for type 5 error -117 [ 33.091377][ T4954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.135485][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.156726][ T39] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 5) [ 33.166428][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 33.166460][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.166460][ T39] [ 33.172295][ T4717] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 33.180229][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.196169][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.365173][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 33.578400][ T4987] loop3: detected capacity change from 0 to 1024 [ 33.584378][ T4987] EXT4-fs: Ignoring removed bh option [ 33.586242][ T4987] EXT4-fs: inline encryption not supported [ 33.588725][ T4987] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.599064][ T4987] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 33.606190][ T4987] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.44: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.606227][ T4987] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 33.610196][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 33.610211][ C0] EXT4-fs (loop3): initial error at time 33: ext4_map_blocks:791: inode 3: block 2 [ 33.610232][ C0] EXT4-fs (loop3): last error at time 33: ext4_map_blocks:791: inode 3: block 2 [ 33.627318][ T4987] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 33.627378][ T4987] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.44: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.627414][ T4987] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 33.634121][ T4987] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 33.634144][ T4987] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.44: Failed to acquire dquot type 0 [ 33.634160][ T4987] loop3: lost filesystem error report for type 5 error -117 [ 33.638056][ T4987] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 33.638066][ T4987] loop3: lost filesystem error report for type 5 error -117 [ 33.641399][ T4987] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.44: mark_inode_dirty error [ 33.641438][ T4987] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.654451][ T4987] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 33.654575][ T4987] EXT4-fs (loop3): 1 orphan inode deleted [ 33.655045][ T4987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.693379][ T1418] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.696835][ T4987] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz.3.44: Invalid inode table block 1 in block_group 0 [ 33.697493][ T4987] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 33.701562][ T1418] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 33.701580][ T1418] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 33.731364][ T4998] warning: `syz.2.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 33.787992][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.788630][ T4717] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 33.788644][ T4717] loop3: lost filesystem error report for type 5 error -117 [ 33.789021][ T4717] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 33.789033][ T4717] loop3: lost filesystem error report for type 5 error -117 [ 33.789176][ T4717] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 33.789187][ T4717] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 34.000640][ T5025] loop0: detected capacity change from 0 to 512 [ 34.020252][ T5025] EXT4-fs (loop0): 1 truncate cleaned up [ 34.020741][ T5025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.046778][ T4706] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 34.052745][ T4706] EXT4-fs (loop0): Remounting filesystem read-only [ 34.289753][ T5061] loop2: detected capacity change from 0 to 1024 [ 34.296193][ T5061] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 34.296261][ T5061] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.303655][ T5061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.367522][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.448495][ T5083] Injecting memory failure for pfn 0x13470f at process virtual address 0x20f0f000 [ 34.468344][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 34.500225][ T5083] Memory failure: 0x13470f: recovery action for dirty LRU page: Recovered [ 34.559844][ T5098] loop2: detected capacity change from 0 to 512 [ 34.569158][ T5098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.748353][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.749576][ T5121] loop1: detected capacity change from 0 to 2048 [ 34.785410][ T5121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.845517][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.893311][ T50] Bluetooth: hci0: command tx timeout [ 34.893375][ T4708] Bluetooth: hci2: command tx timeout [ 34.901291][ T50] Bluetooth: hci3: command tx timeout [ 34.901350][ T4708] Bluetooth: hci4: command tx timeout [ 35.024808][ T5162] loop1: detected capacity change from 0 to 4096 [ 35.050537][ T5162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.087170][ T5162] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 35.089107][ T5162] EXT4-fs: can't change dax mount option while remounting [ 35.946377][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.059226][ T5189] loop2: detected capacity change from 0 to 1024 [ 36.073655][ T5189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.132934][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.142201][ T5199] process 'syz.1.138' launched './file2' with NULL argv: empty string added [ 36.169521][ T5201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.182634][ T5201] EXT4-fs (loop1): shut down requested (1) [ 36.197795][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.275204][ T5208] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 36.279444][ T5208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.288262][ T5214] vti0: entered allmulticast mode [ 36.300816][ T5212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.307304][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.372579][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.401524][ T1418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.422614][ T5225] netlink: 48 bytes leftover after parsing attributes in process `syz.4.150'. [ 36.423352][ T5225] netlink: 48 bytes leftover after parsing attributes in process `syz.4.150'. [ 36.431554][ T5227] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.439466][ T5227] EXT4-fs (loop2): Remounting filesystem read-only [ 36.521994][ T1418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.532233][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.553506][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.555180][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.555698][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.567691][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.567983][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.636090][ T5247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.644001][ T1418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.727257][ T1418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.754110][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.783285][ T5270] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 36.909601][ T5282] netlink: 56 bytes leftover after parsing attributes in process `syz.3.169'. [ 36.970318][ T50] Bluetooth: hci4: command tx timeout [ 36.970636][ T50] Bluetooth: hci3: command tx timeout [ 36.970666][ T50] Bluetooth: hci2: command tx timeout [ 36.970686][ T50] Bluetooth: hci0: command tx timeout [ 37.693269][ T1418] bridge_slave_1: left allmulticast mode [ 37.693312][ T1418] bridge_slave_1: left promiscuous mode [ 37.693650][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.704005][ T1418] bridge_slave_0: left allmulticast mode [ 37.704034][ T1418] bridge_slave_0: left promiscuous mode [ 37.704115][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.711075][ T5309] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 37.711110][ T5309] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.856041][ T5325] FAT-fs (loop3): Directory bread(block 64) failed [ 37.856069][ T5325] FAT-fs (loop3): Directory bread(block 65) failed [ 37.856486][ T5325] FAT-fs (loop3): Directory bread(block 66) failed [ 37.856504][ T5325] FAT-fs (loop3): Directory bread(block 67) failed [ 37.856570][ T5325] FAT-fs (loop3): Directory bread(block 68) failed [ 37.856584][ T5325] FAT-fs (loop3): Directory bread(block 69) failed [ 37.856610][ T5325] FAT-fs (loop3): Directory bread(block 70) failed [ 37.856621][ T5325] FAT-fs (loop3): Directory bread(block 71) failed [ 37.856644][ T5325] FAT-fs (loop3): Directory bread(block 72) failed [ 37.856655][ T5325] FAT-fs (loop3): Directory bread(block 73) failed [ 37.888891][ T1418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.921644][ T1418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.932636][ T1418] bond0 (unregistering): Released all slaves [ 38.000355][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.000399][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.000491][ T5237] bridge_slave_0: entered allmulticast mode [ 38.000936][ T5237] bridge_slave_0: entered promiscuous mode [ 38.001607][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.001629][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.001679][ T5237] bridge_slave_1: entered allmulticast mode [ 38.002089][ T5237] bridge_slave_1: entered promiscuous mode [ 38.045655][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.046555][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.068817][ T4711] hid-generic 0005:4C4A:0A0E.0001: item fetching failed at offset 0/1 [ 38.069004][ T4711] hid-generic 0005:4C4A:0A0E.0001: probe with driver hid-generic failed with error -22 [ 38.145405][ T5237] team0: Port device team_slave_0 added [ 38.147439][ T5237] team0: Port device team_slave_1 added [ 38.207280][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.207307][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.207329][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.208021][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.208035][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.208056][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.310699][ T4395] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.650276][ T4708] Bluetooth: hci1: command tx timeout [ 38.750043][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.752009][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.753258][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.756009][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.759030][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 39.050102][ T50] Bluetooth: hci2: command tx timeout [ 39.050117][ T4708] Bluetooth: hci3: command tx timeout [ 39.111571][ T1418] hsr_slave_0: left promiscuous mode [ 39.112881][ T1418] hsr_slave_1: left promiscuous mode [ 39.113602][ T1418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.113622][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.115723][ T1418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.115735][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.130388][ T1418] veth1_macvtap: left promiscuous mode [ 39.130432][ T1418] veth0_macvtap: left promiscuous mode [ 39.130479][ T1418] veth1_vlan: left promiscuous mode [ 39.130522][ T1418] veth0_vlan: left promiscuous mode [ 39.176475][ T5415] capability: warning: `syz.3.219' uses deprecated v2 capabilities in a way that may be insecure [ 39.180457][ T5415] overlayfs: upper fs does not support tmpfile. [ 39.251227][ T1418] team0 (unregistering): Port device team_slave_1 removed [ 39.257109][ T1418] team0 (unregistering): Port device team_slave_0 removed [ 39.310308][ T5237] hsr_slave_0: entered promiscuous mode [ 39.310652][ T5237] hsr_slave_1: entered promiscuous mode [ 39.310848][ T5237] debugfs: 'hsr0' already exists in 'hsr' [ 39.310858][ T5237] Cannot create hsr debugfs directory [ 39.423703][ T5430] set_capacity_and_notify: 5 callbacks suppressed [ 39.424986][ T5430] loop4: detected capacity change from 0 to 8192 [ 39.521688][ T5237] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.524501][ T5237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.525057][ T5237] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.533066][ T5237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.537224][ T5237] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.559441][ T5237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.559727][ T5237] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.577820][ T5237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.706233][ T5475] team0: entered allmulticast mode [ 39.706266][ T5475] team_slave_0: entered allmulticast mode [ 39.706295][ T5475] team_slave_1: entered allmulticast mode [ 39.706880][ T5475] team0: left allmulticast mode [ 39.706898][ T5475] team_slave_0: left allmulticast mode [ 39.706922][ T5475] team_slave_1: left allmulticast mode [ 39.727380][ T5479] blkio.reset_stats is deprecated [ 39.751570][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.790770][ T1418] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.794550][ T5487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 39.806339][ T4395] 8021q: adding VLAN 0 to HW filter on device eth1 [ 39.809604][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.817088][ T5487] veth1_to_batadv: entered promiscuous mode [ 39.819457][ T5487] veth1_to_batadv: left promiscuous mode [ 39.830713][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.830753][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.834978][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.835013][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.911404][ T1418] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.066855][ T1418] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.096709][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.096749][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.096865][ T5398] bridge_slave_0: entered allmulticast mode [ 40.097305][ T5398] bridge_slave_0: entered promiscuous mode [ 40.097953][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.097988][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.098048][ T5398] bridge_slave_1: entered allmulticast mode [ 40.098475][ T5398] bridge_slave_1: entered promiscuous mode [ 40.163455][ T5530] loop1: detected capacity change from 0 to 128 [ 40.171979][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.180446][ T5530] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.187401][ T5530] EXT4-fs warning (device loop1): __ext4_ioctl:1558: Setting inode version is not supported with metadata_csum enabled. [ 40.191109][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.214312][ T5530] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.244445][ T5546] input: syz1 as /devices/virtual/input/input2 [ 40.257199][ T1418] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.268654][ T4395] 8021q: adding VLAN 0 to HW filter on device eth2 [ 40.270792][ T5398] team0: Port device team_slave_0 added [ 40.274747][ T5398] team0: Port device team_slave_1 added [ 40.296643][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.321534][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.321568][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.321583][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.322207][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.322215][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.322230][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.361273][ T5559] netlink: 540 bytes leftover after parsing attributes in process `syz.1.258'. [ 40.380238][ T40] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.380283][ T40] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.380314][ T40] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.380335][ T40] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.385607][ T5398] hsr_slave_0: entered promiscuous mode [ 40.385894][ T5398] hsr_slave_1: entered promiscuous mode [ 40.386481][ T5398] debugfs: 'hsr0' already exists in 'hsr' [ 40.386491][ T5398] Cannot create hsr debugfs directory [ 40.572124][ T5237] veth0_vlan: entered promiscuous mode [ 40.680287][ T1418] bridge_slave_1: left allmulticast mode [ 40.680318][ T1418] bridge_slave_1: left promiscuous mode [ 40.680396][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.682970][ T1418] bridge_slave_0: left allmulticast mode [ 40.682982][ T1418] bridge_slave_0: left promiscuous mode [ 40.683044][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.730097][ T4708] Bluetooth: hci1: command tx timeout [ 40.774493][ T5613] misc userio: Begin command sent, but we're already running [ 40.786154][ T1418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.810262][ T4708] Bluetooth: hci4: command tx timeout [ 40.812827][ T1418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.850749][ T1418] bond0 (unregistering): Released all slaves [ 40.856267][ T4395] 8021q: adding VLAN 0 to HW filter on device eth3 [ 40.867310][ T5237] veth1_vlan: entered promiscuous mode [ 40.898024][ T5398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 40.908442][ T5398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.908755][ T5398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 40.918796][ T5398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.921477][ T5398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 40.928656][ T5398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.928973][ T5398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 40.931934][ T5398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.937151][ T5619] netlink: 'syz.3.276': attribute type 7 has an invalid length. [ 40.982251][ T5237] veth0_macvtap: entered promiscuous mode [ 40.983347][ T5237] veth1_macvtap: entered promiscuous mode [ 41.003777][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.005817][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.017711][ T1277] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.017804][ T1277] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.017862][ T1277] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.017907][ T1277] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.118190][ T5643] erspan0: entered promiscuous mode [ 41.120915][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 41.122948][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.140366][ T5398] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.152335][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.152377][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.152927][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.152952][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.175563][ T1418] hsr_slave_0: left promiscuous mode [ 41.176925][ T1418] hsr_slave_1: left promiscuous mode [ 41.178186][ T1418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.179673][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.182023][ T1418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.182775][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.186252][ T1418] veth1_macvtap: left promiscuous mode [ 41.186455][ T1418] veth0_macvtap: left promiscuous mode [ 41.186534][ T1418] veth1_vlan: left promiscuous mode [ 41.186572][ T1418] veth0_vlan: left promiscuous mode [ 41.282482][ T1418] team0 (unregistering): Port device team_slave_1 removed [ 41.286429][ T1418] team0 (unregistering): Port device team_slave_0 removed [ 41.337525][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.337553][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.364283][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.364310][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.454898][ T10] atkbd serio0: keyboard reset failed on [ 41.485582][ T5665] loop3: detected capacity change from 0 to 4096 [ 41.499368][ T5665] EXT4-fs (loop3): Test dummy encryption mode enabled [ 41.507160][ T5668] loop5: detected capacity change from 0 to 256 [ 41.511433][ T5668] vfat: Bad value for 'nonumtail' [ 41.516663][ T5665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.544227][ T5665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.575662][ T5676] netlink: 20 bytes leftover after parsing attributes in process `syz.5.285'. [ 41.632635][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.736513][ T4395] 8021q: adding VLAN 0 to HW filter on device eth5 [ 41.787545][ T5398] veth0_vlan: entered promiscuous mode [ 41.792739][ T5398] veth1_vlan: entered promiscuous mode [ 41.824986][ T5398] veth0_macvtap: entered promiscuous mode [ 41.829669][ T5398] veth1_macvtap: entered promiscuous mode [ 41.834557][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.837528][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.845753][ T1243] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.846244][ T1243] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.846265][ T1243] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.846284][ T1243] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.905533][ T1418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.905566][ T1418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.928400][ T1418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.928430][ T1418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.960971][ T5731] overlayfs: conflicting lowerdir path [ 42.009689][ T4395] 8021q: adding VLAN 0 to HW filter on device eth6 [ 42.228217][ T4395] 8021q: adding VLAN 0 to HW filter on device eth7 [ 42.810419][ T4708] Bluetooth: hci1: command tx timeout [ 42.890083][ T4708] Bluetooth: hci4: command tx timeout [ 42.914319][ T5791] loop6: detected capacity change from 0 to 4096 [ 42.915434][ T5791] EXT4-fs: inline encryption not supported [ 42.915480][ T5791] EXT4-fs: Ignoring removed bh option [ 42.918605][ T5791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.918641][ T5791] EXT4-fs (loop6): Test dummy encryption mode enabled [ 42.923394][ T5791] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 42.923450][ T5791] System zones: 0-5 [ 42.927698][ T5791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.947726][ T5398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.141693][ T10] atkbd serio1: keyboard reset failed on [ 43.268159][ T5819] netdevsim netdevsim5: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 43.302800][ T5826] syz.6.329 uses obsolete (PF_INET,SOCK_PACKET) [ 43.417467][ T5836] loop5: detected capacity change from 0 to 1024 [ 43.444247][ T5836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.457933][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 43.459879][ T5842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 43.460424][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 43.460690][ T5842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 43.460708][ T5842] netlink: 44 bytes leftover after parsing attributes in process `syz.3.335'. [ 43.475280][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.538817][ T5855] netlink: 220 bytes leftover after parsing attributes in process `syz.3.340'. [ 43.593050][ T5859] loop3: detected capacity change from 0 to 256 [ 43.607494][ T5859] FAT-fs (loop3): Directory bread(block 64) failed [ 43.607538][ T5859] FAT-fs (loop3): Directory bread(block 65) failed [ 43.607564][ T5859] FAT-fs (loop3): Directory bread(block 66) failed [ 43.607576][ T5859] FAT-fs (loop3): Directory bread(block 67) failed [ 43.607599][ T5859] FAT-fs (loop3): Directory bread(block 68) failed [ 43.607610][ T5859] FAT-fs (loop3): Directory bread(block 69) failed [ 43.607666][ T5859] FAT-fs (loop3): Directory bread(block 70) failed [ 43.607712][ T5859] FAT-fs (loop3): Directory bread(block 71) failed [ 43.607734][ T5859] FAT-fs (loop3): Directory bread(block 72) failed [ 43.607744][ T5859] FAT-fs (loop3): Directory bread(block 73) failed [ 43.613835][ T5859] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.754743][ T5881] loop3: detected capacity change from 0 to 512 [ 43.759628][ T5879] loop4: detected capacity change from 0 to 512 [ 43.771519][ T5881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.791043][ T5879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.803087][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 43.814468][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.826359][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.010430][ T5910] loop1: detected capacity change from 0 to 1024 [ 44.010868][ T5910] EXT4-fs: Ignoring removed orlov option [ 44.013972][ T5910] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 44.016638][ T5912] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.031790][ T5910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.046547][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.082177][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.105743][ T5920] tipc: Started in network mode [ 44.105775][ T5920] tipc: Node identity ac14140f, cluster identity 4711 [ 44.105970][ T5920] tipc: New replicast peer: 255.255.255.255 [ 44.106187][ T5920] tipc: Enabled bearer , priority 10 [ 44.109627][ T5920] netlink: 'syz.4.367': attribute type 4 has an invalid length. [ 44.214045][ T5936] binder: 5935:5936 ERROR: BC_REGISTER_LOOPER called without request [ 44.214496][ T5936] binder: 5935:5936 got reply transaction with no transaction stack [ 44.214539][ T5936] binder: 5935:5936 transaction reply to 0:0 failed 1/29201/-71, code 0 size 0--3 line 3139 [ 44.288368][ T5943] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.365485][ T5951] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.382: bad orphan inode 11862016 [ 44.365521][ T5951] loop3: lost filesystem error report for type 5 error -117 [ 44.368219][ T5951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.406526][ T5955] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.434316][ T5955] overlayfs: upper fs needs to support d_type. [ 44.465763][ T4705] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.466540][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.582029][ T5972] set_capacity_and_notify: 4 callbacks suppressed [ 44.585476][ T5972] loop4: detected capacity change from 0 to 512 [ 44.587673][ T5972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.595300][ T5972] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.389: invalid block [ 44.595350][ T5972] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.597080][ T5972] EXT4-fs (loop4): Remounting filesystem read-only [ 44.597352][ T5972] EXT4-fs (loop4): 2 truncates cleaned up [ 44.597917][ T5972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.658763][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.891262][ T4708] Bluetooth: hci1: command tx timeout [ 44.895895][ T6024] loop6: detected capacity change from 0 to 4096 [ 44.900182][ T6024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.921525][ T6024] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.939598][ T5398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.974793][ T4708] Bluetooth: hci4: command tx timeout [ 45.026748][ T6047] loop1: detected capacity change from 0 to 512 [ 45.034141][ T6047] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.043102][ T6047] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.050609][ T6047] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.413: bg 0: block 248: padding at end of block bitmap is not set [ 45.050654][ T6047] loop1: lost filesystem error report for type 5 error -117 [ 45.051237][ T6047] Quota error (device loop1): write_blk: dquota write failed [ 45.051283][ T6047] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 45.051308][ T6047] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.413: Failed to acquire dquot type 1 [ 45.051324][ T6047] loop1: lost filesystem error report for type 5 error -28 [ 45.054664][ T6047] EXT4-fs (loop1): 1 truncate cleaned up [ 45.055112][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 45.125999][ T39] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 45.126037][ T39] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 45.167918][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 45.223781][ T4814] tipc: Node number set to 2886997007 [ 45.230060][ T26] IPVS: starting estimator thread 0... [ 45.250851][ T6068] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 45.321915][ T6072] IPVS: using max 58 ests per chain, 139200 per kthread [ 45.406417][ T6092] loop3: detected capacity change from 0 to 1024 [ 45.438144][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.449597][ T6092] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.431: lblock 3 mapped to illegal pblock 3 (length 3) [ 45.455350][ T6092] EXT4-fs (loop3): Remounting filesystem read-only [ 45.518509][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.570358][ T6105] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 45.710941][ T6118] loop6: detected capacity change from 0 to 256 [ 45.716495][ T6118] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.736333][ T6120] loop1: detected capacity change from 0 to 4096 [ 45.758186][ T6120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.827784][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.845143][ T6129] loop5: detected capacity change from 0 to 512 [ 45.855901][ T6129] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.449: corrupted in-inode xattr: invalid ea_ino [ 45.855935][ T6129] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.856084][ T6129] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.449: couldn't read orphan inode 15 (err -117) [ 45.856097][ T6129] loop5: lost filesystem error report for type 5 error -117 [ 45.856629][ T6129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.941778][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.363787][ T6181] __nla_validate_parse: 3 callbacks suppressed [ 46.363825][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.471'. [ 46.670328][ T6217] loop1: detected capacity change from 0 to 512 [ 46.682129][ T6217] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.483: inode has both inline data and extents flags [ 46.684802][ T6217] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.685130][ T6217] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.483: couldn't read orphan inode 15 (err -117) [ 46.689594][ T6217] loop1: lost filesystem error report for type 5 error -117 [ 46.689910][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 46.689938][ C1] EXT4-fs (loop1): initial error at time 46: ext4_orphan_get:1397: inode 15 [ 46.689971][ C1] EXT4-fs (loop1): last error at time 46: ext4_orphan_get:1402 [ 46.696263][ T6217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.734542][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.025759][ T6262] loop6: detected capacity change from 0 to 4096 [ 47.029285][ T6262] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.031566][ T6262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.038163][ T6262] netlink: 44 bytes leftover after parsing attributes in process `syz.6.504'. [ 47.038196][ T6262] netlink: 92 bytes leftover after parsing attributes in process `syz.6.504'. [ 47.050384][ T4708] Bluetooth: hci4: command tx timeout [ 47.053016][ T5398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.267326][ T6289] loop3: detected capacity change from 0 to 2048 [ 47.282245][ T6289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.308213][ T6289] fs-verity (loop3, inode 13): Unknown hash algorithm number: 6 [ 47.358454][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.439469][ T6308] EXT4-fs: Ignoring removed orlov option [ 47.456666][ T6308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.514057][ T5237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.580613][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.533'. [ 47.681360][ T6346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.539'. [ 47.700369][ T15] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 47.700461][ T15] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 47.723469][ T4814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 47.811223][ T4814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 47.889579][ T6372] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.917899][ T6379] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.973719][ T6379] syz.3.556: attempt to access beyond end of device [ 47.973719][ T6379] loop3: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 47.977761][ T6379] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 47.977828][ T6379] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 48.036032][ T6391] netlink: 104 bytes leftover after parsing attributes in process `syz.1.562'. [ 48.078323][ T6394] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.124790][ T6401] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 48.141252][ T6401] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 48.220124][ T4814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 48.271579][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.5.576'. [ 48.503374][ T6451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.512837][ T6453] serio: Serial port ttynull [ 48.538086][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.838171][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 48.838228][ T6493] netlink: 43 bytes leftover after parsing attributes in process `syz.4.606'. [ 48.898419][ T6500] EXT4-fs: inline encryption not supported [ 48.898456][ T6500] EXT4-fs: Ignoring removed oldalloc option [ 48.914076][ T6500] EXT4-fs (loop6): 1 truncate cleaned up [ 48.914555][ T6500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.936044][ T6486] Injecting memory failure for pfn 0x13db1a at process virtual address 0x20000000 [ 48.938747][ T6486] Memory failure: 0x13db1a: keeping poisoned page in swap cache [ 48.938910][ T6486] Memory failure: 0x13db1a: recovery action for clean swapcache page: Recovered [ 48.938938][ T6486] Injecting memory failure for pfn 0x13db1c at process virtual address 0x20001000 [ 48.941260][ T6486] Memory failure: 0x13db1c: keeping poisoned page in swap cache [ 48.941308][ T6486] Memory failure: 0x13db1c: recovery action for clean swapcache page: Recovered [ 48.941340][ T6486] Injecting memory failure for pfn 0x13db1b at process virtual address 0x20002000 [ 48.941376][ T6486] Memory failure: 0x13db1b: keeping poisoned page in swap cache [ 48.941399][ T6486] Memory failure: 0x13db1b: recovery action for clean swapcache page: Recovered [ 48.941418][ T6486] Injecting memory failure for pfn 0x13db17 at process virtual address 0x20003000 [ 48.941442][ T6486] Memory failure: 0x13db17: keeping poisoned page in swap cache [ 48.941462][ T6486] Memory failure: 0x13db17: recovery action for clean swapcache page: Recovered [ 48.941479][ T6486] Injecting memory failure for pfn 0x13db16 at process virtual address 0x20004000 [ 48.941511][ T6486] Memory failure: 0x13db16: keeping poisoned page in swap cache [ 48.941545][ T6486] Memory failure: 0x13db16: recovery action for clean swapcache page: Recovered [ 48.941680][ T6486] Injecting memory failure for pfn 0x11f895 at process virtual address 0x20005000 [ 48.941720][ T6486] Memory failure: 0x11f895: keeping poisoned page in swap cache [ 48.941740][ T6486] Memory failure: 0x11f895: recovery action for clean swapcache page: Recovered [ 48.941757][ T6486] Injecting memory failure for pfn 0x117cd7 at process virtual address 0x20006000 [ 48.941778][ T6486] Memory failure: 0x117cd7: keeping poisoned page in swap cache [ 48.941797][ T6486] Memory failure: 0x117cd7: recovery action for clean swapcache page: Recovered [ 48.941813][ T6486] Injecting memory failure for pfn 0x13a907 at process virtual address 0x20007000 [ 48.941834][ T6486] Memory failure: 0x13a907: keeping poisoned page in swap cache [ 48.941851][ T6486] Memory failure: 0x13a907: recovery action for clean swapcache page: Recovered [ 48.941867][ T6486] Injecting memory failure for pfn 0x11f451 at process virtual address 0x20008000 [ 48.941887][ T6486] Memory failure: 0x11f451: keeping poisoned page in swap cache [ 48.941905][ T6486] Memory failure: 0x11f451: recovery action for clean swapcache page: Recovered [ 48.941920][ T6486] Injecting memory failure for pfn 0x11f7af at process virtual address 0x20009000 [ 48.941940][ T6486] Memory failure: 0x11f7af: keeping poisoned page in swap cache [ 48.942618][ T6486] Memory failure: 0x11f7af: recovery action for clean swapcache page: Recovered [ 48.942651][ T6486] Injecting memory failure for pfn 0x134753 at process virtual address 0x2000a000 [ 48.942691][ T6486] Memory failure: 0x134753: keeping poisoned page in swap cache [ 48.942716][ T6486] Memory failure: 0x134753: recovery action for clean swapcache page: Recovered [ 48.942734][ T6486] Injecting memory failure for pfn 0x1234a9 at process virtual address 0x2000b000 [ 48.942757][ T6486] Memory failure: 0x1234a9: keeping poisoned page in swap cache [ 48.942775][ T6486] Memory failure: 0x1234a9: recovery action for clean swapcache page: Recovered [ 48.942792][ T6486] Injecting memory failure for pfn 0x11e688 at process virtual address 0x2000c000 [ 48.942811][ T6486] Memory failure: 0x11e688: keeping poisoned page in swap cache [ 48.942829][ T6486] Memory failure: 0x11e688: recovery action for clean swapcache page: Recovered [ 48.942962][ T6486] Injecting memory failure for pfn 0x11f8df at process virtual address 0x2000d000 [ 48.943014][ T6486] Memory failure: 0x11f8df: keeping poisoned page in swap cache [ 48.943032][ T6486] Memory failure: 0x11f8df: recovery action for clean swapcache page: Recovered [ 48.943048][ T6486] Injecting memory failure for pfn 0x13dab9 at process virtual address 0x2000e000 [ 48.943067][ T6486] Memory failure: 0x13dab9: keeping poisoned page in swap cache [ 48.943085][ T6486] Memory failure: 0x13dab9: recovery action for clean swapcache page: Recovered [ 48.943101][ T6486] Injecting memory failure for pfn 0x11ffaf at process virtual address 0x2000f000 [ 48.943120][ T6486] Memory failure: 0x11ffaf: keeping poisoned page in swap cache [ 48.943137][ T6486] Memory failure: 0x11ffaf: recovery action for clean swapcache page: Recovered [ 48.943153][ T6486] Injecting memory failure for pfn 0x13ce6e at process virtual address 0x20010000 [ 48.943172][ T6486] Memory failure: 0x13ce6e: keeping poisoned page in swap cache [ 48.943190][ T6486] Memory failure: 0x13ce6e: recovery action for clean swapcache page: Recovered [ 48.943205][ T6486] Injecting memory failure for pfn 0x13daaa at process virtual address 0x20011000 [ 48.943224][ T6486] Memory failure: 0x13daaa: keeping poisoned page in swap cache [ 48.943242][ T6486] Memory failure: 0x13daaa: recovery action for clean swapcache page: Recovered [ 48.943257][ T6486] Injecting memory failure for pfn 0x13abe1 at process virtual address 0x20012000 [ 48.943276][ T6486] Memory failure: 0x13abe1: keeping poisoned page in swap cache [ 48.943293][ T6486] Memory failure: 0x13abe1: recovery action for clean swapcache page: Recovered [ 48.943309][ T6486] Injecting memory failure for pfn 0x13daad at process virtual address 0x20013000 [ 48.943328][ T6486] Memory failure: 0x13daad: keeping poisoned page in swap cache [ 48.943345][ T6486] Memory failure: 0x13daad: recovery action for clean swapcache page: Recovered [ 48.943360][ T6486] Injecting memory failure for pfn 0x13daaf at process virtual address 0x20014000 [ 48.943379][ T6486] Memory failure: 0x13daaf: keeping poisoned page in swap cache [ 48.943397][ T6486] Memory failure: 0x13daaf: recovery action for clean swapcache page: Recovered [ 48.943545][ T6486] Injecting memory failure for pfn 0x11f6d6 at process virtual address 0x20015000 [ 48.943628][ T6486] Memory failure: 0x11f6d6: keeping poisoned page in swap cache [ 48.944866][ T6486] Memory failure: 0x11f6d6: recovery action for clean swapcache page: Recovered [ 48.944894][ T6486] Injecting memory failure for pfn 0x1232fe at process virtual address 0x20016000 [ 48.944930][ T6486] Memory failure: 0x1232fe: keeping poisoned page in swap cache [ 48.944953][ T6486] Memory failure: 0x1232fe: recovery action for clean swapcache page: Recovered [ 48.944970][ T6486] Injecting memory failure for pfn 0x13ce5c at process virtual address 0x20017000 [ 48.944993][ T6486] Memory failure: 0x13ce5c: keeping poisoned page in swap cache [ 48.945012][ T6486] Memory failure: 0x13ce5c: recovery action for clean swapcache page: Recovered [ 48.945029][ T6486] Injecting memory failure for pfn 0x13ce63 at process virtual address 0x20018000 [ 48.945050][ T6486] Memory failure: 0x13ce63: keeping poisoned page in swap cache [ 48.945069][ T6486] Memory failure: 0x13ce63: recovery action for clean swapcache page: Recovered [ 48.945085][ T6486] Injecting memory failure for pfn 0x13ad24 at process virtual address 0x20019000 [ 48.945105][ T6486] Memory failure: 0x13ad24: keeping poisoned page in swap cache [ 48.945124][ T6486] Memory failure: 0x13ad24: recovery action for clean swapcache page: Recovered [ 48.945140][ T6486] Injecting memory failure for pfn 0x13ce55 at process virtual address 0x2001a000 [ 48.945159][ T6486] Memory failure: 0x13ce55: keeping poisoned page in swap cache [ 48.945177][ T6486] Memory failure: 0x13ce55: recovery action for clean swapcache page: Recovered [ 48.945193][ T6486] Injecting memory failure for pfn 0x13af03 at process virtual address 0x2001b000 [ 48.945212][ T6486] Memory failure: 0x13af03: keeping poisoned page in swap cache [ 48.945230][ T6486] Memory failure: 0x13af03: recovery action for clean swapcache page: Recovered [ 48.945246][ T6486] Injecting memory failure for pfn 0x11e2bf at process virtual address 0x2001c000 [ 48.945265][ T6486] Memory failure: 0x11e2bf: keeping poisoned page in swap cache [ 48.945283][ T6486] Memory failure: 0x11e2bf: recovery action for clean swapcache page: Recovered [ 48.945407][ T6486] Injecting memory failure for pfn 0x11f894 at process virtual address 0x2001d000 [ 48.945441][ T6486] Memory failure: 0x11f894: keeping poisoned page in swap cache [ 48.945459][ T6486] Memory failure: 0x11f894: recovery action for clean swapcache page: Recovered [ 48.945474][ T6486] Injecting memory failure for pfn 0x13ce53 at process virtual address 0x2001e000 [ 48.945494][ T6486] Memory failure: 0x13ce53: keeping poisoned page in swap cache [ 48.945520][ T6486] Memory failure: 0x13ce53: recovery action for clean swapcache page: Recovered [ 48.945538][ T6486] Injecting memory failure for pfn 0x13a63a at process virtual address 0x2001f000 [ 48.945558][ T6486] Memory failure: 0x13a63a: keeping poisoned page in swap cache [ 48.945576][ T6486] Memory failure: 0x13a63a: recovery action for clean swapcache page: Recovered [ 48.945591][ T6486] Injecting memory failure for pfn 0x123457 at process virtual address 0x20020000 [ 48.945611][ T6486] Memory failure: 0x123457: keeping poisoned page in swap cache [ 48.945628][ T6486] Memory failure: 0x123457: recovery action for clean swapcache page: Recovered [ 48.945644][ T6486] Injecting memory failure for pfn 0x11f6d4 at process virtual address 0x20021000 [ 48.945663][ T6486] Memory failure: 0x11f6d4: keeping poisoned page in swap cache [ 48.945681][ T6486] Memory failure: 0x11f6d4: recovery action for clean swapcache page: Recovered [ 48.945696][ T6486] Injecting memory failure for pfn 0x13c69c at process virtual address 0x20022000 [ 48.945715][ T6486] Memory failure: 0x13c69c: keeping poisoned page in swap cache [ 48.945732][ T6486] Memory failure: 0x13c69c: recovery action for clean swapcache page: Recovered [ 48.945748][ T6486] Injecting memory failure for pfn 0x13d2b8 at process virtual address 0x20023000 [ 48.945767][ T6486] Memory failure: 0x13d2b8: keeping poisoned page in swap cache [ 48.945784][ T6486] Memory failure: 0x13d2b8: recovery action for clean swapcache page: Recovered [ 48.945799][ T6486] Injecting memory failure for pfn 0x13d25e at process virtual address 0x20024000 [ 48.945819][ T6486] Memory failure: 0x13d25e: keeping poisoned page in swap cache [ 48.945836][ T6486] Memory failure: 0x13d25e: recovery action for clean swapcache page: Recovered [ 48.947173][ T6486] Injecting memory failure for pfn 0x13d25d at process virtual address 0x20025000 [ 48.947241][ T6486] Memory failure: 0x13d25d: keeping poisoned page in swap cache [ 48.947263][ T6486] Memory failure: 0x13d25d: recovery action for clean swapcache page: Recovered [ 48.947284][ T6486] Injecting memory failure for pfn 0x13d23c at process virtual address 0x20026000 [ 48.947307][ T6486] Memory failure: 0x13d23c: keeping poisoned page in swap cache [ 48.947327][ T6486] Memory failure: 0x13d23c: recovery action for clean swapcache page: Recovered [ 48.947344][ T6486] Injecting memory failure for pfn 0x13d1fc at process virtual address 0x20027000 [ 48.947365][ T6486] Memory failure: 0x13d1fc: keeping poisoned page in swap cache [ 48.947384][ T6486] Memory failure: 0x13d1fc: recovery action for clean swapcache page: Recovered [ 48.947401][ T6486] Injecting memory failure for pfn 0x13d1bc at process virtual address 0x20028000 [ 48.947421][ T6486] Memory failure: 0x13d1bc: keeping poisoned page in swap cache [ 48.947439][ T6486] Memory failure: 0x13d1bc: recovery action for clean swapcache page: Recovered [ 48.947456][ T6486] Injecting memory failure for pfn 0x13ce50 at process virtual address 0x20029000 [ 48.947476][ T6486] Memory failure: 0x13ce50: keeping poisoned page in swap cache [ 48.947493][ T6486] Memory failure: 0x13ce50: recovery action for clean swapcache page: Recovered [ 48.947518][ T6486] Injecting memory failure for pfn 0x13ce24 at process virtual address 0x2002a000 [ 48.947776][ T6486] Memory failure: 0x13ce24: keeping poisoned page in swap cache [ 48.947801][ T6486] Memory failure: 0x13ce24: recovery action for clean swapcache page: Recovered [ 48.947821][ T6486] Injecting memory failure for pfn 0x13cde4 at process virtual address 0x2002b000 [ 48.947916][ T6486] Memory failure: 0x13cde4: keeping poisoned page in swap cache [ 48.947934][ T6486] Memory failure: 0x13cde4: recovery action for clean swapcache page: Recovered [ 48.947951][ T6486] Injecting memory failure for pfn 0x13cda4 at process virtual address 0x2002c000 [ 48.947971][ T6486] Memory failure: 0x13cda4: keeping poisoned page in swap cache [ 48.947989][ T6486] Memory failure: 0x13cda4: recovery action for clean swapcache page: Recovered [ 48.949875][ T6486] Injecting memory failure for pfn 0x13cd64 at process virtual address 0x2002d000 [ 49.003187][ T6486] Memory failure: 0x13cd64: clean swapcache page still referenced by 2 users [ 49.003201][ T6486] Memory failure: 0x13cd64: recovery action for clean swapcache page: Failed [ 49.043813][ T5398] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.103296][ T4708] block nbd0: Receive control failed (result -32) [ 49.124588][ T4697] block nbd0: Dead connection, failed to find a fallback [ 49.124602][ T4697] block nbd0: shutting down sockets [ 49.124628][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.124654][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.124718][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.124729][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.124766][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.124776][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.124811][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.124820][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.124854][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.124864][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.124925][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.124934][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.124973][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.124983][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.125016][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.125025][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.125046][ T4697] ldm_validate_partition_table(): Disk read failed. [ 49.125071][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.125080][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.125114][ T4697] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 49.125123][ T4697] Buffer I/O error on dev nbd0, logical block 0, async page read [ 49.125202][ T4697] Dev nbd0: unable to read RDB block 0 [ 49.125355][ T4697] nbd0: unable to read partition table [ 49.171426][ T4697] ldm_validate_partition_table(): Disk read failed. [ 49.171548][ T4697] Dev nbd0: unable to read RDB block 0 [ 49.171668][ T4697] nbd0: unable to read partition table [ 49.332461][ T6524] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.332507][ T6524] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 49.346562][ T6524] EXT4-fs (loop5): 1 orphan inode deleted [ 49.346588][ T6524] EXT4-fs (loop5): 1 truncate cleaned up [ 49.347331][ T6524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.413977][ T6534] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 49.413977][ T6534] The task syz.6.620 (6534) triggered the difference, watch for misbehavior. [ 49.523117][ T6550] Bluetooth: MGMT ver 1.23 [ 49.780663][ T6580] set_capacity_and_notify: 8 callbacks suppressed [ 49.782205][ T6580] loop3: detected capacity change from 0 to 256 [ 49.795810][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.642'. [ 49.889174][ T6588] can0: slcan on ptm0. [ 49.943796][ T6591] loop3: detected capacity change from 0 to 1024 [ 49.945539][ T6591] EXT4-fs: inline encryption not supported [ 49.947740][ T6591] EXT4-fs: Ignoring removed bh option [ 49.950821][ T6587] can0 (unregistered): slcan off ptm0. [ 49.953676][ T6591] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 50.044897][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.047749][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.065205][ T6603] loop9: detected capacity change from 0 to 7 [ 50.069043][ T6603] ldm_validate_partition_table(): Disk read failed. [ 50.071305][ T6603] Dev loop9: unable to read RDB block 0 [ 50.071578][ T6603] loop9: unable to read partition table [ 50.071912][ T6603] loop9: partition table beyond EOD, truncated [ 50.072249][ T6603] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 50.154294][ T6615] ipvlan1: Caught tx_queue_len zero misconfig [ 50.606130][ T6647] sctp: [Deprecated]: syz.5.673 (pid 6647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.606130][ T6647] Use struct sctp_sack_info instead [ 50.652132][ T6652] loop5: detected capacity change from 0 to 512 [ 50.659716][ T6652] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.676: casefold flag without casefold feature [ 50.659753][ T6652] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.662204][ T6652] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.676: couldn't read orphan inode 15 (err -117) [ 50.662889][ T6652] loop5: lost filesystem error report for type 5 error -117 [ 50.712153][ T6655] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 50.791618][ T6659] random: crng reseeded on system resumption [ 50.881306][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.886541][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.930716][ T6668] fido_id[6668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.066611][ T6678] loop1: detected capacity change from 0 to 8 [ 51.397147][ T6712] __nla_validate_parse: 4 callbacks suppressed [ 51.397190][ T6712] netlink: 64 bytes leftover after parsing attributes in process `syz.4.704'. [ 51.441228][ T6719] input: syz0 as /devices/virtual/input/input6 [ 51.529961][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.590833][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.5.712'. [ 51.633242][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.717'. [ 52.045734][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.735'. [ 52.088193][ T6786] netlink: 312 bytes leftover after parsing attributes in process `syz.3.737'. [ 52.243160][ T6811] loop8: detected capacity change from 0 to 8 [ 52.243618][ T6811] ldm_validate_partition_table(): Disk read failed. [ 52.243711][ T6811] Dev loop8: unable to read RDB block 0 [ 52.243782][ T6811] loop8: unable to read partition table [ 52.243833][ T6811] loop8: partition table beyond EOD, truncated [ 52.243842][ T6811] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 52.296584][ T6818] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 52.296613][ T6818] netlink: 'syz.4.746': attribute type 2 has an invalid length. [ 52.303707][ T6818] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 52.303737][ T6818] netlink: 'syz.4.746': attribute type 2 has an invalid length. [ 52.404400][ T6833] netlink: 116 bytes leftover after parsing attributes in process `syz.3.750'. [ 52.411816][ T6832] loop1: detected capacity change from 0 to 1024 [ 52.417851][ T6832] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.440905][ T6832] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.751: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.440940][ T6832] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.444040][ T6832] Quota error (device loop1): write_blk: dquota write failed [ 52.444073][ T6832] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 52.444106][ T6832] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.751: Failed to acquire dquot type 0 [ 52.444125][ T6832] loop1: lost filesystem error report for type 5 error -117 [ 52.456277][ T6832] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.751: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.456307][ T6832] loop1: lost filesystem error report for type 5 error -117 [ 52.460952][ C1] EXT4-fs (loop1): error count since last fsck: 3 [ 52.460968][ C1] EXT4-fs (loop1): initial error at time 52: ext4_map_blocks:833: inode 3: block 1 [ 52.460992][ C1] EXT4-fs (loop1): last error at time 52: ext4_free_blocks:6718 [ 52.476533][ T6832] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.751: Invalid inode bitmap blk 0 in block_group 0 [ 52.476573][ T6832] loop1: lost filesystem error report for type 5 error -117 [ 52.479394][ T6832] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 52.479424][ T6832] loop1: lost filesystem error report for type 5 error -117 [ 52.483924][ T6832] EXT4-fs (loop1): 1 orphan inode deleted [ 52.508924][ T39] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.508964][ T39] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 52.509632][ T39] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 52.509651][ T39] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 0 [ 52.509666][ T39] loop1: lost filesystem error report for type 5 error -117 [ 52.551426][ T6832] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.751: Invalid inode table block 18446744069414584321 in block_group 0 [ 52.557436][ T6832] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 52.735575][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 52.791076][ T6893] netlink: 108 bytes leftover after parsing attributes in process `syz.6.770'. [ 52.853845][ T6905] loop6: detected capacity change from 0 to 1024 [ 53.019589][ T6927] batadv_slave_0: Caught tx_queue_len zero misconfig [ 53.145442][ T6950] loop3: detected capacity change from 0 to 256 [ 53.145894][ T6950] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.149565][ T6950] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.323886][ T6973] loop4: detected capacity change from 0 to 4096 [ 53.324223][ T6973] EXT4-fs: inline encryption not supported [ 53.328192][ T6973] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 53.436325][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.450082][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.452104][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.455509][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.455759][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.564341][ T7004] FAT-fs (loop4): Directory bread(block 64) failed [ 53.564374][ T7004] FAT-fs (loop4): Directory bread(block 65) failed [ 53.564417][ T7004] FAT-fs (loop4): Directory bread(block 66) failed [ 53.564434][ T7004] FAT-fs (loop4): Directory bread(block 67) failed [ 53.564463][ T7004] FAT-fs (loop4): Directory bread(block 68) failed [ 53.564479][ T7004] FAT-fs (loop4): Directory bread(block 69) failed [ 53.564506][ T7004] FAT-fs (loop4): Directory bread(block 70) failed [ 53.564525][ T7004] FAT-fs (loop4): Directory bread(block 71) failed [ 53.564553][ T7004] FAT-fs (loop4): Directory bread(block 72) failed [ 53.564568][ T7004] FAT-fs (loop4): Directory bread(block 73) failed [ 53.880210][ T7054] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.935681][ T15] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.988476][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.996823][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.996931][ T6987] bridge_slave_0: entered allmulticast mode [ 53.997408][ T6987] bridge_slave_0: entered promiscuous mode [ 54.011958][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.014430][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.022300][ T6987] bridge_slave_1: entered allmulticast mode [ 54.023961][ T6987] bridge_slave_1: entered promiscuous mode [ 54.069517][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.074354][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.099173][ T6987] team0: Port device team_slave_0 added [ 54.112221][ T6987] team0: Port device team_slave_1 added [ 54.141823][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 54.163413][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.164978][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.170144][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.179720][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.182369][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.182433][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.211660][ T6987] hsr_slave_0: entered promiscuous mode [ 54.212002][ T6987] hsr_slave_1: entered promiscuous mode [ 54.212205][ T6987] debugfs: 'hsr0' already exists in 'hsr' [ 54.212215][ T6987] Cannot create hsr debugfs directory [ 54.277873][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 54.365954][ T30] audit: type=1326 audit(54.350:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7128 comm="syz.3.845" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad177aa8 code=0x7ffc0000 [ 54.370412][ T30] audit: type=1326 audit(54.350:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7128 comm="syz.3.845" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffad177aa8 code=0x7ffc0000 [ 54.374825][ T30] audit: type=1326 audit(54.350:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7128 comm="syz.3.845" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad177aa8 code=0x7ffc0000 [ 54.379402][ T30] audit: type=1326 audit(54.350:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7128 comm="syz.3.845" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad177aa8 code=0x7ffc0000 [ 54.383947][ T30] audit: type=1326 audit(54.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7128 comm="syz.3.845" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffad177aa8 code=0x7ffc0000 [ 54.388777][ T30] audit: type=1326 audit(54.350:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7128 comm="syz.3.845" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffad1777a0 code=0x7ffc0000 [ 54.388820][ T30] audit: type=1326 audit(54.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7128 comm="syz.3.845" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffad1777a0 code=0x7ffc0000 [ 54.409385][ T6987] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 54.419273][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.423068][ T7131] fscrypt (loop5, inode 12): Unsupported encryption flags (0x3d) [ 54.423085][ T6987] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 54.444076][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.447839][ T6987] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 54.458071][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.462147][ T6987] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 54.477567][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.586076][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.638048][ T6987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.641944][ T7161] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.853: missing EA_INODE flag [ 54.648280][ T7161] EXT4-fs (loop5): Remounting filesystem read-only [ 54.648435][ T7161] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 54.678017][ T6987] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.707458][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.712823][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.712864][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.714294][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.714315][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.787575][ T7185] EXT4-fs: Ignoring removed nobh option [ 54.811294][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.911600][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.031769][ T7222] tap0: tun_chr_ioctl cmd 1074025673 [ 55.075503][ T7232] set_capacity_and_notify: 6 callbacks suppressed [ 55.082648][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.093349][ T7232] loop3: detected capacity change from 0 to 512 [ 55.102834][ T7232] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.112098][ T7232] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.112337][ T7232] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.873: bg 0: block 248: padding at end of block bitmap is not set [ 55.112352][ T7232] loop3: lost filesystem error report for type 5 error -117 [ 55.112804][ T7232] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.873: Failed to acquire dquot type 1 [ 55.112817][ T7232] loop3: lost filesystem error report for type 5 error -28 [ 55.113405][ T7232] EXT4-fs (loop3): 1 truncate cleaned up [ 55.177610][ T39] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 55.531354][ T50] Bluetooth: hci4: command tx timeout [ 56.020198][ T40] bridge_slave_1: left allmulticast mode [ 56.020242][ T40] bridge_slave_1: left promiscuous mode [ 56.020351][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.023518][ T40] bridge_slave_0: left allmulticast mode [ 56.023532][ T40] bridge_slave_0: left promiscuous mode [ 56.023596][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.144308][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.182691][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.191129][ T40] bond0 (unregistering): Released all slaves [ 56.267453][ T6987] veth0_vlan: entered promiscuous mode [ 56.282032][ T6987] veth1_vlan: entered promiscuous mode [ 56.287440][ T6987] veth0_macvtap: entered promiscuous mode [ 56.308745][ T6987] veth1_macvtap: entered promiscuous mode [ 56.316582][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.321907][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.354657][ T1243] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.354910][ T1243] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.354935][ T1243] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.354956][ T1243] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.358253][ T7287] loop4: detected capacity change from 0 to 512 [ 56.524613][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.524638][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.550689][ T4395] 8021q: adding VLAN 0 to HW filter on device eth8 [ 56.558861][ T1418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.558885][ T1418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.659289][ T7332] loop7: detected capacity change from 0 to 512 [ 56.663130][ T7332] EXT4-fs: Ignoring removed i_version option [ 56.666137][ T7332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.668231][ T40] hsr_slave_0: left promiscuous mode [ 56.670774][ T40] hsr_slave_1: left promiscuous mode [ 56.674807][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.674845][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.678200][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.678223][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.690682][ T7332] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.800: invalid block [ 56.693529][ T7332] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.696127][ T7332] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.800: invalid indirect mapped block 4294967295 (level 1) [ 56.699375][ T40] veth1_macvtap: left promiscuous mode [ 56.699397][ T40] veth0_macvtap: left promiscuous mode [ 56.699429][ T40] veth1_vlan: left promiscuous mode [ 56.699453][ T40] veth0_vlan: left promiscuous mode [ 56.699782][ T7332] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.701353][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 56.701368][ C1] EXT4-fs (loop7): initial error at time 56: ext4_get_branch:178: inode 11: block 4294967295 [ 56.701388][ C1] EXT4-fs (loop7): last error at time 56: ext4_free_branches:1023: inode 11 [ 56.702373][ T7332] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.800: invalid indirect mapped block 4294967295 (level 1) [ 56.702407][ T7332] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.703979][ T7332] EXT4-fs (loop7): 2 truncates cleaned up [ 56.728531][ T7332] EXT4-fs (loop7): Online defrag not supported for non-extent files [ 56.820069][ T50] block nbd1: Receive control failed (result -32) [ 56.820735][ T4708] block nbd1: Receive control failed (result -32) [ 56.885714][ T7355] __nla_validate_parse: 4 callbacks suppressed [ 56.886953][ T7355] netlink: 724 bytes leftover after parsing attributes in process `syz.5.905'. [ 56.889010][ T7355] netlink: 724 bytes leftover after parsing attributes in process `syz.5.905'. [ 56.984000][ T40] team0 (unregistering): Port device team_slave_1 removed [ 57.002938][ T40] team0 (unregistering): Port device team_slave_0 removed [ 57.180575][ T4395] 8021q: adding VLAN 0 to HW filter on device eth10 [ 57.217982][ T7388] loop5: detected capacity change from 0 to 512 [ 57.224800][ T7388] EXT4-fs: Ignoring removed oldalloc option [ 57.226634][ T7388] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.243990][ T7388] EXT4-fs (loop5): 1 truncate cleaned up [ 57.320596][ T5237] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 57.329177][ T5237] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 57.334100][ T7402] loop7: detected capacity change from 0 to 128 [ 57.406877][ T4712] IPVS: starting estimator thread 0... [ 57.423651][ T7414] loop3: detected capacity change from 0 to 512 [ 57.426712][ T7414] EXT4-fs: inline encryption not supported [ 57.427955][ T7414] EXT4-fs: inline encryption not supported [ 57.437114][ T7414] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.466742][ T7414] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 57.466969][ T7414] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.930: bg 0: block 248: padding at end of block bitmap is not set [ 57.466983][ T7414] loop3: lost filesystem error report for type 5 error -117 [ 57.467165][ T7414] __quota_error: 7 callbacks suppressed [ 57.467171][ T7414] Quota error (device loop3): write_blk: dquota write failed [ 57.467194][ T7414] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 57.467211][ T7414] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.930: Failed to acquire dquot type 1 [ 57.467221][ T7414] loop3: lost filesystem error report for type 5 error -28 [ 57.467663][ T7414] EXT4-fs (loop3): 1 truncate cleaned up [ 57.493293][ T40] IPVS: stop unused estimator thread 0... [ 57.501140][ T7413] IPVS: using max 58 ests per chain, 139200 per kthread [ 57.535307][ T7414] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 57.610093][ T4708] Bluetooth: hci4: command tx timeout [ 57.701732][ T4395] 8021q: adding VLAN 0 to HW filter on device eth9 [ 57.801451][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.802237][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.802496][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.803077][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.803388][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.919620][ T7472] loop7: detected capacity change from 0 to 512 [ 57.988913][ T7472] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #12: comm syz.7.951: invalid size [ 58.246854][ T4395] 8021q: adding VLAN 0 to HW filter on device eth11 [ 58.343851][ T7521] ªªªªªª: renamed from vlan0 (while UP) [ 58.396549][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.398858][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.400699][ T7457] bridge_slave_0: entered allmulticast mode [ 58.406884][ T7457] bridge_slave_0: entered promiscuous mode [ 58.407604][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.407639][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.407711][ T7457] bridge_slave_1: entered allmulticast mode [ 58.408135][ T7457] bridge_slave_1: entered promiscuous mode [ 58.414760][ T7528] loop3: detected capacity change from 0 to 512 [ 58.419749][ T7528] EXT4-fs (loop3): 1 truncate cleaned up [ 58.454746][ T7457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.455699][ T7457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.505360][ T7457] team0: Port device team_slave_0 added [ 58.516315][ T7457] team0: Port device team_slave_1 added [ 58.588143][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.588173][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.588188][ T7457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.588727][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.588734][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.588748][ T7457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.655331][ T7457] hsr_slave_0: entered promiscuous mode [ 58.671185][ T7457] hsr_slave_1: entered promiscuous mode [ 58.671421][ T7457] debugfs: 'hsr0' already exists in 'hsr' [ 58.671438][ T7457] Cannot create hsr debugfs directory [ 58.704912][ T7557] loop4: detected capacity change from 0 to 512 [ 58.837616][ T7457] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 58.852615][ T7575] loop1: detected capacity change from 0 to 512 [ 58.852851][ T7457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.853128][ T7457] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 58.869211][ T7457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.880301][ T7457] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 58.895328][ T7457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.897228][ T7576] netlink: 'syz.7.986': attribute type 5 has an invalid length. [ 58.906820][ T7457] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 58.908498][ T7572] EXT4-fs: Cannot change journaled quota options when quota turned on [ 58.915050][ T7457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.944081][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.944124][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.944211][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.944248][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.977552][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.982778][ T7457] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.994785][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.996503][ T1277] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.018039][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.018084][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.025301][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.025344][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.278501][ T7457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.369982][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 59.399317][ T7457] veth0_vlan: entered promiscuous mode [ 59.405018][ T7457] veth1_vlan: entered promiscuous mode [ 59.425220][ T7457] veth0_macvtap: entered promiscuous mode [ 59.431356][ T7457] veth1_macvtap: entered promiscuous mode [ 59.438002][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.443009][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.447822][ T1243] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.447871][ T1243] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.447893][ T1243] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.447909][ T1243] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.522700][ T1418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.522725][ T1418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.540705][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.540730][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.690530][ T50] Bluetooth: hci4: command tx timeout [ 59.851291][ T50] Bluetooth: hci1: command tx timeout [ 60.052651][ T7669] syz.8.1017: attempt to access beyond end of device [ 60.052651][ T7669] loop8: rw=0, sector=61, nr_sectors = 94 limit=128 [ 60.212193][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.317587][ T4708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.327505][ T4708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.327955][ T4708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.328294][ T4708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.328515][ T4708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.418159][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.482446][ T7715] set_capacity_and_notify: 2 callbacks suppressed [ 60.489269][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.495425][ T7715] loop8: detected capacity change from 0 to 128 [ 60.502248][ T7715] FAT-fs (loop8): bogus number of reserved sectors [ 60.503663][ T7715] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 60.503698][ T7715] FAT-fs (loop8): Can't find a valid FAT filesystem [ 60.543977][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.956500][ T7750] loop8: detected capacity change from 0 to 1024 [ 60.970644][ T40] bridge_slave_1: left allmulticast mode [ 60.970676][ T40] bridge_slave_1: left promiscuous mode [ 60.970772][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.975435][ T40] bridge_slave_0: left allmulticast mode [ 60.975448][ T40] bridge_slave_0: left promiscuous mode [ 60.975531][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.989024][ T7750] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.1046: lblock 3 mapped to illegal pblock 3 (length 3) [ 60.993251][ T7750] EXT4-fs (loop8): Remounting filesystem read-only [ 61.084819][ T7758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.222962][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.251775][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.261959][ T40] bond0 (unregistering): Released all slaves [ 61.271606][ T4395] 8021q: adding VLAN 0 to HW filter on device eth12 [ 61.273729][ T7767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.336277][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.336318][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.336418][ T7695] bridge_slave_0: entered allmulticast mode [ 61.343176][ T7695] bridge_slave_0: entered promiscuous mode [ 61.350975][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.351014][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.351084][ T7695] bridge_slave_1: entered allmulticast mode [ 61.351539][ T7695] bridge_slave_1: entered promiscuous mode [ 61.358238][ T7695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.358534][ T40] tipc: Disabling bearer [ 61.358689][ T40] tipc: Left network mode [ 61.371127][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 61.375468][ T7695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.392516][ T7695] team0: Port device team_slave_0 added [ 61.394708][ T7695] team0: Port device team_slave_1 added [ 61.403950][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.409205][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.414954][ T7695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.418264][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.422521][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 61.425368][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.425426][ T7695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.528932][ T7695] hsr_slave_0: entered promiscuous mode [ 61.529281][ T7695] hsr_slave_1: entered promiscuous mode [ 61.529475][ T7695] debugfs: 'hsr0' already exists in 'hsr' [ 61.529485][ T7695] Cannot create hsr debugfs directory [ 61.531843][ T7777] bridge_slave_0: left allmulticast mode [ 61.531858][ T7777] bridge_slave_0: left promiscuous mode [ 61.531928][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.707632][ T7801] binder: 7798:7801 got transaction to invalid handle, 2 [ 61.707666][ T7801] binder: 7798:7801 cannot find target node [ 61.707695][ T7801] binder: 7798:7801 transaction async to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3236 [ 61.773025][ T4708] Bluetooth: hci4: command tx timeout [ 61.815688][ T7811] loop7: detected capacity change from 0 to 256 [ 61.835219][ T4395] 8021q: adding VLAN 0 to HW filter on device eth13 [ 61.872888][ T7811] FAT-fs (loop7): Directory bread(block 64) failed [ 61.872923][ T7811] FAT-fs (loop7): Directory bread(block 65) failed [ 61.872947][ T7811] FAT-fs (loop7): Directory bread(block 66) failed [ 61.872959][ T7811] FAT-fs (loop7): Directory bread(block 67) failed [ 61.872981][ T7811] FAT-fs (loop7): Directory bread(block 68) failed [ 61.872991][ T7811] FAT-fs (loop7): Directory bread(block 69) failed [ 61.873013][ T7811] FAT-fs (loop7): Directory bread(block 70) failed [ 61.873023][ T7811] FAT-fs (loop7): Directory bread(block 71) failed [ 61.873044][ T7811] FAT-fs (loop7): Directory bread(block 72) failed [ 61.873054][ T7811] FAT-fs (loop7): Directory bread(block 73) failed [ 61.913457][ T7816] input: syz1 as /devices/virtual/input/input8 [ 61.931370][ T4708] Bluetooth: hci1: command tx timeout [ 61.972046][ T40] hsr_slave_0: left promiscuous mode [ 61.973233][ T40] hsr_slave_1: left promiscuous mode [ 61.973500][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.973515][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.981739][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.981770][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.997408][ T40] veth1_macvtap: left promiscuous mode [ 61.997446][ T40] veth0_macvtap: left promiscuous mode [ 61.997477][ T40] veth1_vlan: left promiscuous mode [ 61.997542][ T40] veth0_vlan: left promiscuous mode [ 62.150466][ T40] team0 (unregistering): Port device team_slave_1 removed [ 62.158287][ T40] team0 (unregistering): Port device team_slave_0 removed [ 62.233231][ T7836] tap0: tun_chr_ioctl cmd 1074025677 [ 62.234909][ T7836] tap0: linktype set to 769 [ 62.249539][ T7695] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 62.272474][ T7695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.291145][ T7695] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 62.309473][ T7695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.311793][ T7695] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 62.319573][ T7695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.321692][ T7695] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 62.327267][ T7695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.410053][ T4708] Bluetooth: hci2: command tx timeout [ 62.455465][ T7695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.470483][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 62.472258][ T7879] netlink: 'syz.1.1086': attribute type 30 has an invalid length. [ 62.474476][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 62.476606][ T7695] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.482077][ T7877] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 62.482120][ T7877] vhci_hcd vhci_hcd.2: invalid port number 96 [ 62.482131][ T7877] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 62.499282][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.499327][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.504276][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.504327][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.526091][ T7881] loop7: detected capacity change from 0 to 1024 [ 62.550900][ T7884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1089'. [ 62.575687][ T40] IPVS: stop unused estimator thread 0... [ 62.723254][ T4395] 8021q: adding VLAN 0 to HW filter on device eth14 [ 62.759633][ T7695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.793785][ T7914] loop8: detected capacity change from 0 to 512 [ 62.816599][ T7914] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.1093: inode has both inline data and extents flags [ 62.816630][ T7914] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.816770][ T7914] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1093: couldn't read orphan inode 15 (err -117) [ 62.816782][ T7914] loop8: lost filesystem error report for type 5 error -117 [ 62.900788][ T7932] loop1: detected capacity change from 0 to 256 [ 62.922982][ T7932] FAT-fs (loop1): Directory bread(block 64) failed [ 62.923018][ T7932] FAT-fs (loop1): Directory bread(block 65) failed [ 62.923047][ T7932] FAT-fs (loop1): Directory bread(block 66) failed [ 62.923059][ T7932] FAT-fs (loop1): Directory bread(block 67) failed [ 62.923083][ T7932] FAT-fs (loop1): Directory bread(block 68) failed [ 62.923094][ T7932] FAT-fs (loop1): Directory bread(block 69) failed [ 62.923116][ T7932] FAT-fs (loop1): Directory bread(block 70) failed [ 62.923127][ T7932] FAT-fs (loop1): Directory bread(block 71) failed [ 62.923149][ T7932] FAT-fs (loop1): Directory bread(block 72) failed [ 62.923159][ T7932] FAT-fs (loop1): Directory bread(block 73) failed [ 62.995291][ T7695] veth0_vlan: entered promiscuous mode [ 62.998278][ T7695] veth1_vlan: entered promiscuous mode [ 63.009029][ T7695] veth0_macvtap: entered promiscuous mode [ 63.016001][ T7695] veth1_macvtap: entered promiscuous mode [ 63.026516][ T7695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.029827][ T7695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.047969][ T7945] loop8: detected capacity change from 0 to 512 [ 63.059419][ T1277] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.059543][ T1277] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.059608][ T1277] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.059625][ T1277] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.086272][ T4395] 8021q: adding VLAN 0 to HW filter on device eth15 [ 63.098273][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.098300][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.111269][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.111292][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.121295][ T7952] netlink: 'syz.1.1102': attribute type 9 has an invalid length. [ 63.287819][ T7972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1110'. [ 63.364754][ T7983] loop1: detected capacity change from 0 to 128 [ 63.377377][ T7981] binder: 7980:7981 ioctl 400c620e 20000100 returned -22 [ 63.495341][ T8004] sch_tbf: burst 32852 is lower than device lo mtu (65550) ! [ 63.575688][ T8018] netlink: 'syz.9.1133': attribute type 4 has an invalid length. [ 63.607447][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1134'. [ 63.617362][ T8024] loop3: detected capacity change from 0 to 512 [ 63.636982][ T8024] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1135: inode has both inline data and extents flags [ 63.637012][ T8024] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.639924][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 63.639945][ C0] EXT4-fs (loop3): initial error at time 63: ext4_orphan_get:1397: inode 15 [ 63.639985][ C0] EXT4-fs (loop3): last error at time 63: ext4_orphan_get:1397: inode 15 [ 63.649220][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1137'. [ 63.658903][ T8024] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1135: couldn't read orphan inode 15 (err -117) [ 63.658939][ T8024] loop3: lost filesystem error report for type 5 error -117 [ 63.706678][ T8024] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.748084][ T8046] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1143'. [ 63.765698][ T4910] IPVS: starting estimator thread 0... [ 63.813229][ T8056] Injecting memory failure for pfn 0x1237b4 at process virtual address 0x20000000 [ 63.822349][ T8056] Memory failure: 0x1237b4: keeping poisoned page in swap cache [ 63.822390][ T8056] Memory failure: 0x1237b4: Sending SIGBUS to syz.3.1145:8056 due to hardware memory corruption [ 63.822555][ T8056] Memory failure: 0x1237b4: dirty swapcache page still referenced by 1 users [ 63.822569][ T8056] Memory failure: 0x1237b4: recovery action for dirty swapcache page: Failed [ 63.861333][ T8049] IPVS: using max 58 ests per chain, 139200 per kthread [ 63.917347][ T8066] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 63.924326][ T8072] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1155'. [ 63.974112][ T8078] loop8: detected capacity change from 0 to 1024 [ 63.999549][ T8082] netlink: 'syz.1.1160': attribute type 7 has an invalid length. [ 64.010358][ T4708] Bluetooth: hci1: command tx timeout [ 64.038287][ T8078] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.1158: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.048491][ T8078] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 64.048547][ T8078] EXT4-fs (loop8): This should not happen!! Data will be lost [ 64.048547][ T8078] [ 64.049273][ T8078] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.1158: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.058046][ T8078] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 64.062179][ T8078] EXT4-fs (loop8): This should not happen!! Data will be lost [ 64.062179][ T8078] [ 64.131216][ T7457] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 64.228005][ T8113] EXT4-fs: inline encryption not supported [ 64.241953][ T8113] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 64.267174][ T8113] EXT4-fs (loop9): 1 truncate cleaned up [ 64.352457][ T7695] EXT4-fs unmount: 50 callbacks suppressed [ 64.352488][ T7695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.491293][ T1598] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.491339][ T1598] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.494224][ T4708] Bluetooth: hci2: command tx timeout [ 64.499357][ T1520] cfg80211: failed to load regulatory.db [ 64.687072][ T8159] FAT-fs (loop9): Directory bread(block 32) failed [ 64.687110][ T8159] FAT-fs (loop9): Directory bread(block 33) failed [ 64.687157][ T8159] FAT-fs (loop9): Directory bread(block 34) failed [ 64.687180][ T8159] FAT-fs (loop9): Directory bread(block 35) failed [ 64.687211][ T8159] FAT-fs (loop9): Directory bread(block 36) failed [ 64.687229][ T8159] FAT-fs (loop9): Directory bread(block 37) failed [ 64.687258][ T8159] FAT-fs (loop9): Directory bread(block 38) failed [ 64.687274][ T8159] FAT-fs (loop9): Directory bread(block 39) failed [ 64.687302][ T8159] FAT-fs (loop9): Directory bread(block 40) failed [ 64.687317][ T8159] FAT-fs (loop9): Directory bread(block 41) failed [ 64.785990][ T8169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.803011][ T24] kworker/1:0: attempt to access beyond end of device [ 64.803011][ T24] loop9: rw=524288, sector=4108, nr_sectors = 4 limit=128 [ 64.803195][ T24] kworker/1:0: attempt to access beyond end of device [ 64.803195][ T24] loop9: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 64.811282][ T8169] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.1199: lblock 0 mapped to illegal pblock 0 (length 6) [ 64.812613][ T8159] syz.9.1193: attempt to access beyond end of device [ 64.812613][ T8159] loop9: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 64.812676][ T8159] FAT-fs (loop9): Filesystem has been set read-only [ 64.812704][ T8159] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 64.819308][ T8177] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1201'. [ 64.902929][ T8184] netlink: 'syz.8.1206': attribute type 11 has an invalid length. [ 64.964488][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.011955][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 65.020700][ T8196] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.097335][ T24] Process accounting resumed [ 65.157185][ T8209] tap0: tun_chr_ioctl cmd 1074025677 [ 65.158359][ T8209] tap0: linktype set to 823 [ 65.326476][ T8238] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.465834][ T8247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.508117][ T8264] set_capacity_and_notify: 9 callbacks suppressed [ 65.524419][ T8264] loop1: detected capacity change from 0 to 512 [ 65.526813][ T8266] loop7: detected capacity change from 0 to 128 [ 65.543156][ T8266] EXT4-fs (loop7): Test dummy encryption mode enabled [ 65.552494][ T7457] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.555758][ T8266] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.568733][ T8270] loop9: detected capacity change from 0 to 128 [ 65.595628][ T8264] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 65.595684][ T8264] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 65.595707][ T8264] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1241: Failed to acquire dquot type 1 [ 65.595723][ T8264] loop1: lost filesystem error report for type 5 error -117 [ 65.602123][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 65.602139][ C1] EXT4-fs (loop1): last error at time 65: ext4_acquire_dquot:7034 [ 65.607094][ T8264] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 65.607164][ T8264] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 65.607180][ T8264] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1241: Failed to acquire dquot type 1 [ 65.607190][ T8264] loop1: lost filesystem error report for type 5 error -117 [ 65.614917][ T8264] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1241: bg 0: block 248: padding at end of block bitmap is not set [ 65.614951][ T8264] loop1: lost filesystem error report for type 5 error -117 [ 65.617088][ T8264] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 65.617110][ T8264] loop1: lost filesystem error report for type 5 error -117 [ 65.620345][ T8264] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 65.620412][ T8264] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 65.620425][ T8264] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1241: Failed to acquire dquot type 1 [ 65.620435][ T8264] loop1: lost filesystem error report for type 5 error -117 [ 65.623132][ T8264] EXT4-fs (loop1): 1 orphan inode deleted [ 65.623595][ T8264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.655322][ T8264] EXT4-fs (loop1): shut down requested (1) [ 65.659311][ T6987] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.721624][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.754193][ T8289] netlink: 'syz.3.1252': attribute type 3 has an invalid length. [ 65.773598][ T8291] loop1: detected capacity change from 0 to 256 [ 65.806795][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.806877][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.806893][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.806979][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.807007][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.807034][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.807060][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.807086][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.807112][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.807137][ T8291] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.864789][ T8303] loop7: detected capacity change from 0 to 256 [ 66.090669][ T4708] Bluetooth: hci1: command tx timeout [ 66.090879][ T8332] loop9: detected capacity change from 0 to 512 [ 66.096854][ T8336] Injecting memory failure for pfn 0x13b6cd at process virtual address 0x20001000 [ 66.115360][ T8332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.123362][ T8336] Memory failure: 0x13b6cd: recovery action for clean LRU page: Recovered [ 66.123445][ T8336] Injecting memory failure for pfn 0x12003d at process virtual address 0x20002000 [ 66.123547][ T8336] Memory failure: 0x12003d: recovery action for clean LRU page: Recovered [ 66.123569][ T8336] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20003000 [ 66.123591][ T8336] Memory failure: 0x21cf58: unhandlable page. [ 66.123601][ T8336] Memory failure: 0x21cf58: recovery action for get hwpoison page: Ignored [ 66.182893][ T8332] Invalid ELF header magic: != ELF [ 66.205718][ T8347] loop1: detected capacity change from 0 to 128 [ 66.242677][ T7695] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.552863][ T40] tipc: Subscription rejected, illegal request [ 66.570330][ T4708] Bluetooth: hci2: command tx timeout [ 66.618480][ T8400] input: syz0 as /devices/virtual/input/input9 [ 66.620808][ T8395] netlink: 'syz.9.1302': attribute type 1 has an invalid length. [ 66.620840][ T8395] nbd: error processing sock list [ 66.621083][ T8395] block nbd2: shutting down sockets [ 66.979020][ T8445] loop1: detected capacity change from 0 to 128 [ 67.012870][ T8445] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.043042][ T8451] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 67.043127][ T8451] overlayfs: overlapping lowerdir path [ 67.049667][ T8445] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x17) [ 67.095539][ T4705] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.618042][ T8504] capability: warning: `syz.7.1353' uses 32-bit capabilities (legacy support in use) [ 67.780118][ T8516] loop7: detected capacity change from 0 to 256 [ 67.786064][ T8514] loop3: detected capacity change from 0 to 4096 [ 67.792070][ T8514] EXT4-fs: inline encryption not supported [ 67.800680][ T8516] FAT-fs (loop7): Directory bread(block 64) failed [ 67.800724][ T8516] FAT-fs (loop7): Directory bread(block 65) failed [ 67.800749][ T8516] FAT-fs (loop7): Directory bread(block 66) failed [ 67.800760][ T8516] FAT-fs (loop7): Directory bread(block 67) failed [ 67.800782][ T8516] FAT-fs (loop7): Directory bread(block 68) failed [ 67.800793][ T8516] FAT-fs (loop7): Directory bread(block 69) failed [ 67.800842][ T8516] FAT-fs (loop7): Directory bread(block 70) failed [ 67.800853][ T8516] FAT-fs (loop7): Directory bread(block 71) failed [ 67.800874][ T8516] FAT-fs (loop7): Directory bread(block 72) failed [ 67.800884][ T8516] FAT-fs (loop7): Directory bread(block 73) failed [ 67.808171][ T8514] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.808196][ T8514] EXT4-fs (loop3): Test dummy encryption mode enabled [ 67.808959][ T8514] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 67.808992][ T8514] System zones: 0-5 [ 67.809872][ T8514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.939014][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.985080][ T8523] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.1362: corrupted in-inode xattr: invalid ea_ino [ 67.985114][ T8523] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.985265][ T8523] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1362: couldn't read orphan inode 15 (err -117) [ 67.985278][ T8523] loop7: lost filesystem error report for type 5 error -117 [ 68.001042][ T8523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.086301][ T6987] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.121977][ T8536] lo: Caught tx_queue_len zero misconfig [ 68.163885][ T8543] __nla_validate_parse: 11 callbacks suppressed [ 68.163922][ T8543] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1370'. [ 68.361907][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1383'. [ 68.539870][ T8598] EXT4-fs: Ignoring removed orlov option [ 68.600825][ T8598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.619038][ T8608] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1396'. [ 68.619070][ T8608] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1396'. [ 68.650035][ T4708] Bluetooth: hci2: command tx timeout [ 68.675753][ T7457] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.832090][ T8641] sctp: [Deprecated]: syz.9.1409 (pid 8641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.832090][ T8641] Use struct sctp_sack_info instead [ 69.026079][ T8670] EXT4-fs: Ignoring removed orlov option [ 69.062963][ T8670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.094870][ T8670] [ 69.095297][ T8670] ====================================================== [ 69.096615][ T8670] WARNING: possible circular locking dependency detected [ 69.097933][ T8670] syzkaller #0 Not tainted [ 69.098768][ T8670] ------------------------------------------------------ [ 69.100129][ T8670] syz.1.1423/8670 is trying to acquire lock: [ 69.101330][ T8670] ffff800088c65840 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x140/0x4b0 [ 69.103210][ T8670] [ 69.103210][ T8670] but task is already holding lock: [ 69.104700][ T8670] ffff0000f2336bd8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xb20/0x1420 [ 69.106621][ T8670] [ 69.106621][ T8670] which lock already depends on the new lock. [ 69.106621][ T8670] [ 69.108717][ T8670] [ 69.108717][ T8670] the existing dependency chain (in reverse order) is: [ 69.110549][ T8670] [ 69.110549][ T8670] -> #8 (mapping.invalidate_lock#2){++++}-{4:4}: [ 69.112209][ T8670] down_read+0x58/0x2bc [ 69.113030][ T8670] do_page_cache_ra+0xec/0x11c [ 69.113993][ T8670] page_cache_ra_order+0x84c/0xe28 [ 69.114979][ T8670] page_cache_async_ra+0x5c4/0xd38 [ 69.115956][ T8670] filemap_fault+0x5c4/0x1420 [ 69.116906][ T8670] __do_fault+0xf4/0x4a0 [ 69.117730][ T8670] do_pte_missing+0x1918/0x28a4 [ 69.118713][ T8670] handle_mm_fault+0x1564/0x245c [ 69.119710][ T8670] __get_user_pages+0x678/0x20f0 [ 69.120708][ T8670] get_dump_page+0x16c/0x374 [ 69.121685][ T8670] dump_user_range+0x178/0x7c0 [ 69.122684][ T8670] elf_core_dump+0x2b6c/0x30f0 [ 69.123675][ T8670] coredump_write+0x1044/0x181c [ 69.124708][ T8670] vfs_coredump+0x29f0/0x37e0 [ 69.125720][ T8670] get_signal+0xd88/0x1094 [ 69.126716][ T8670] arch_do_signal_or_restart+0x1dc/0x43a0 [ 69.128009][ T8670] exit_to_user_mode_loop+0x70/0x17c [ 69.129102][ T8670] el0_da+0x1a4/0x254 [ 69.129990][ T8670] el0t_64_sync_handler+0x10c/0x148 [ 69.131116][ T8670] el0t_64_sync+0x198/0x19c [ 69.132104][ T8670] [ 69.132104][ T8670] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 69.133508][ T8670] __might_fault+0xc0/0x114 [ 69.134401][ T8670] _inline_copy_from_user+0x38/0x204 [ 69.135447][ T8670] csum_and_copy_from_iter_full+0x190/0x1590 [ 69.136616][ T8670] ip_generic_getfrag+0x128/0x278 [ 69.137625][ T8670] raw6_getfrag+0x234/0x338 [ 69.138594][ T8670] __ip6_append_data+0x2b44/0x37d0 [ 69.139638][ T8670] ip6_append_data+0x100/0x27c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 69.140614][ T8670] rawv6_sendmsg+0xe78/0x1454 [ 69.141577][ T8670] inet_sendmsg+0xb4/0xd8 [ 69.142397][ T8670] __sock_sendmsg+0xc8/0x138 [ 69.143310][ T8670] ____sys_sendmsg+0x418/0x70c [ 69.144340][ T8670] ___sys_sendmsg+0x198/0x224 [ 69.145363][ T8670] __sys_sendmsg+0x160/0x214 [ 69.146348][ T8670] __arm64_sys_sendmsg+0x80/0x94 [ 69.147388][ T8670] invoke_syscall+0x98/0x244 [ 69.148367][ T8670] el0_svc_common+0xe8/0x23c [ 69.149311][ T8670] do_el0_svc+0x48/0x58 [ 69.150189][ T8670] el0_svc+0x64/0x260 [ 69.151066][ T8670] el0t_64_sync_handler+0x48/0x148 [ 69.152155][ T8670] el0t_64_sync+0x198/0x19c [ 69.153100][ T8670] [ 69.153100][ T8670] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 69.154458][ T8670] lock_sock_nested+0x58/0x110 [ 69.155418][ T8670] inet_shutdown+0x74/0x34c [ 69.156261][ T8670] kernel_sock_shutdown+0x6c/0x80 [ 69.157184][ T8670] nbd_mark_nsock_dead+0x27c/0x4f4 [ 69.158169][ T8670] sock_shutdown+0x154/0x23c [ 69.159017][ T8670] nbd_config_put+0x274/0x52c [ 69.159926][ T8670] nbd_genl_connect+0x1234/0x1564 [ 69.160890][ T8670] genl_family_rcv_msg_doit+0x1e4/0x2d8 [ 69.161914][ T8670] genl_rcv_msg+0x444/0x620 [ 69.162794][ T8670] netlink_rcv_skb+0x22c/0x410 [ 69.163703][ T8670] genl_rcv+0x38/0x50 [ 69.164509][ T8670] netlink_unicast+0x610/0x800 [ 69.165396][ T8670] netlink_sendmsg+0x63c/0x920 [ 69.166307][ T8670] __sock_sendmsg+0xc8/0x138 [ 69.167159][ T8670] ____sys_sendmsg+0x418/0x70c [ 69.168040][ T8670] ___sys_sendmsg+0x198/0x224 [ 69.168933][ T8670] __sys_sendmsg+0x160/0x214 [ 69.169809][ T8670] __arm64_sys_sendmsg+0x80/0x94 [ 69.170673][ T8670] invoke_syscall+0x98/0x244 [ 69.171635][ T8670] el0_svc_common+0xe8/0x23c [ 69.172607][ T8670] do_el0_svc+0x48/0x58 [ 69.173439][ T8670] el0_svc+0x64/0x260 [ 69.174266][ T8670] el0t_64_sync_handler+0x48/0x148 [ 69.175284][ T8670] el0t_64_sync+0x198/0x19c [ 69.176222][ T8670] [ 69.176222][ T8670] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 69.177686][ T8670] __mutex_lock+0x160/0xef8 [ 69.178635][ T8670] mutex_lock_nested+0x24/0x30 [ 69.179658][ T8670] nbd_queue_rq+0x208/0xc44 [ 69.180591][ T8670] blk_mq_dispatch_rq_list+0x3bc/0x13a4 [ 69.181673][ T8670] __blk_mq_sched_dispatch_requests+0xa40/0x10bc [ 69.182851][ T8670] blk_mq_sched_dispatch_requests+0xa4/0x154 [ 69.183986][ T8670] blk_mq_run_hw_queue+0x300/0x4dc [ 69.184966][ T8670] blk_mq_dispatch_list+0xa2c/0xb2c [ 69.185994][ T8670] blk_mq_flush_plug_list+0x3a4/0x484 [ 69.187126][ T8670] __blk_flush_plug+0x338/0x410 [ 69.188192][ T8670] __submit_bio+0x39c/0x478 [ 69.189163][ T8670] submit_bio_noacct_nocheck+0x284/0xa98 [ 69.190345][ T8670] submit_bio_noacct+0xd90/0x1814 [ 69.191409][ T8670] submit_bio+0x38c/0x528 [ 69.192369][ T8670] submit_bh_wbc+0x4b0/0x594 [ 69.193334][ T8670] block_read_full_folio+0x69c/0x734 [ 69.194417][ T8670] blkdev_read_folio+0x28/0x38 [ 69.195316][ T8670] filemap_read_folio+0xf0/0x2fc [ 69.196322][ T8670] do_read_cache_folio+0x368/0x5b8 [ 69.197415][ T8670] read_cache_folio+0x68/0x84 [ 69.198435][ T8670] read_part_sector+0xcc/0x708 [ 69.199468][ T8670] adfspart_check_ICS+0xa4/0x6fc [ 69.200529][ T8670] bdev_disk_changed+0x6fc/0x11c8 [ 69.201593][ T8670] blkdev_get_whole+0x15c/0x240 [ 69.202612][ T8670] bdev_open+0x2d8/0x8cc [ 69.203545][ T8670] blkdev_open+0x2d8/0x404 [ 69.204455][ T8670] do_dentry_open+0x5c4/0xfc8 [ 69.205442][ T8670] vfs_open+0x44/0x2d4 [ 69.206353][ T8670] path_openat+0x2234/0x2a6c [ 69.207318][ T8670] do_file_open+0x1c4/0x2e4 [ 69.208263][ T8670] do_sys_openat2+0x114/0x1e8 [ 69.209232][ T8670] do_sys_open+0xac/0xdc [ 69.210123][ T8670] __arm64_sys_openat+0x9c/0xb8 [ 69.211103][ T8670] invoke_syscall+0x98/0x244 [ 69.212048][ T8670] el0_svc_common+0xe8/0x23c [ 69.213005][ T8670] do_el0_svc+0x48/0x58 [ 69.213885][ T8670] el0_svc+0x64/0x260 [ 69.214777][ T8670] el0t_64_sync_handler+0x48/0x148 [ 69.215846][ T8670] el0t_64_sync+0x198/0x19c [ 69.216807][ T8670] [ 69.216807][ T8670] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 69.218135][ T8670] __mutex_lock+0x160/0xef8 [ 69.219005][ T8670] mutex_lock_nested+0x24/0x30 [ 69.219976][ T8670] nbd_queue_rq+0xb0/0xc44 [ 69.220889][ T8670] blk_mq_dispatch_rq_list+0x3bc/0x13a4 [ 69.222085][ T8670] __blk_mq_sched_dispatch_requests+0xa40/0x10bc [ 69.223436][ T8670] blk_mq_sched_dispatch_requests+0xa4/0x154 [ 69.224706][ T8670] blk_mq_run_hw_queue+0x300/0x4dc [ 69.225806][ T8670] blk_mq_dispatch_list+0xa2c/0xb2c [ 69.226896][ T8670] blk_mq_flush_plug_list+0x3a4/0x484 [ 69.228019][ T8670] __blk_flush_plug+0x338/0x410 [ 69.229061][ T8670] __submit_bio+0x39c/0x478 [ 69.230010][ T8670] submit_bio_noacct_nocheck+0x284/0xa98 [ 69.231125][ T8670] submit_bio_noacct+0xd90/0x1814 [ 69.232117][ T8670] submit_bio+0x38c/0x528 [ 69.232976][ T8670] submit_bh_wbc+0x4b0/0x594 [ 69.233907][ T8670] block_read_full_folio+0x69c/0x734 [ 69.234938][ T8670] blkdev_read_folio+0x28/0x38 [ 69.235922][ T8670] filemap_read_folio+0xf0/0x2fc [ 69.236890][ T8670] do_read_cache_folio+0x368/0x5b8 [ 69.237962][ T8670] read_cache_folio+0x68/0x84 [ 69.238992][ T8670] read_part_sector+0xcc/0x708 [ 69.239974][ T8670] adfspart_check_ICS+0xa4/0x6fc [ 69.240998][ T8670] bdev_disk_changed+0x6fc/0x11c8 [ 69.242016][ T8670] blkdev_get_whole+0x15c/0x240 [ 69.242986][ T8670] bdev_open+0x2d8/0x8cc [ 69.243899][ T8670] blkdev_open+0x2d8/0x404 [ 69.244856][ T8670] do_dentry_open+0x5c4/0xfc8 [ 69.245862][ T8670] vfs_open+0x44/0x2d4 [ 69.246749][ T8670] path_openat+0x2234/0x2a6c [ 69.247747][ T8670] do_file_open+0x1c4/0x2e4 [ 69.248712][ T8670] do_sys_openat2+0x114/0x1e8 [ 69.249696][ T8670] do_sys_open+0xac/0xdc [ 69.250624][ T8670] __arm64_sys_openat+0x9c/0xb8 [ 69.251656][ T8670] invoke_syscall+0x98/0x244 [ 69.252599][ T8670] el0_svc_common+0xe8/0x23c [ 69.253563][ T8670] do_el0_svc+0x48/0x58 [ 69.254437][ T8670] el0_svc+0x64/0x260 [ 69.255276][ T8670] el0t_64_sync_handler+0x48/0x148 [ 69.256303][ T8670] el0t_64_sync+0x198/0x19c [ 69.257196][ T8670] [ 69.257196][ T8670] -> #3 (set->srcu){.+.+}-{0:0}: [ 69.258519][ T8670] __synchronize_srcu+0xc8/0x268 [ 69.259537][ T8670] synchronize_srcu+0x41c/0x604 [ 69.260566][ T8670] blk_mq_wait_quiesce_done+0x88/0xb0 [ 69.261674][ T8670] blk_mq_quiesce_queue+0x70/0x8c [ 69.262747][ T8670] elevator_switch+0x128/0x384 [ 69.263763][ T8670] elevator_change+0x200/0x358 [ 69.264806][ T8670] elevator_set_default+0x190/0x2b0 [ 69.265934][ T8670] blk_register_queue+0x2f8/0x3d0 [ 69.267009][ T8670] __add_disk+0x568/0xb3c [ 69.267967][ T8670] add_disk_fwnode+0xe8/0x42c [ 69.268920][ T8670] device_add_disk+0x38/0x4c [ 69.269853][ T8670] nbd_dev_add+0x588/0x85c [ 69.270741][ T8670] nbd_init+0x15c/0x174 [ 69.271569][ T8670] do_one_initcall+0x274/0xc20 [ 69.272573][ T8670] do_initcall_level+0x128/0x1c4 [ 69.273586][ T8670] do_initcalls+0x70/0xd0 [ 69.274532][ T8670] do_basic_setup+0x7c/0x90 [ 69.275529][ T8670] kernel_init_freeable+0x268/0x3a8 [ 69.276676][ T8670] kernel_init+0x24/0x1dc [ 69.277611][ T8670] ret_from_fork+0x10/0x20 [ 69.278533][ T8670] [ 69.278533][ T8670] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 69.280032][ T8670] __mutex_lock+0x160/0xef8 [ 69.280998][ T8670] mutex_lock_nested+0x24/0x30 [ 69.282097][ T8670] elevator_change+0x184/0x358 [ 69.283179][ T8670] elevator_set_none+0xa8/0x13c [ 69.284278][ T8670] blk_mq_update_nr_hw_queues+0x4ec/0x11fc [ 69.285530][ T8670] nbd_start_device+0x15c/0xa38 [ 69.286589][ T8670] nbd_genl_connect+0xfac/0x1564 [ 69.287663][ T8670] genl_family_rcv_msg_doit+0x1e4/0x2d8 [ 69.288855][ T8670] genl_rcv_msg+0x444/0x620 [ 69.289864][ T8670] netlink_rcv_skb+0x22c/0x410 [ 69.290879][ T8670] genl_rcv+0x38/0x50 [ 69.291795][ T8670] netlink_unicast+0x610/0x800 [ 69.292791][ T8670] netlink_sendmsg+0x63c/0x920 [ 69.293827][ T8670] __sock_sendmsg+0xc8/0x138 [ 69.294883][ T8670] ____sys_sendmsg+0x418/0x70c [ 69.295945][ T8670] ___sys_sendmsg+0x198/0x224 [ 69.296986][ T8670] __sys_sendmsg+0x160/0x214 [ 69.298018][ T8670] __arm64_sys_sendmsg+0x80/0x94 [ 69.299123][ T8670] invoke_syscall+0x98/0x244 [ 69.300193][ T8670] el0_svc_common+0xe8/0x23c [ 69.301195][ T8670] do_el0_svc+0x48/0x58 [ 69.302086][ T8670] el0_svc+0x64/0x260 [ 69.302937][ T8670] el0t_64_sync_handler+0x48/0x148 [ 69.304056][ T8670] el0t_64_sync+0x198/0x19c [ 69.305089][ T8670] [ 69.305089][ T8670] -> #1 (&q->q_usage_counter(io)#34){++++}-{0:0}: [ 69.306780][ T8670] blk_alloc_queue+0x47c/0x57c [ 69.307833][ T8670] blk_mq_alloc_queue+0x148/0x294 [ 69.308958][ T8670] __blk_mq_alloc_disk+0x38/0x10c [ 69.310051][ T8670] nbd_dev_add+0x3c0/0x85c [ 69.310950][ T8670] nbd_init+0x15c/0x174 [ 69.311824][ T8670] do_one_initcall+0x274/0xc20 [ 69.312855][ T8670] do_initcall_level+0x128/0x1c4 [ 69.313929][ T8670] do_initcalls+0x70/0xd0 [ 69.314879][ T8670] do_basic_setup+0x7c/0x90 [ 69.315843][ T8670] kernel_init_freeable+0x268/0x3a8 [ 69.316950][ T8670] kernel_init+0x24/0x1dc [ 69.317869][ T8670] ret_from_fork+0x10/0x20 [ 69.318797][ T8670] [ 69.318797][ T8670] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 69.320139][ T8670] __lock_acquire+0x1780/0x2f44 [ 69.321136][ T8670] lock_acquire+0x140/0x368 [ 69.322062][ T8670] fs_reclaim_acquire+0x90/0x110 [ 69.323008][ T8670] prepare_alloc_pages+0x140/0x4b0 [ 69.324042][ T8670] __alloc_frozen_pages_noprof+0x134/0x31c [ 69.325272][ T8670] alloc_pages_mpol+0x1ec/0x464 [ 69.326339][ T8670] alloc_frozen_pages_noprof+0xc4/0x114 [ 69.327494][ T8670] alloc_pages_noprof+0x30/0x148 [ 69.328544][ T8670] folio_alloc_noprof+0x2c/0x148 [ 69.329564][ T8670] filemap_alloc_folio_noprof+0x108/0x434 [ 69.330731][ T8670] __filemap_get_folio_mpol+0x424/0xc18 [ 69.331884][ T8670] filemap_fault+0xb48/0x1420 [ 69.332884][ T8670] __do_fault+0xf4/0x4a0 [ 69.333784][ T8670] do_pte_missing+0x1918/0x28a4 [ 69.334790][ T8670] handle_mm_fault+0x1564/0x245c [ 69.335811][ T8670] __get_user_pages+0x678/0x20f0 [ 69.336843][ T8670] populate_vma_page_range+0x260/0x358 [ 69.337965][ T8670] __mm_populate+0x200/0x324 [ 69.338872][ T8670] vm_mmap_pgoff+0x3a4/0x470 [ 69.339829][ T8670] ksys_mmap_pgoff+0x398/0x5b4 [ 69.340838][ T8670] __arm64_sys_mmap+0xf8/0x110 [ 69.341814][ T8670] invoke_syscall+0x98/0x244 [ 69.342776][ T8670] el0_svc_common+0xe8/0x23c [ 69.343740][ T8670] do_el0_svc+0x48/0x58 [ 69.344635][ T8670] el0_svc+0x64/0x260 [ 69.345477][ T8670] el0t_64_sync_handler+0x48/0x148 [ 69.346521][ T8670] el0t_64_sync+0x198/0x19c [ 69.347438][ T8670] [ 69.347438][ T8670] other info that might help us debug this: [ 69.347438][ T8670] [ 69.349231][ T8670] Chain exists of: [ 69.349231][ T8670] fs_reclaim --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 69.349231][ T8670] [ 69.351677][ T8670] Possible unsafe locking scenario: [ 69.351677][ T8670] [ 69.353029][ T8670] CPU0 CPU1 [ 69.354103][ T8670] ---- ---- [ 69.355155][ T8670] rlock(mapping.invalidate_lock#2); [ 69.356238][ T8670] lock(&mm->mmap_lock); [ 69.357564][ T8670] lock(mapping.invalidate_lock#2); [ 69.359041][ T8670] lock(fs_reclaim); [ 69.359778][ T8670] [ 69.359778][ T8670] *** DEADLOCK *** [ 69.359778][ T8670] [ 69.361266][ T8670] 1 lock held by syz.1.1423/8670: [ 69.362237][ T8670] #0: ffff0000f2336bd8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xb20/0x1420 [ 69.364171][ T8670] [ 69.364171][ T8670] stack backtrace: [ 69.365236][ T8670] CPU: 1 UID: 0 PID: 8670 Comm: syz.1.1423 Not tainted syzkaller #0 PREEMPT [ 69.366843][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 69.368693][ T8670] Call trace: [ 69.369314][ T8670] show_stack+0x2c/0x3c (C) [ 69.370164][ T8670] __dump_stack+0x30/0x40 [ 69.371027][ T8670] dump_stack_lvl+0xd8/0x12c [ 69.371967][ T8670] dump_stack+0x1c/0x28 [ 69.372799][ T8670] print_circular_bug+0x328/0x330 [ 69.373768][ T8670] check_noncircular+0x158/0x174 [ 69.374701][ T8670] __lock_acquire+0x1780/0x2f44 [ 69.375668][ T8670] lock_acquire+0x140/0x368 [ 69.376580][ T8670] fs_reclaim_acquire+0x90/0x110 [ 69.377551][ T8670] prepare_alloc_pages+0x140/0x4b0 [ 69.378541][ T8670] __alloc_frozen_pages_noprof+0x134/0x31c [ 69.379605][ T8670] alloc_pages_mpol+0x1ec/0x464 [ 69.380500][ T8670] alloc_frozen_pages_noprof+0xc4/0x114 [ 69.381587][ T8670] alloc_pages_noprof+0x30/0x148 [ 69.382577][ T8670] folio_alloc_noprof+0x2c/0x148 [ 69.383493][ T8670] filemap_alloc_folio_noprof+0x108/0x434 [ 69.384581][ T8670] __filemap_get_folio_mpol+0x424/0xc18 [ 69.385651][ T8670] filemap_fault+0xb48/0x1420 [ 69.386555][ T8670] __do_fault+0xf4/0x4a0 [ 69.387369][ T8670] do_pte_missing+0x1918/0x28a4 [ 69.388326][ T8670] handle_mm_fault+0x1564/0x245c [ 69.389324][ T8670] __get_user_pages+0x678/0x20f0 [ 69.390296][ T8670] populate_vma_page_range+0x260/0x358 [ 69.391372][ T8670] __mm_populate+0x200/0x324 [ 69.392220][ T8670] vm_mmap_pgoff+0x3a4/0x470 [ 69.393153][ T8670] ksys_mmap_pgoff+0x398/0x5b4 [ 69.394146][ T8670] __arm64_sys_mmap+0xf8/0x110 [ 69.395098][ T8670] invoke_syscall+0x98/0x244 [ 69.395964][ T8670] el0_svc_common+0xe8/0x23c [ 69.396868][ T8670] do_el0_svc+0x48/0x58 [ 69.397688][ T8670] el0_svc+0x64/0x260 [ 69.398450][ T8670] el0t_64_sync_handler+0x48/0x148 [ 69.399492][ T8670] el0t_64_sync+0x198/0x19c [ 69.517203][ T6442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.801633][ T1243] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.872027][ T1243] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.921350][ T1243] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.991444][ T1243] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.220027][ T1243] bridge_slave_1: left allmulticast mode [ 70.220054][ T1243] bridge_slave_1: left promiscuous mode [ 70.220131][ T1243] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.222518][ T1243] bridge_slave_0: left allmulticast mode [ 70.222530][ T1243] bridge_slave_0: left promiscuous mode [ 70.222583][ T1243] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.357891][ T1243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.390870][ T1243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.412213][ T1243] bond0 (unregistering): Released all slaves [ 70.506494][ T4395] 8021q: adding VLAN 0 to HW filter on device eth17 [ 70.635252][ T4395] 8021q: adding VLAN 0 to HW filter on device eth16 [ 70.692943][ T1243] hsr_slave_0: left promiscuous mode [ 70.694030][ T1243] hsr_slave_1: left promiscuous mode [ 70.694251][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.694260][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.696192][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.696204][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.699576][ T1243] veth1_macvtap: left promiscuous mode [ 70.699596][ T1243] veth0_macvtap: left promiscuous mode [ 70.699624][ T1243] veth1_vlan: left promiscuous mode [ 70.699644][ T1243] veth0_vlan: left promiscuous mode [ 70.773707][ T1243] team0 (unregistering): Port device team_slave_1 removed [ 70.776113][ T1243] team0 (unregistering): Port device team_slave_0 removed [ 70.813885][ T4395] 8021q: adding VLAN 0 to HW filter on device eth18 [ 70.925680][ T4395] 8021q: adding VLAN 0 to HW filter on device eth19 [ 71.141540][ T1243] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.201413][ T1243] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.261420][ T1243] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.322569][ T1243] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.479439][ T1243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.534902][ T1243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.581173][ T4395] 8021q: adding VLAN 0 to HW filter on device eth20 [ 71.596525][ T1243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.647690][ T1243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.676640][ T4395] 8021q: adding VLAN 0 to HW filter on device eth23 [ 71.764762][ T1243] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.780714][ T4395] 8021q: adding VLAN 0 to HW filter on device eth22 [ 71.804363][ T1243] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.872578][ T1243] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.875800][ T4395] 8021q: adding VLAN 0 to HW filter on device eth21 [ 71.934130][ T1243] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.965991][ T4395] 8021q: adding VLAN 0 to HW filter on device eth25 [ 72.061500][ T1243] bridge_slave_1: left allmulticast mode [ 72.061536][ T1243] bridge_slave_1: left promiscuous mode [ 72.061623][ T1243] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.062403][ T1243] bridge_slave_0: left allmulticast mode [ 72.062418][ T1243] bridge_slave_0: left promiscuous mode [ 72.062480][ T1243] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.230065][ T1243] bridge_slave_1: left allmulticast mode [ 72.231226][ T1243] bridge_slave_1: left promiscuous mode [ 72.231517][ T1243] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.233937][ T1243] bridge_slave_0: left allmulticast mode [ 72.233957][ T1243] bridge_slave_0: left promiscuous mode [ 72.234013][ T1243] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.410111][ T1243] bridge_slave_1: left allmulticast mode [ 72.410138][ T1243] bridge_slave_1: left promiscuous mode [ 72.410203][ T1243] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.412550][ T1243] bridge_slave_0: left allmulticast mode [ 72.412560][ T1243] bridge_slave_0: left promiscuous mode [ 72.412612][ T1243] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.693136][ T1243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.740977][ T1243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.761536][ T1243] bond0 (unregistering): Released all slaves [ 72.831753][ T1243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.851604][ T1243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.880691][ T1243] bond0 (unregistering): Released all slaves [ 72.928023][ T1243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.950779][ T1243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.981178][ T1243] bond0 (unregistering): Released all slaves [ 72.982831][ T4395] 8021q: adding VLAN 0 to HW filter on device eth26 [ 73.088102][ T4395] 8021q: adding VLAN 0 to HW filter on device eth24 [ 73.188497][ T4395] 8021q: adding VLAN 0 to HW filter on device eth27 [ 73.328278][ T4395] 8021q: adding VLAN 0 to HW filter on device eth28 [ 73.428749][ T4395] 8021q: adding VLAN 0 to HW filter on device eth29 [ 73.583419][ T4395] 8021q: adding VLAN 0 to HW filter on device eth31 [ 73.672983][ T1243] hsr_slave_0: left promiscuous mode [ 73.674297][ T1243] hsr_slave_1: left promiscuous mode [ 73.674521][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.674533][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.675570][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.675579][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.681284][ T1243] hsr_slave_0: left promiscuous mode [ 73.681577][ T1243] hsr_slave_1: left promiscuous mode [ 73.681769][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.681777][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.682749][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.682758][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.689401][ T1243] hsr_slave_0: left promiscuous mode [ 73.694127][ T1243] hsr_slave_1: left promiscuous mode [ 73.695772][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.697049][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.698830][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.698851][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.705945][ T1243] veth1_macvtap: left promiscuous mode [ 73.705975][ T1243] veth0_macvtap: left promiscuous mode [ 73.706009][ T1243] veth1_vlan: left promiscuous mode [ 73.706030][ T1243] veth0_vlan: left promiscuous mode [ 73.710171][ T1243] veth1_macvtap: left promiscuous mode [ 73.710186][ T1243] veth0_macvtap: left promiscuous mode [ 73.710216][ T1243] veth1_vlan: left promiscuous mode [ 73.710236][ T1243] veth0_vlan: left promiscuous mode [ 73.714280][ T1243] veth1_macvtap: left promiscuous mode [ 73.714442][ T1243] veth0_macvtap: left promiscuous mode [ 73.714481][ T1243] veth1_vlan: left promiscuous mode [ 73.714509][ T1243] veth0_vlan: left promiscuous mode [ 73.831795][ T1243] team0 (unregistering): Port device team_slave_1 removed [ 73.834508][ T1243] team0 (unregistering): Port device team_slave_0 removed [ 73.902840][ T1243] team0 (unregistering): Port device team_slave_1 removed [ 73.905199][ T1243] team0 (unregistering): Port device team_slave_0 removed [ 73.972176][ T1243] team0 (unregistering): Port device team_slave_1 removed [ 73.974645][ T1243] team0 (unregistering): Port device team_slave_0 removed [ 74.001810][ T4395] 8021q: adding VLAN 0 to HW filter on device eth30 [ 74.622214][ T1243] IPVS: stop unused estimator thread 0... [ 74.729950][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!