last executing test programs: 1m49.775853156s ago: executing program 2 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) 1m49.752981201s ago: executing program 2 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000005c0)={0x44, r1, 0x1, 0x0, 0x8000000, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IFNAME={0x14}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000014) 1m49.722770839s ago: executing program 2 (id=807): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0xd, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m49.710999968s ago: executing program 2 (id=809): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(r0, &(0x7f0000000380)='./file0/../file0\x00', r0, &(0x7f0000000400)='./file0/../file0\x00', 0x1) 1m49.675708601s ago: executing program 2 (id=811): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x1e, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m49.315378545s ago: executing program 2 (id=826): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRES16, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9"], 0x1, 0x1d1, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) getdents64(r0, 0x0, 0x22) 1m49.270631408s ago: executing program 32 (id=826): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRES16, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9"], 0x1, 0x1d1, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) getdents64(r0, 0x0, 0x22) 1m37.814224564s ago: executing program 5 (id=1228): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000a80)={[{@auto_da_alloc}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x10, '\x00', @a}) 1m37.56657168s ago: executing program 5 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) 1m37.451298437s ago: executing program 5 (id=1238): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/214, 0xd6}], 0x1) 1m37.314390419s ago: executing program 5 (id=1242): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(r0, &(0x7f0000000380)='./file0/../file0\x00', r0, &(0x7f0000000400)='./file0/../file0\x00', 0x1) 1m37.181227095s ago: executing program 5 (id=1245): add_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00']) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 1m36.931245303s ago: executing program 5 (id=1253): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2d4, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0, 0x160) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001"], 0x150}}, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x400) 1m36.735452817s ago: executing program 33 (id=1253): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2d4, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x0, 0x160) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001"], 0x150}}, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x400) 1m21.337806413s ago: executing program 3 (id=1688): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x9, 0x266, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) 1m21.151576555s ago: executing program 3 (id=1696): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000480)=@sco={0x1f, @none}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x79a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) 1m21.114696418s ago: executing program 3 (id=1700): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x36ad, &(0x7f0000000180)={0x0, 0x3485, 0x0, 0x1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], &(0x7f0000004a80), 0x1}, 0x20) 1m20.998306846s ago: executing program 3 (id=1706): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(r0, &(0x7f0000000380)='./file0/../file0\x00', r0, &(0x7f0000000400)='./file0/../file0\x00', 0x1) 1m20.885823547s ago: executing program 3 (id=1711): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x80045440, &(0x7f0000000600)=""/171) 1m20.559325847s ago: executing program 3 (id=1718): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r1 = shmat(r0, &(0x7f0000ff8000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 1m20.356363365s ago: executing program 34 (id=1718): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r1 = shmat(r0, &(0x7f0000ff8000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 29.774505873s ago: executing program 1 (id=2860): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}], 0x18}, 0xc4) 29.731192668s ago: executing program 1 (id=2862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) 29.671821262s ago: executing program 1 (id=2864): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 29.513857001s ago: executing program 1 (id=2868): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000240)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@noauto_da_alloc}, {@resuid}, {@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) 29.365830092s ago: executing program 1 (id=2874): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 28.784329645s ago: executing program 1 (id=2893): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a", @ANYRES32], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 28.62944822s ago: executing program 35 (id=2893): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a", @ANYRES32], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 11.195924705s ago: executing program 4 (id=3256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0xfff3, 0xffff}, {0x7671693a61b9ff27, 0x10}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) 11.195594172s ago: executing program 4 (id=3257): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8052, &(0x7f0000000000), 0x0, 0x4c4, &(0x7f0000001940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 11.013324531s ago: executing program 4 (id=3258): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f0000000100)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe3\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r1, 0x80079a0) splice(r1, 0x0, r0, 0x0, 0x100002, 0x9) 10.858779734s ago: executing program 4 (id=3260): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x521, &(0x7f0000000500)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x141104, 0x80) 10.784073907s ago: executing program 4 (id=3263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.521242669s ago: executing program 4 (id=3269): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0xf162, @remote, 0x9}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000003c0)="15", 0x1}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x4, 0x40}, &(0x7f00000002c0)=0xc) 5.502987232s ago: executing program 36 (id=3269): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0xf162, @remote, 0x9}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000003c0)="15", 0x1}], 0x1}}], 0x2, 0x4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x4, 0x40}, &(0x7f00000002c0)=0xc) 2.211696302s ago: executing program 6 (id=3348): syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x3, 0x1f}, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') exit(0x100000000000035) read$eventfd(r0, &(0x7f0000000340), 0x8) 1.84120328s ago: executing program 0 (id=3358): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 1.763673591s ago: executing program 0 (id=3360): setns(0xc9, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x2bb3}, {{0x0, 0x0, 0x0}, 0x4f56}, {{0x0, 0x0, 0x0}}], 0x3, 0x40002000, 0x0) 1.722298546s ago: executing program 7 (id=3361): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 1.714965079s ago: executing program 9 (id=3362): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x1214040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x40000100, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.669259964s ago: executing program 0 (id=3363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 1.613227456s ago: executing program 9 (id=3365): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) 1.606711261s ago: executing program 7 (id=3366): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.526871384s ago: executing program 7 (id=3368): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) flock(r0, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) 1.455575705s ago: executing program 7 (id=3370): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)="b1", 0x1, 0x8000c61) 1.250524249s ago: executing program 6 (id=3373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000640)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x1}}, {@ipv6={0x86dd, @generic={0x3, 0x6, "b53d45", 0x0, 0x29, 0x1, @loopback, @loopback}}}}}, 0x42) 907.599793ms ago: executing program 8 (id=3377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bc2d, 0x61dfdbff, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfffffff7}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 834.107957ms ago: executing program 8 (id=3378): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x8) read(r0, &(0x7f0000000180)=""/12, 0xc) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 747.347303ms ago: executing program 8 (id=3379): ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCFLSH(r0, 0x8910, 0xffffffffffff7ffe) 699.461321ms ago: executing program 9 (id=3380): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) 599.551555ms ago: executing program 9 (id=3381): r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') unshare(0x80) close_range(r0, 0xffffffffffffffff, 0x0) 534.8662ms ago: executing program 9 (id=3382): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/events/enable\x00', 0x45) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 432.302626ms ago: executing program 9 (id=3383): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004740)={0x44, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x402, 0x400, 0x5, 0x400, 0x7d, 0x6, 0x9]}}]}]}]}, 0x44}}, 0x0) 371.793188ms ago: executing program 8 (id=3384): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 366.247261ms ago: executing program 6 (id=3385): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00') preadv(r0, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8) 301.143831ms ago: executing program 0 (id=3386): socket$alg(0x26, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) close(0x4) 288.358428ms ago: executing program 8 (id=3387): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='d', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="865c1ff15b7a", 0x6}], 0x1}}], 0x2, 0x400c810) 263.469471ms ago: executing program 7 (id=3388): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet_smc(0x2b, 0x1, 0x0) 251.712771ms ago: executing program 6 (id=3389): setns(0xc9, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/vlan/vlan1\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000840)=""/66, 0x42) 189.9005ms ago: executing program 8 (id=3390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001240)={@val={0x2000}, @void, @eth={@random="c5b18a334b46", @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x56) 181.15058ms ago: executing program 0 (id=3391): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="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", 0x559, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r0, 0x0) 125.323807ms ago: executing program 6 (id=3392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$inet(r1, &(0x7f0000000140)="f87647", 0x3, 0x1d28a8bbb8e59c77, 0x0, 0x0) 71.540001ms ago: executing program 0 (id=3393): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) write$cgroup_subtree(r0, 0x0, 0x0) 28.342237ms ago: executing program 7 (id=3394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 0s ago: executing program 6 (id=3395): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xc00, 0x191) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): T4-fs (loop3): Test dummy encryption mode enabled [ 69.769477][ T8366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.851800][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.929574][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 70.021998][ T8390] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 70.211733][ T8405] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.231706][ T8405] EXT4-fs (loop3): 1 truncate cleaned up [ 70.232209][ T8405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.288487][ T8405] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #2: block 13: comm syz.3.1485: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 70.376785][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.616413][ T8443] sctp: [Deprecated]: syz.1.1504 (pid 8443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.616413][ T8443] Use struct sctp_sack_info instead [ 70.627805][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1505'. [ 70.805527][ T4832] kernel read not supported for file /759/task (pid: 4832 comm: kworker/0:8) [ 71.032491][ T8479] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.043447][ T8480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.043457][ T8480] IPv6: NLM_F_CREATE should be set when creating new route [ 71.043475][ T8480] IPv6: NLM_F_CREATE should be set when creating new route [ 71.043485][ T8480] IPv6: NLM_F_CREATE should be set when creating new route [ 71.043580][ T8480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.143005][ T8486] capability: warning: `syz.1.1527' uses 32-bit capabilities (legacy support in use) [ 71.266910][ T8500] set_capacity_and_notify: 4 callbacks suppressed [ 71.266922][ T8500] loop0: detected capacity change from 0 to 128 [ 71.278067][ T8500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 71.278103][ T8500] System zones: 1-3, 19-19, 35-36 [ 71.278644][ T8500] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.373524][ T4709] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.544071][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 71.545823][ T8519] ip6gre1: entered promiscuous mode [ 71.545834][ T8519] ip6gre1: entered allmulticast mode [ 71.566594][ T323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 71.566669][ T323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 71.590581][ T4832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 71.597347][ T8525] ima: rule for LSM 'u' is undefined [ 71.599023][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 71.599032][ T30] audit: type=1807 audit(72.563:26): action=measure func=FILE_CHECK obj_type=u res=0 [ 71.609077][ T30] audit: type=1802 audit(72.573:27): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.1.1541" res=0 errno=0 [ 71.609392][ T8524] ima: policy update failed [ 71.609438][ T30] audit: type=1802 audit(72.573:28): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.1541" res=0 errno=0 [ 71.692454][ T8532] loop4: detected capacity change from 0 to 1024 [ 71.724017][ T8532] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 71.727418][ T8532] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 71.727860][ T8532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.790670][ T4800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 71.885503][ T8550] loop6: detected capacity change from 0 to 8192 [ 71.958845][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.080303][ T4800] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.148446][ T8563] loop3: detected capacity change from 0 to 512 [ 72.166546][ T8563] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1559: corrupted in-inode xattr: invalid ea_ino [ 72.166568][ T8563] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.168141][ T8563] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1559: couldn't read orphan inode 15 (err -117) [ 72.168159][ T8563] loop3: lost filesystem error report for type 5 error -117 [ 72.168745][ T8563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.273473][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.356938][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'. [ 72.681980][ T8620] loop4: detected capacity change from 0 to 512 [ 72.715153][ T8620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.716029][ T8620] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1586: bad orphan inode 131083 [ 72.716045][ T8620] loop4: lost filesystem error report for type 5 error -117 [ 72.716852][ T8620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.764788][ T8620] EXT4-fs (loop4): shut down requested (2) [ 72.812335][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.836409][ T8629] loop6: detected capacity change from 0 to 512 [ 72.848600][ T8629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 72.848631][ T8629] System zones: 1-12 [ 72.853628][ T8629] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.1589: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 72.853655][ T8629] loop6: lost filesystem error report for type 5 error -117 [ 72.853894][ T8629] EXT4-fs (loop6): 1 orphan inode deleted [ 72.854387][ T8629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.939505][ T7739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.142479][ T8658] loop0: detected capacity change from 0 to 1024 [ 73.164639][ T8658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.251403][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.308732][ T8672] loop3: detected capacity change from 0 to 2048 [ 73.358310][ T8672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.388414][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1611'. [ 73.429656][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.464757][ T8683] loop0: detected capacity change from 0 to 1024 [ 73.483015][ T8683] EXT4-fs: Ignoring removed oldalloc option [ 73.483027][ T8683] EXT4-fs: Ignoring removed orlov option [ 73.495753][ T8683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.522867][ T8683] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.1613: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.523149][ T8683] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 73.523166][ T8683] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.523166][ T8683] [ 73.523269][ T8683] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1613: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.523976][ T8683] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1613: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.546489][ T8683] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1613: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.551926][ T8683] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1613: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.621273][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.708812][ T8701] i2c i2c-0: Failed to register i2c client fsa4480 at 0x42 (-16) [ 73.758879][ T8708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 74.047534][ T8729] IPVS: Unknown mcast interface: veth0_to_bond [ 74.152463][ T8739] bond0: option arp_interval: invalid value (sHQ=) [ 74.152481][ T8739] bond0: option arp_interval: allowed values 0 - 2147483647 [ 74.206708][ T8742] bridge0: port 2(bridge_slave_1) entered listening state [ 74.207811][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.257589][ T1160] hid_parser_main: 6 callbacks suppressed [ 74.257601][ T1160] hid-generic 0005:16C0:05DF.0004: unknown main item tag 0x0 [ 74.264704][ T1160] hid-generic 0005:16C0:05DF.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 74.313786][ T8755] loop4: detected capacity change from 0 to 512 [ 74.318758][ T8755] ext4: Unknown parameter 'defcontext' [ 74.355014][ T8759] ima: rule for LSM 'u' is undefined [ 74.355125][ T30] audit: type=1807 audit(75.323:29): action=measure func=FILE_CHECK obj_type=u res=0 [ 74.355143][ T30] audit: type=1802 audit(75.323:30): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.6.1646" res=0 errno=0 [ 74.357307][ T8757] ima: policy update failed [ 74.357355][ T30] audit: type=1802 audit(75.323:31): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.6.1646" res=0 errno=0 [ 74.716499][ T8785] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 74.818178][ T8793] rnbd_client L127: Can't parse path i: -93 [ 74.912707][ T8798] logitech-hidpp-device 0005:046D:B012.0005: received hid++ report of bad size (4096) [ 74.915296][ T1160] logitech-hidpp-device 0005:046D:B012.0005: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 74.959223][ T8803] fido_id[8803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.201204][ T8821] netlink: 'syz.3.1673': attribute type 10 has an invalid length. [ 75.207511][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.217552][ T8821] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 75.277341][ T8828] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1678'. [ 75.359056][ T8836] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 75.379686][ T8836] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1681: bg 0: block 104: invalid block bitmap [ 75.379704][ T8836] loop1: lost filesystem error report for type 5 error -117 [ 75.379862][ T8836] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 75.379872][ T8836] loop1: lost filesystem error report for type 5 error -117 [ 75.379983][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 75.379993][ C0] EXT4-fs (loop1): initial error at time 76: ext4_validate_block_bitmap:436 [ 75.380008][ C0] EXT4-fs (loop1): last error at time 76: ext4_mb_clear_bb:6680 [ 75.395049][ T8836] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1681: invalid indirect mapped block 1 (level 1) [ 75.395069][ T8836] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.396285][ T8836] EXT4-fs (loop1): 1 truncate cleaned up [ 75.396719][ T8836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.438151][ T8836] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.507475][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.530100][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 75.848897][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 75.848934][ T8878] team_slave_0: Caught tx_queue_len zero misconfig [ 75.902943][ T8886] EXT4-fs: Ignoring removed oldalloc option [ 75.907714][ T8886] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 75.919791][ T8886] EXT4-fs (loop3): 1 truncate cleaned up [ 75.921383][ T8886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.973861][ T4711] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /308/file0: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=1024, size=1024 fake=0 [ 75.974455][ T4711] EXT4-fs (loop3): Remounting filesystem read-only [ 76.068885][ T8896] tun0: tun_chr_ioctl cmd 1074025677 [ 76.068945][ T8896] tun0: linktype set to 270 [ 76.085571][ T8900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.096269][ T5544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.181807][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.348647][ T405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.423910][ T30] audit: type=1400 audit(77.393:32): lsm=SMACK fn=smack_task_setioprio action=denied subject="w" object="_" requested=w pid=8922 comm="syz.6.1720" opid=8922 ocomm="syz.6.1720" [ 76.426215][ T405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.480206][ T405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.568763][ T405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.678175][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.679513][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.684350][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.684796][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.685029][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.721906][ T8944] set_capacity_and_notify: 6 callbacks suppressed [ 76.721918][ T8944] loop1: detected capacity change from 0 to 512 [ 76.865416][ T405] bridge_slave_1: left promiscuous mode [ 76.865498][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.885977][ T405] bridge_slave_0: left allmulticast mode [ 76.885995][ T405] bridge_slave_0: left promiscuous mode [ 76.886068][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.014027][ T8961] rnbd_client L127: Can't parse path i: -93 [ 77.043457][ T8966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 77.136194][ T405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.139299][ T405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.149941][ T405] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 77.155309][ T405] bond0 (unregistering): Released all slaves [ 77.205921][ T405] tipc: Disabling bearer [ 77.206098][ T405] tipc: Left network mode [ 77.288140][ T8978] loop4: detected capacity change from 0 to 512 [ 77.297685][ T8978] EXT4-fs (loop4): Test dummy encryption mode enabled [ 77.315823][ T8978] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.1743: inode has both inline data and extents flags [ 77.315851][ T8978] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.319995][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 77.320009][ C0] EXT4-fs (loop4): initial error at time 78: ext4_orphan_get:1403: inode 15 [ 77.320031][ C0] EXT4-fs (loop4): last error at time 78: ext4_orphan_get:1403: inode 15 [ 77.334919][ T8978] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1743: couldn't read orphan inode 15 (err -117) [ 77.334941][ T8978] loop4: lost filesystem error report for type 5 error -117 [ 77.335691][ T8978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.377390][ T8978] fscrypt: AES-256-XTS using blk-crypto-fallback [ 77.403631][ T8993] loop0: detected capacity change from 0 to 512 [ 77.414718][ T8993] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.524690][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.559060][ T405] hsr_slave_0: left promiscuous mode [ 77.567426][ T9002] loop1: detected capacity change from 0 to 256 [ 77.586354][ T405] hsr_slave_1: left promiscuous mode [ 77.611997][ T405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.612012][ T405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.612565][ T405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.612576][ T405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.631298][ T405] veth1_macvtap: left promiscuous mode [ 77.631327][ T405] veth0_macvtap: left promiscuous mode [ 77.631364][ T405] veth1_vlan: left promiscuous mode [ 77.631398][ T405] veth0_vlan: left promiscuous mode [ 78.073814][ T405] team0 (unregistering): Port device team_slave_1 removed [ 78.087465][ T405] team0 (unregistering): Port device team_slave_0 removed [ 78.175611][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 78.391021][ T9054] input: syz1 as /devices/virtual/input/input23 [ 78.419280][ T9060] loop6: detected capacity change from 0 to 512 [ 78.426069][ T405] IPVS: stop unused estimator thread 0... [ 78.432182][ T9060] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 78.469805][ T9060] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1766: bg 0: block 104: invalid block bitmap [ 78.469836][ T9060] loop6: lost filesystem error report for type 5 error -117 [ 78.469985][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 78.469996][ C0] EXT4-fs (loop6): initial error at time 79: ext4_validate_block_bitmap:436 [ 78.470011][ C0] EXT4-fs (loop6): last error at time 79: ext4_validate_block_bitmap:436 [ 78.473465][ T9060] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 78.473480][ T9060] loop6: lost filesystem error report for type 5 error -117 [ 78.480359][ T9060] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1766: invalid indirect mapped block 1 (level 1) [ 78.480381][ T9060] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.487101][ T9060] EXT4-fs (loop6): 1 truncate cleaned up [ 78.487573][ T9060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.531085][ T9060] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 78.611451][ T7739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.714514][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1769'. [ 78.715382][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.721031][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.721102][ T8938] bridge_slave_0: entered allmulticast mode [ 78.721533][ T8938] bridge_slave_0: entered promiscuous mode [ 78.730142][ T4716] Bluetooth: hci2: command tx timeout [ 78.734759][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.734787][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.734848][ T8938] bridge_slave_1: entered allmulticast mode [ 78.736209][ T8938] bridge_slave_1: entered promiscuous mode [ 78.783887][ T8938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.784712][ T8938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.835769][ T8938] team0: Port device team_slave_0 added [ 78.836466][ T8938] team0: Port device team_slave_1 added [ 78.878925][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.878944][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.878991][ T8938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.900052][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.900062][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.900073][ T8938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.939800][ T30] audit: type=1400 audit(79.903:33): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=9092 comm="syz.1.1776" name="323" dev="tmpfs" ino=1698 [ 78.968177][ T8938] hsr_slave_0: entered promiscuous mode [ 78.976590][ T8938] hsr_slave_1: entered promiscuous mode [ 78.976814][ T8938] debugfs: 'hsr0' already exists in 'hsr' [ 78.976825][ T8938] Cannot create hsr debugfs directory [ 79.046893][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1779'. [ 79.073913][ T9106] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 79.249567][ T8938] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 79.266391][ T8938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.266700][ T8938] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 79.281036][ T8938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.287524][ T8938] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 79.314740][ T8938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.315064][ T8938] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 79.332393][ T8938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.463665][ T8938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.487923][ T8938] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.493250][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.493276][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.493775][ T405] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.493794][ T405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.528785][ T8938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.528800][ T8938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.571556][ T9153] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 79.691488][ T9164] loop4: detected capacity change from 0 to 128 [ 79.693639][ T30] audit: type=1400 audit(80.663:34): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=x pid=9161 comm="syz.1.1796" name="file1" dev="tmpfs" ino=1735 [ 79.907922][ T4800] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 80.065987][ T8938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.104454][ T4800] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 80.109877][ T4800] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 80.110010][ T4800] usb 1-1: can't read configurations, error -71 [ 80.167884][ T4832] wacom 0003:056A:003F.0006: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 80.336007][ T8938] veth0_vlan: entered promiscuous mode [ 80.338408][ T8938] veth1_vlan: entered promiscuous mode [ 80.364142][ T8938] veth0_macvtap: entered promiscuous mode [ 80.373068][ T8938] veth1_macvtap: entered promiscuous mode [ 80.378372][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.379317][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.423539][ T280] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.423691][ T280] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.423722][ T280] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.423741][ T280] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.472862][ T323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.472878][ T323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.514886][ T280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.514900][ T280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.602698][ T9218] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 80.602721][ T9218] vhci_hcd vhci_hcd.2: invalid port number 96 [ 80.602733][ T9218] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 80.749195][ T9234] Injecting memory failure for pfn 0x19539e at process virtual address 0x20001000 [ 80.787492][ T9234] Memory failure: 0x19539e: keeping poisoned page in swap cache [ 80.787521][ T9234] Memory failure: 0x19539e: Sending SIGBUS to syz.6.1807:9234 due to hardware memory corruption [ 80.787565][ T9234] Memory failure: 0x19539e: recovery action for dirty swapcache page: Delayed [ 80.787596][ T9234] Injecting memory failure for pfn 0x120223 at process virtual address 0x20002000 [ 80.789341][ T9234] Memory failure: 0x120223: keeping poisoned page in swap cache [ 80.789363][ T9234] Memory failure: 0x120223: Sending SIGBUS to syz.6.1807:9234 due to hardware memory corruption [ 80.789389][ T9234] Memory failure: 0x120223: recovery action for dirty swapcache page: Delayed [ 80.789418][ T9234] Injecting memory failure for pfn 0x138870 at process virtual address 0x20003000 [ 80.789524][ T9234] Memory failure: 0x138870: keeping poisoned page in swap cache [ 80.789536][ T9234] Memory failure: 0x138870: Sending SIGBUS to syz.6.1807:9234 due to hardware memory corruption [ 80.789555][ T9234] Memory failure: 0x138870: recovery action for dirty swapcache page: Delayed [ 80.810135][ T4716] Bluetooth: hci2: command tx timeout [ 80.918909][ T9244] loop0: detected capacity change from 0 to 512 [ 80.956124][ T9244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.058440][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.183442][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 81.302502][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1822'. [ 81.355915][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 81.366737][ T9268] netlink: 'syz.0.1823': attribute type 2 has an invalid length. [ 81.366750][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1823'. [ 81.446123][ T9275] loop1: detected capacity change from 0 to 512 [ 81.465342][ T9275] EXT4-fs (loop1): Test dummy encryption mode enabled [ 81.468039][ T9275] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1835: inode has both inline data and extents flags [ 81.468055][ T9275] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.468716][ T9275] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1835: couldn't read orphan inode 15 (err -117) [ 81.468741][ T9275] loop1: lost filesystem error report for type 5 error -117 [ 81.484156][ T9275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.634944][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.706203][ T9292] input: syz1 as /devices/virtual/input/input27 [ 81.848553][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1834'. [ 81.892936][ T9311] bridge0: port 3(syz_tun) entered blocking state [ 81.893243][ T9311] bridge0: port 3(syz_tun) entered disabled state [ 81.893410][ T9311] syz_tun: entered allmulticast mode [ 81.906487][ T9311] syz_tun: entered promiscuous mode [ 81.906830][ T9311] bridge0: port 3(syz_tun) entered blocking state [ 81.906867][ T9311] bridge0: port 3(syz_tun) entered forwarding state [ 81.953745][ T9315] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1839'. [ 81.981231][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 82.182929][ T482] Bluetooth: hci5: Frame reassembly failed (-84) [ 82.194876][ T9337] Bluetooth: hci5: Frame reassembly failed (-84) [ 82.549849][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 82.570431][ T4800] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.577443][ T9372] loop6: detected capacity change from 0 to 512 [ 82.585354][ T9372] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.729205][ T4800] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.729232][ T4800] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 82.729834][ T4800] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 82.729848][ T4800] usb 1-1: can't read configurations, error -71 [ 82.767935][ T9386] netlink: 316 bytes leftover after parsing attributes in process `syz.6.1865'. [ 82.890097][ T50] Bluetooth: hci2: command tx timeout [ 82.894220][ T9398] rnbd_client L610: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 82.894496][ T9398] rnbd_client L1256: Session s+ not found, and path parameter not given [ 83.222386][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1879'. [ 83.222407][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1879'. [ 83.222417][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1879'. [ 83.264185][ T9425] ip_tables: iptables: counters copy to user failed while replacing table [ 83.675150][ T9451] bonding: no command found in bonding_masters - use +ifname or -ifname [ 83.690046][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 83.853569][ T9463] mmap: syz.6.1898 (9463) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.891460][ T9468] loop7: detected capacity change from 0 to 512 [ 83.937124][ T9468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.984920][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.066143][ T9482] erspan0: entered promiscuous mode [ 84.234839][ T280] IPVS: stopping estimator thread 0... [ 84.235864][ T280] IPVS: starting estimator thread 0... [ 84.250411][ T50] Bluetooth: hci5: command 0xfc11 tx timeout [ 84.250506][ T4716] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 84.340107][ T9497] IPVS: using max 43 ests per chain, 103200 per kthread [ 84.386410][ T9505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1916'. [ 84.466270][ T9511] bond0: no command found in slaves file - use +ifname or -ifname [ 84.540803][ T9513] sctp: [Deprecated]: syz.6.1929 (pid 9513) Use of int in maxseg socket option. [ 84.540803][ T9513] Use struct sctp_assoc_value instead [ 84.558761][ T9516] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 84.798258][ T9535] binder: 9534:9535 ioctl c018620c 20000000 returned -1 [ 84.899025][ T9541] loop6: detected capacity change from 0 to 128 [ 84.915558][ T9541] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.972754][ T4716] Bluetooth: hci2: command tx timeout [ 84.975225][ T7739] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.012599][ T482] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 85.109087][ T9552] loop0: detected capacity change from 0 to 512 [ 85.125411][ T9552] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.137210][ T9552] EXT4-fs (loop0): 1 truncate cleaned up [ 85.137628][ T9552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.170211][ T9552] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #2: block 13: comm syz.0.1947: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 85.200739][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.859025][ T9589] Injecting memory failure for pfn 0x136d70 at process virtual address 0x20001000 [ 85.879116][ T9589] Memory failure: 0x136d70: keeping poisoned page in swap cache [ 85.879140][ T9589] Memory failure: 0x136d70: Sending SIGBUS to syz.7.1924:9589 due to hardware memory corruption [ 85.879180][ T9589] Memory failure: 0x136d70: recovery action for dirty swapcache page: Delayed [ 85.879209][ T9589] Injecting memory failure for pfn 0x138da5 at process virtual address 0x20002000 [ 85.890876][ T9589] Memory failure: 0x138da5: keeping poisoned page in swap cache [ 85.890899][ T9589] Memory failure: 0x138da5: Sending SIGBUS to syz.7.1924:9589 due to hardware memory corruption [ 85.890929][ T9589] Memory failure: 0x138da5: recovery action for dirty swapcache page: Delayed [ 85.890978][ T9589] Injecting memory failure for pfn 0x138da4 at process virtual address 0x20003000 [ 85.891033][ T9589] Memory failure: 0x138da4: keeping poisoned page in swap cache [ 85.891046][ T9589] Memory failure: 0x138da4: Sending SIGBUS to syz.7.1924:9589 due to hardware memory corruption [ 85.891066][ T9589] Memory failure: 0x138da4: recovery action for dirty swapcache page: Delayed [ 86.177236][ T9611] ip_tables: iptables: counters copy to user failed while replacing table [ 86.290745][ T9617] sctp: [Deprecated]: syz.6.1968 (pid 9617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.290745][ T9617] Use struct sctp_sack_info instead [ 86.651145][ T9652] loop7: detected capacity change from 0 to 512 [ 86.662853][ T9652] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.1984: inode has both inline data and extents flags [ 86.662877][ T9652] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.663272][ T9652] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1984: couldn't read orphan inode 15 (err -117) [ 86.663292][ T9652] loop7: lost filesystem error report for type 5 error -117 [ 86.663813][ T9652] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.713283][ T9652] fscrypt (loop7, inode 18): Unsupported encryption flags (0x10) [ 86.745649][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.956165][ T9676] __nla_validate_parse: 5 callbacks suppressed [ 86.956178][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1994'. [ 86.975045][ T9676] ip6gre1: entered promiscuous mode [ 86.975060][ T9676] ip6gre1: entered allmulticast mode [ 86.976934][ T405] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 86.977032][ T405] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.001066][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.100711][ T1160] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.163982][ T9691] input: syz0 as /devices/virtual/input/input28 [ 87.292126][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.387331][ T9716] loop4: detected capacity change from 0 to 1024 [ 87.414665][ T9716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.436059][ T9716] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 87.450610][ T9716] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 87.450634][ T9716] EXT4-fs (loop4): This should not happen!! Data will be lost [ 87.450634][ T9716] [ 87.450643][ T9716] EXT4-fs (loop4): Total free blocks count 0 [ 87.450651][ T9716] EXT4-fs (loop4): Free/Dirty block details [ 87.450659][ T9716] EXT4-fs (loop4): free_blocks=68451041280 [ 87.450700][ T9716] EXT4-fs (loop4): dirty_blocks=64 [ 87.450706][ T9716] EXT4-fs (loop4): Block reservation details [ 87.450712][ T9716] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 87.513922][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.620387][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 87.620410][ T9736] netlink: 'syz.0.2024': attribute type 26 has an invalid length. [ 87.693167][ T30] audit: type=1326 audit(88.663:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.4.2028" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 87.693188][ T30] audit: type=1326 audit(88.663:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.4.2028" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 87.693692][ T30] audit: type=1326 audit(88.663:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.4.2028" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 87.693708][ T30] audit: type=1326 audit(88.663:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.4.2028" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 87.693722][ T30] audit: type=1326 audit(88.663:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.4.2028" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 87.813260][ T9748] loop4: detected capacity change from 0 to 2048 [ 88.428248][ T9786] loop7: detected capacity change from 0 to 8192 [ 88.588801][ T9801] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 88.758789][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2060'. [ 88.831676][ T9817] loop1: detected capacity change from 0 to 4096 [ 88.862259][ T9817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.889271][ T9817] EXT4-fs (loop1): shut down requested (0) [ 89.008652][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.069624][ T9836] loop7: detected capacity change from 0 to 128 [ 89.084720][ T9836] vfat: Unknown parameter 'nonumtai;kr' [ 89.105539][ T9838] loop1: detected capacity change from 0 to 512 [ 89.120714][ T9838] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.2069: corrupted in-inode xattr: invalid ea_ino [ 89.120732][ T9838] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.120828][ T9838] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.2069: couldn't read orphan inode 15 (err -117) [ 89.120840][ T9838] loop1: lost filesystem error report for type 5 error -117 [ 89.125302][ T9838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.266078][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.306405][ T9847] Injecting memory failure for pfn 0x135431 at process virtual address 0x20001000 [ 89.332190][ T9847] Memory failure: 0x135431: keeping poisoned page in swap cache [ 89.332214][ T9847] Memory failure: 0x135431: Sending SIGBUS to syz.4.2041:9847 due to hardware memory corruption [ 89.332246][ T9847] Memory failure: 0x135431: recovery action for dirty swapcache page: Delayed [ 89.332272][ T9847] Injecting memory failure for pfn 0x135430 at process virtual address 0x20002000 [ 89.332318][ T9847] Memory failure: 0x135430: keeping poisoned page in swap cache [ 89.332329][ T9847] Memory failure: 0x135430: Sending SIGBUS to syz.4.2041:9847 due to hardware memory corruption [ 89.332346][ T9847] Memory failure: 0x135430: recovery action for dirty swapcache page: Delayed [ 89.332364][ T9847] Injecting memory failure for pfn 0x120319 at process virtual address 0x20003000 [ 89.332390][ T9847] Memory failure: 0x120319: keeping poisoned page in swap cache [ 89.332400][ T9847] Memory failure: 0x120319: Sending SIGBUS to syz.4.2041:9847 due to hardware memory corruption [ 89.332416][ T9847] Memory failure: 0x120319: recovery action for dirty swapcache page: Delayed [ 89.406889][ T9835] Injecting memory failure for pfn 0x194e62 at process virtual address 0x20276000 [ 89.407357][ T9835] Memory failure: 0x194e62: Sending SIGBUS to syz.6.2071:9835 due to hardware memory corruption [ 89.407398][ T9835] Memory failure: 0x194e62: recovery action for dirty LRU page: Recovered [ 89.407414][ T9835] Injecting memory failure for pfn 0x194e63 at process virtual address 0x20277000 [ 89.407638][ T9835] Memory failure: 0x194e63: Sending SIGBUS to syz.6.2071:9835 due to hardware memory corruption [ 89.407659][ T9835] Memory failure: 0x194e63: recovery action for dirty LRU page: Recovered [ 89.560240][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2080'. [ 89.668574][ T9865] Bluetooth: MGMT ver 1.23 [ 89.776411][ T9873] loop1: detected capacity change from 0 to 2048 [ 89.822944][ T9878] loop4: detected capacity change from 0 to 256 [ 89.849262][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2088'. [ 89.853162][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 89.992204][ T9891] loop4: detected capacity change from 0 to 256 [ 90.000553][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 90.001534][ T10] usb 1-1: config index 0 descriptor too short (expected 45, got 28) [ 90.001550][ T10] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 90.001567][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 90.004252][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.004265][ T10] usb 1-1: Product: syz [ 90.004274][ T10] usb 1-1: Manufacturer: syz [ 90.004281][ T10] usb 1-1: SerialNumber: syz [ 90.007153][ T9887] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 90.042391][ T10] rtl8150 1-1:1.0: couldn't find required endpoints [ 90.042607][ T10] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 90.110822][ T9894] pimreg0: tun_chr_ioctl cmd 1074025680 [ 90.114747][ T9896] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2097'. [ 90.224437][ T9903] sch_fq: defrate 0 ignored. [ 90.291544][ T10] usb 1-1: USB disconnect, device number 6 [ 90.648209][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2120'. [ 90.648227][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2120'. [ 90.652237][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.789361][ T9955] Injecting memory failure for pfn 0x136dae at process virtual address 0x20ffe000 [ 90.795175][ T9955] Memory failure: 0x136dae: Sending SIGBUS to syz.4.2124:9955 due to hardware memory corruption [ 90.795216][ T9955] Memory failure: 0x136dae: recovery action for dirty LRU page: Recovered [ 90.899739][ T9972] loop7: detected capacity change from 0 to 256 [ 90.921611][ T9972] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.973161][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2134'. [ 91.146429][ T9992] loop4: detected capacity change from 0 to 512 [ 91.450632][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2156'. [ 91.450672][T10019] wg0: Caught tx_queue_len zero misconfig [ 91.777126][T10052] Injecting memory failure for pfn 0x11fb2d at process virtual address 0x20036000 [ 91.777506][T10052] Memory failure: 0x11fb2d: recovery action for clean LRU page: Recovered [ 91.777520][T10052] Injecting memory failure for pfn 0x138dfc at process virtual address 0x20037000 [ 91.777562][T10052] Memory failure: 0x138dfc: recovery action for clean LRU page: Recovered [ 91.777572][T10052] Injecting memory failure for pfn 0x137d95 at process virtual address 0x20038000 [ 91.777609][T10052] Memory failure: 0x137d95: recovery action for clean LRU page: Recovered [ 91.777619][T10052] Injecting memory failure for pfn 0x120326 at process virtual address 0x20039000 [ 91.777653][T10052] Memory failure: 0x120326: recovery action for clean LRU page: Recovered [ 91.886174][ T30] audit: type=1400 audit(92.853:40): lsm=SMACK fn=smack_inode_link action=denied subject="_" object="lowerdir" requested=w pid=10055 comm="syz.7.2173" name="file1" dev="tmpfs" ino=408 [ 92.049504][ T30] audit: type=1326 audit(93.013:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10070 comm="syz.0.2179" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f78828 code=0x0 [ 92.436493][T10109] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10802a [ 92.436512][T10109] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 92.436531][T10109] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 92.436540][T10109] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 92.436546][T10109] page dumped because: unmovable page [ 92.610222][T10123] __nla_validate_parse: 1 callbacks suppressed [ 92.610237][T10123] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2204'. [ 92.676559][T10130] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2206'. [ 92.676583][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 93.022145][T10154] set_capacity_and_notify: 4 callbacks suppressed [ 93.022157][T10154] loop4: detected capacity change from 0 to 128 [ 93.280154][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2219'. [ 93.597343][T10194] loop6: detected capacity change from 0 to 128 [ 93.605588][T10194] FAT-fs (loop6): bogus number of reserved sectors [ 93.605602][T10194] FAT-fs (loop6): Can't find a valid FAT filesystem [ 93.754521][T10204] loop1: detected capacity change from 0 to 512 [ 93.754758][T10204] EXT4-fs: Ignoring removed nobh option [ 93.767549][T10204] EXT4-fs (loop1): 1 truncate cleaned up [ 94.256802][T10249] trusted_key: encrypted_key: keyword 'updadefault' not recognized [ 94.467812][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2248'. [ 94.521305][T10279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.694540][T10295] loop0: detected capacity change from 0 to 256 [ 96.563213][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 96.647683][T10336] binder: Binderfs stats mode cannot be changed during a remount [ 96.844248][T10357] netlink: 'syz.4.2288': attribute type 2 has an invalid length. [ 96.844263][T10357] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2288'. [ 97.070525][T10376] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2298'. [ 97.268368][T10401] bridge0: port 3(syz_tun) entered blocking state [ 97.268397][T10401] bridge0: port 3(syz_tun) entered disabled state [ 97.268491][T10401] syz_tun: entered allmulticast mode [ 97.268990][T10401] syz_tun: entered promiscuous mode [ 97.269220][T10401] bridge0: port 3(syz_tun) entered blocking state [ 97.269242][T10401] bridge0: port 3(syz_tun) entered forwarding state [ 97.368974][T10409] netlink: 316 bytes leftover after parsing attributes in process `syz.7.2311'. [ 97.562744][T10429] loop6: detected capacity change from 0 to 256 [ 97.727763][T10440] rnbd_client L610: Mapping device / on session s+, (access_mode: rw, nr_poll_queues: 0) [ 97.727792][T10440] rnbd_client L1256: Session s+ not found, and path parameter not given [ 98.410060][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.522283][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2369'. [ 98.539374][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.539538][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.636904][T10517] loop7: detected capacity change from 0 to 256 [ 98.697675][T10519] netlink: 'syz.4.2363': attribute type 1 has an invalid length. [ 98.697689][T10519] netlink: 'syz.4.2363': attribute type 1 has an invalid length. [ 98.697715][T10519] iwpm_send_hello: Unable to send a nlmsg [ 98.794462][T10528] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 99.038794][T10540] sctp: [Deprecated]: syz.0.2374 (pid 10540) Use of int in maxseg socket option. [ 99.038794][T10540] Use struct sctp_assoc_value instead [ 99.259604][T10553] tap0: tun_chr_ioctl cmd 1074025677 [ 99.259667][T10553] tap0: linktype set to 6 [ 99.539034][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2397'. [ 99.611662][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.611826][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.654639][T10581] loop4: detected capacity change from 0 to 512 [ 99.673672][T10581] EXT4-fs mount: 8 callbacks suppressed [ 99.673685][T10581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 99.690069][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.708128][T10581] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 99.708185][T10581] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 99.708210][T10581] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.2392: Failed to acquire dquot type 0 [ 99.747115][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.834451][T10600] i2c i2c-0: Failed to register i2c client tps25750 at 0x03 (-16) [ 99.944783][T10612] loop4: detected capacity change from 0 to 128 [ 99.955903][T10614] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2406'. [ 99.956779][T10612] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.013702][ T4708] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.110324][ T1160] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.243006][ T1160] usb 1-1: device descriptor read/64, error -71 [ 100.254782][T10641] loop4: detected capacity change from 0 to 512 [ 100.262629][T10641] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.272701][T10641] EXT4-fs (loop4): 1 truncate cleaned up [ 100.273184][T10641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.323268][T10641] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #2: block 13: comm syz.4.2421: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 100.367417][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.439718][T10656] ip_tables: iptables: counters copy to user failed while replacing table [ 100.482243][ T1160] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 100.589835][T10670] loop1: detected capacity change from 0 to 1024 [ 100.607086][T10670] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.607111][T10670] EXT4-fs: Ignoring removed oldalloc option [ 100.613080][ T1160] usb 1-1: device descriptor read/64, error -71 [ 100.641611][T10670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.658895][T10670] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.2434: lblock 3 mapped to illegal pblock 3 (length 3) [ 100.677997][T10670] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 100.678024][T10670] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.678024][T10670] [ 100.693284][T10670] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm syz.1.2434: lblock 8 mapped to illegal pblock 8 (length 5) [ 100.698213][T10670] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 100.698250][T10670] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.698250][T10670] [ 100.720798][ T1160] usb usb1-port1: attempt power cycle [ 100.727264][ T280] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 100.728441][ T280] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 100.728456][ T280] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.728456][ T280] [ 100.728463][ T280] EXT4-fs (loop1): Total free blocks count 0 [ 100.728470][ T280] EXT4-fs (loop1): Free/Dirty block details [ 100.728494][ T280] EXT4-fs (loop1): free_blocks=0 [ 101.060416][ T1160] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 101.080626][ T1160] usb 1-1: device descriptor read/8, error -71 [ 101.272877][ T10] kernel read not supported for file /video9 (pid: 10 comm: kworker/0:1) [ 101.321239][ T1160] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 101.341570][ T1160] usb 1-1: device descriptor read/8, error -71 [ 101.451337][ T1160] usb usb1-port1: unable to enumerate USB device [ 101.590261][T10751] sctp: [Deprecated]: syz.7.2472 (pid 10751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.590261][T10751] Use struct sctp_sack_info instead [ 101.628901][ T10] kernel read not supported for file /983/task (pid: 10 comm: kworker/0:1) [ 101.637862][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2474'. [ 101.816446][T10770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.816456][T10770] IPv6: NLM_F_CREATE should be set when creating new route [ 101.816468][T10770] IPv6: NLM_F_CREATE should be set when creating new route [ 101.816476][T10770] IPv6: NLM_F_CREATE should be set when creating new route [ 101.816565][T10770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.042774][ T280] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.049397][T10789] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.078796][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2492'. [ 102.093119][T10795] ip6gre1: entered promiscuous mode [ 102.093131][T10795] ip6gre1: entered allmulticast mode [ 102.093897][ T9] atkbd serio7: keyboard reset failed on [ 102.094841][ T323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.094907][ T323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.120207][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.391317][ T1160] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.543546][T10812] loop4: detected capacity change from 0 to 512 [ 102.549515][T10812] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.2500: inode has both inline data and extents flags [ 102.549531][T10812] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.549621][T10812] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2500: couldn't read orphan inode 15 (err -117) [ 102.549634][T10812] loop4: lost filesystem error report for type 5 error -117 [ 102.550232][T10812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.584233][T10812] fscrypt (loop4, inode 18): Unsupported encryption flags (0x10) [ 102.604294][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.844682][T10836] loop0: detected capacity change from 0 to 1024 [ 102.868974][T10836] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 102.880509][T10836] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 102.880944][T10836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.917810][ T30] audit: type=1326 audit(103.883:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.7.2514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82578828 code=0x7ffc0000 [ 102.917831][ T30] audit: type=1326 audit(103.883:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.7.2514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82578828 code=0x7ffc0000 [ 102.934808][ T30] audit: type=1326 audit(103.903:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.7.2514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff82578828 code=0x7ffc0000 [ 102.934830][ T30] audit: type=1326 audit(103.903:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.7.2514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82578828 code=0x7ffc0000 [ 102.934845][ T30] audit: type=1326 audit(103.903:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.7.2514" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82578828 code=0x7ffc0000 [ 102.987286][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.082867][T10846] loop1: detected capacity change from 0 to 8192 [ 103.132799][ T1160] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 103.319265][T10860] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 104.023149][T10892] loop1: detected capacity change from 0 to 256 [ 104.092744][ T50] Bluetooth: hci5: command 0xfc11 tx timeout [ 104.092824][ T4716] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 104.216889][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2547'. [ 104.233264][T10911] loop7: detected capacity change from 0 to 256 [ 104.293511][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'. [ 104.352025][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 104.444438][T10927] pimreg0: tun_chr_ioctl cmd 1074025680 [ 104.488540][T10935] loop7: detected capacity change from 0 to 256 [ 104.674902][T10949] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2567'. [ 104.876889][T10958] erspan0: entered promiscuous mode [ 105.037867][T10973] sctp: [Deprecated]: syz.0.2576 (pid 10973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.037867][T10973] Use struct sctp_sack_info instead [ 105.083331][T10979] bond0: no command found in slaves file - use +ifname or -ifname [ 105.274864][T11003] input: syz0 as /devices/virtual/input/input30 [ 105.499433][T11012] sctp: [Deprecated]: syz.4.2596 (pid 11012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.499433][T11012] Use struct sctp_sack_info instead [ 105.542223][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2598'. [ 105.542246][T11016] netlink: 'syz.6.2598': attribute type 26 has an invalid length. [ 105.635233][T11022] loop7: detected capacity change from 0 to 1024 [ 105.678083][T11022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.726788][T11022] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.726846][T11022] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 105.726858][T11022] EXT4-fs (loop7): This should not happen!! Data will be lost [ 105.726858][T11022] [ 105.726865][T11022] EXT4-fs (loop7): Total free blocks count 0 [ 105.726872][T11022] EXT4-fs (loop7): Free/Dirty block details [ 105.726880][T11022] EXT4-fs (loop7): free_blocks=68451041280 [ 105.726888][T11022] EXT4-fs (loop7): dirty_blocks=64 [ 105.726895][T11022] EXT4-fs (loop7): Block reservation details [ 105.726901][T11022] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 105.904120][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.984305][T11043] sctp: [Deprecated]: syz.1.2612 (pid 11043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.984305][T11043] Use struct sctp_sack_info instead [ 106.041414][T11045] loop7: detected capacity change from 0 to 4096 [ 106.046926][T11045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.068280][T11045] EXT4-fs (loop7): shut down requested (0) [ 106.137382][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.181057][T11057] loop1: detected capacity change from 0 to 128 [ 106.197681][T11057] vfat: Unknown parameter 'nonumtai;kr' [ 106.214397][T11058] sctp: [Deprecated]: syz.6.2625 (pid 11058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.214397][T11058] Use struct sctp_sack_info instead [ 106.490049][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.443308][T11080] loop0: detected capacity change from 0 to 256 [ 111.569081][T11085] loop4: detected capacity change from 0 to 4096 [ 111.577214][T11085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.594920][T11085] EXT4-fs (loop4): shut down requested (0) [ 111.669662][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.868109][T11108] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 111.972114][T11099] Injecting memory failure for pfn 0x1203ed at process virtual address 0x20276000 [ 111.977344][T11099] Memory failure: 0x1203ed: keeping poisoned page in swap cache [ 111.977399][T11099] Memory failure: 0x1203ed: recovery action for clean swapcache page: Recovered [ 111.977425][T11099] Injecting memory failure for pfn 0x11e4a8 at process virtual address 0x20277000 [ 111.977485][T11099] Memory failure: 0x11e4a8: keeping poisoned page in swap cache [ 111.977507][T11099] Memory failure: 0x11e4a8: recovery action for clean swapcache page: Recovered [ 112.003198][T11102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.003385][T11102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.055353][T11114] loop6: detected capacity change from 0 to 4096 [ 112.065183][T11114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.082373][T11114] EXT4-fs (loop6): shut down requested (0) [ 112.112629][ T7739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.241394][T11124] loop0: detected capacity change from 0 to 4096 [ 112.253766][T11124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.273395][T11124] EXT4-fs (loop0): shut down requested (0) [ 112.294934][T11131] sch_fq: defrate 0 ignored. [ 112.298923][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.887038][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 112.887056][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2666'. [ 112.915393][T11148] Injecting memory failure for pfn 0x121f55 at process virtual address 0x20276000 [ 112.916462][T11148] Memory failure: 0x121f55: keeping poisoned page in swap cache [ 112.916499][T11148] Memory failure: 0x121f55: recovery action for clean swapcache page: Recovered [ 112.916525][T11148] Injecting memory failure for pfn 0x13541a at process virtual address 0x20277000 [ 112.916554][T11148] Memory failure: 0x13541a: keeping poisoned page in swap cache [ 112.916573][T11148] Memory failure: 0x13541a: recovery action for clean swapcache page: Recovered [ 113.048823][T11162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.049013][T11162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.064941][T11171] Injecting memory failure for pfn 0x1354c8 at process virtual address 0x20ffe000 [ 113.065530][T11171] Memory failure: 0x1354c8: Sending SIGBUS to syz.6.2668:11171 due to hardware memory corruption [ 113.065564][T11171] Memory failure: 0x1354c8: recovery action for dirty LRU page: Recovered [ 113.277654][T11193] Injecting memory failure for pfn 0x12033f at process virtual address 0x20036000 [ 113.277875][T11193] Memory failure: 0x12033f: recovery action for clean LRU page: Recovered [ 113.277888][T11193] Injecting memory failure for pfn 0x11dedb at process virtual address 0x20037000 [ 113.277928][T11193] Memory failure: 0x11dedb: recovery action for clean LRU page: Recovered [ 113.277938][T11193] Injecting memory failure for pfn 0x136d71 at process virtual address 0x20038000 [ 113.277996][T11193] Memory failure: 0x136d71: recovery action for clean LRU page: Recovered [ 113.278006][T11193] Injecting memory failure for pfn 0x1387d6 at process virtual address 0x20039000 [ 113.278041][T11193] Memory failure: 0x1387d6: recovery action for clean LRU page: Recovered [ 113.392408][T11199] loop1: detected capacity change from 0 to 256 [ 113.402833][T11199] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.416685][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2679'. [ 113.644213][T11221] loop1: detected capacity change from 0 to 1024 [ 113.668640][T11221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.755559][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.770039][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.828903][ T30] audit: type=1400 audit(114.793:47): lsm=SMACK fn=smack_inode_link action=denied subject="_" object="lowerdir" requested=w pid=11232 comm="syz.1.2693" name="file1" dev="tmpfs" ino=2706 [ 113.901938][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2694'. [ 114.065389][T11255] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10802a [ 114.065409][T11255] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 114.065423][T11255] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 114.065432][T11255] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 114.065438][T11255] page dumped because: unmovable page [ 114.113009][T11261] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2708'. [ 114.212190][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'. [ 114.213003][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2713'. [ 114.253261][T11277] loop4: detected capacity change from 0 to 512 [ 114.264132][T11277] EXT4-fs: Ignoring removed nobh option [ 114.295692][T11277] EXT4-fs (loop4): 1 truncate cleaned up [ 114.296179][T11277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.372925][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.424499][T11289] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10802a [ 114.424513][T11289] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 114.424526][T11289] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 114.424535][T11289] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 114.424540][T11289] page dumped because: unmovable page [ 114.487867][T11296] loop6: detected capacity change from 0 to 256 [ 114.520757][T11300] trusted_key: encrypted_key: keyword 'updadefault' not recognized [ 114.785151][T11321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2736'. [ 114.841437][T11327] netlink: 'syz.0.2749': attribute type 2 has an invalid length. [ 114.841452][T11327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2749'. [ 114.979253][T11342] loop4: detected capacity change from 0 to 256 [ 115.050036][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.074365][T11348] binder: Binderfs stats mode cannot be changed during a remount [ 115.487635][T11383] ip_tables: iptables: counters copy to user failed while replacing table [ 115.937751][ T405] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 115.984205][T11429] netlink: 'syz.7.2786': attribute type 1 has an invalid length. [ 115.984219][T11429] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2786'. [ 116.001692][ T30] audit: type=1326 audit(116.973:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.6.2782" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d378828 code=0x7fc00000 [ 116.001718][ T30] audit: type=1326 audit(116.973:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.6.2782" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=451 compat=0 ip=0xffff9d378828 code=0x7fc00000 [ 116.001735][ T30] audit: type=1326 audit(116.973:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.6.2782" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d378828 code=0x7fc00000 [ 116.001751][ T30] audit: type=1326 audit(116.973:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.6.2782" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d378828 code=0x7fc00000 [ 116.001765][ T30] audit: type=1326 audit(116.973:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.6.2782" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d378828 code=0x7fc00000 [ 116.001781][ T30] audit: type=1326 audit(116.973:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.6.2782" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d378828 code=0x7fc00000 [ 116.001795][ T30] audit: type=1326 audit(116.973:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.6.2782" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d378828 code=0x7fc00000 [ 116.001809][ T30] audit: type=1326 audit(116.973:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.6.2782" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d378828 code=0x7fc00000 [ 116.001823][ T30] audit: type=1326 audit(116.973:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11420 comm="syz.6.2782" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d378828 code=0x7fc00000 [ 116.298014][T11456] sctp: [Deprecated]: syz.0.2797 (pid 11456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.298014][T11456] Use struct sctp_sack_info instead [ 116.312688][T11458] bq24190-charger 0-006b: No support for SMBUS_BYTE_DATA [ 116.312863][T11458] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b [ 116.364931][T11442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.365126][T11442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.426406][T11471] loop1: detected capacity change from 0 to 512 [ 121.487764][T11471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.520027][T11471] EXT4-fs error (device loop1): ext4_resize_begin:60: comm syz.1.2807: resize_inode disabled but reserved GDT blocks non-zero [ 121.520338][T11471] EXT4-fs (loop1): Remounting filesystem read-only [ 121.608830][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.779113][T11504] batman_adv: batadv0: Adding interface: gretap1 [ 121.779126][T11504] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.779141][T11504] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 121.792670][T11508] loop6: detected capacity change from 0 to 512 [ 121.823784][T11508] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.2818: corrupted in-inode xattr: bad e_name length [ 121.823809][T11508] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.823992][T11508] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2818: couldn't read orphan inode 15 (err -117) [ 121.824009][T11508] loop6: lost filesystem error report for type 5 error -117 [ 121.824886][T11508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.851272][T11511] loop7: detected capacity change from 0 to 128 [ 121.859872][T11511] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.891425][T11508] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2818: bg 0: block 465: padding at end of block bitmap is not set [ 121.900264][T11508] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 121.900282][T11508] EXT4-fs (loop6): This should not happen!! Data will be lost [ 121.900282][T11508] [ 121.900292][T11508] EXT4-fs (loop6): Total free blocks count 0 [ 121.900300][T11508] EXT4-fs (loop6): Free/Dirty block details [ 121.900320][T11508] EXT4-fs (loop6): free_blocks=0 [ 121.900337][T11508] EXT4-fs (loop6): dirty_blocks=10 [ 121.900344][T11508] EXT4-fs (loop6): Block reservation details [ 121.900350][T11508] EXT4-fs (loop6): i_reserved_data_blocks=10 [ 121.968491][T11518] loop0: detected capacity change from 0 to 128 [ 121.976654][T11518] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.981704][ T8938] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.024741][ T7739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.029582][T11522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.044891][T11518] fscrypt (loop0, inode 12): Unsupported encryption flags (0x46) [ 122.121942][ T4709] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.181876][T11528] Injecting memory failure for pfn 0x11379b at process virtual address 0x20000000 [ 122.188704][T11536] netlink: 'syz.4.2827': attribute type 1 has an invalid length. [ 122.188718][T11536] nbd: error processing sock list [ 122.198293][T11528] Memory failure: 0x11379b: Sending SIGBUS to syz.7.2823:11528 due to hardware memory corruption [ 122.198345][T11528] Memory failure: 0x11379b: recovery action for dirty LRU page: Recovered [ 122.198372][T11528] Injecting memory failure for pfn 0x2193df at process virtual address 0x20001000 [ 122.198394][T11528] Memory failure: 0x2193df: Sending SIGBUS to syz.7.2823:11528 due to hardware memory corruption [ 122.198406][T11528] Memory failure: 0x2193df: recovery action for already poisoned page: Failed [ 122.224412][T11536] block nbd0: shutting down sockets [ 122.298018][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2828'. [ 122.298068][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2828'. [ 125.931627][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.445599][T11568] loop6: detected capacity change from 0 to 256 [ 126.645513][T11585] loop4: detected capacity change from 0 to 256 [ 126.771576][T11595] loop4: detected capacity change from 0 to 128 [ 126.785967][T11595] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.808280][ T10] kernel read not supported for file /media1 (pid: 10 comm: kworker/0:1) [ 126.845048][T11600] pimreg: tun_chr_ioctl cmd 1074812117 [ 126.859589][ T4708] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.933542][T11604] tun0: tun_chr_ioctl cmd 1074025677 [ 126.933605][T11604] tun0: linktype set to 823 [ 126.943023][T11606] batman_adv: batadv0: Adding interface: gretap1 [ 126.943031][T11606] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.943047][T11606] batman_adv: batadv0: Interface activated: gretap1 [ 127.393567][T11637] loop1: detected capacity change from 0 to 1024 [ 127.422694][T11637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.492724][ T4712] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /544/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 127.509027][T11648] loop6: detected capacity change from 0 to 256 [ 127.514160][ T4712] EXT4-fs error (device loop1): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /544/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 127.514563][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 127.538176][ T4712] EXT4-fs error (device loop1): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /544/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 127.546049][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 127.547811][ T4712] EXT4-fs error (device loop1): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /544/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 127.548087][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 127.548341][ T4712] EXT4-fs error (device loop1): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /544/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 127.548631][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 127.549554][ T4712] EXT4-fs error (device loop1): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /544/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 127.766715][T11660] ip_tables: iptables: counters copy to user failed while replacing table [ 127.911610][ T4712] bridge0: port 3(syz_tun) entered disabled state [ 127.916562][ T4712] syz_tun (unregistering): left allmulticast mode [ 127.916579][ T4712] syz_tun (unregistering): left promiscuous mode [ 127.916611][ T4712] bridge0: port 3(syz_tun) entered disabled state [ 128.036942][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.123404][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.194708][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.263137][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.389634][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.399332][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.403723][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.405059][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.405663][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.405891][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.451911][T11704] block2mtd: parameter too long [ 128.608041][ T40] bridge_slave_1: left promiscuous mode [ 128.608139][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.613824][ T40] bridge_slave_0: left allmulticast mode [ 128.613840][ T40] bridge_slave_0: left promiscuous mode [ 128.613910][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.712164][T11733] loop7: detected capacity change from 0 to 512 [ 128.731204][T11733] EXT4-fs (loop7): 1 truncate cleaned up [ 128.731636][T11733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.825183][T11739] netlink: 'syz.6.2914': attribute type 11 has an invalid length. [ 128.825198][T11739] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2914'. [ 128.835583][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.945285][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.947813][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.957021][ T40] bond0 (unregistering): Released all slaves [ 129.124676][T11753] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2920'. [ 129.218513][ T40] hsr_slave_0: left promiscuous mode [ 129.218776][ T40] hsr_slave_1: left promiscuous mode [ 129.219037][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.219048][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.219329][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.219339][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.266046][ T40] veth1_macvtap: left promiscuous mode [ 129.266075][ T40] veth0_macvtap: left promiscuous mode [ 129.266191][ T40] veth1_vlan: left promiscuous mode [ 129.266227][ T40] veth0_vlan: left promiscuous mode [ 129.703589][ T40] team0 (unregistering): Port device team_slave_1 removed [ 129.722144][ T40] team0 (unregistering): Port device team_slave_0 removed [ 129.834899][ T40] team0 (unregistering): Port device dummy0 removed [ 129.860717][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12 [ 129.976533][T11800] loop0: detected capacity change from 0 to 512 [ 130.022314][T11800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.053182][ T40] IPVS: stop unused estimator thread 0... [ 130.152676][T11816] loop7: detected capacity change from 0 to 512 [ 130.178687][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.184169][T11816] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.204936][T11816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.309800][T11706] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.330200][T11706] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.330271][T11706] bridge_slave_0: entered allmulticast mode [ 130.330723][T11706] bridge_slave_0: entered promiscuous mode [ 130.331419][T11706] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.331439][T11706] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.331485][T11706] bridge_slave_1: entered allmulticast mode [ 130.331883][T11706] bridge_slave_1: entered promiscuous mode [ 130.338274][T11706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.339096][T11706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.378784][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.410061][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.446434][T11706] team0: Port device team_slave_0 added [ 130.455894][T11706] team0: Port device team_slave_1 added [ 130.479039][T11845] loop4: detected capacity change from 0 to 256 [ 130.487795][T11845] vfat: Unknown parameter '' [ 130.490526][ T4716] Bluetooth: hci3: command tx timeout [ 130.499610][T11706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.499632][T11706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.499653][T11706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.517261][T11706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.517283][T11706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.517301][T11706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.564769][T11847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.603769][T11706] hsr_slave_0: entered promiscuous mode [ 130.604140][T11706] hsr_slave_1: entered promiscuous mode [ 130.604324][T11706] debugfs: 'hsr0' already exists in 'hsr' [ 130.604335][T11706] Cannot create hsr debugfs directory [ 130.672300][T11854] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input31 [ 130.751340][T11859] loop9: detected capacity change from 0 to 524287997 [ 130.799618][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13 [ 130.919363][T11706] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 130.933611][T11706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.933900][T11706] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 130.939927][T11706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.954271][T11706] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 130.963129][T11706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.964613][T11706] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 130.971856][T11706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.016405][T11706] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.016435][T11706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.016513][T11706] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.016541][T11706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.072123][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.074052][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.122924][T11706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.144502][T11706] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.166024][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.166052][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.167981][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.168009][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.181743][T11883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.297228][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.330020][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.570119][ T4716] Bluetooth: hci3: command tx timeout [ 134.650068][ T4716] Bluetooth: hci3: command tx timeout [ 136.434896][T11906] : renamed from vlan0 (while UP) [ 136.471262][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2964'. [ 136.647766][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14 [ 136.731121][ T4716] Bluetooth: hci3: command tx timeout [ 136.765687][T11941] ip_tables: iptables: counters copy to user failed while replacing table [ 136.773036][T11706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.077311][T11706] veth0_vlan: entered promiscuous mode [ 137.097901][T11706] veth1_vlan: entered promiscuous mode [ 137.116051][T11706] veth0_macvtap: entered promiscuous mode [ 137.135183][T11706] veth1_macvtap: entered promiscuous mode [ 137.166030][T11706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.178641][T11706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.241446][ T482] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.251290][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.251474][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.251523][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.314135][ T405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.314151][ T405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.359308][ T280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.359322][ T280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.487259][T11993] block2mtd: illegal erase size [ 137.595320][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15 [ 137.762761][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 137.762771][ T30] audit: type=1326 audit(139.738:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.763082][ T30] audit: type=1326 audit(139.738:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.792684][ T30] audit: type=1326 audit(139.768:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.793054][ T30] audit: type=1326 audit(139.768:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.797424][ T30] audit: type=1326 audit(139.768:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.797443][ T30] audit: type=1326 audit(139.768:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.797459][ T30] audit: type=1326 audit(139.768:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.797660][ T30] audit: type=1326 audit(139.768:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.797739][ T30] audit: type=1326 audit(139.768:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.818535][ T30] audit: type=1326 audit(139.788:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.2995" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff92378828 code=0x7ffc0000 [ 137.982074][T12032] set_capacity_and_notify: 2 callbacks suppressed [ 137.982085][T12032] loop8: detected capacity change from 0 to 512 [ 138.050995][T12032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.098015][T12046] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm iou-wrk-12032: corrupted xattr block 33: invalid header [ 138.103654][T12046] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm iou-wrk-12032: corrupted xattr block 33: invalid header [ 138.104007][T12046] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm iou-wrk-12032: corrupted xattr block 33: invalid header [ 138.145275][T11706] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.234721][T12055] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3009'. [ 138.589701][T12089] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0014 with DS=0x19 [ 138.597531][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3025'. [ 138.668545][T12098] loop8: detected capacity change from 0 to 256 [ 138.677376][T12098] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.106757][T12144] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3050'. [ 139.217772][T12157] loop8: detected capacity change from 0 to 128 [ 139.219613][T12157] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.234359][T12157] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.311624][T12161] loop7: detected capacity change from 0 to 512 [ 139.312356][T12159] tap0: tun_chr_ioctl cmd 1074025677 [ 139.312427][T12159] tap0: linktype set to 769 [ 139.316330][T12161] EXT4-fs: Ignoring removed nobh option [ 139.317031][T12161] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 139.319650][T12161] EXT4-fs (loop7): 1 truncate cleaned up [ 139.353449][T12161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.425046][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.492439][T12172] loop4: detected capacity change from 0 to 2048 [ 139.515852][T12172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.544549][T12172] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.746372][T12202] loop7: detected capacity change from 0 to 1024 [ 139.748571][T12202] EXT4-fs: Ignoring removed bh option [ 139.755507][T12202] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 139.766415][T12202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.797188][T12202] EXT4-fs error (device loop7): ext4_check_all_de:675: inode #12: block 7: comm syz.7.3075: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=76 fake=0 [ 139.806018][T12202] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 139.815118][ T4716] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 139.826046][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.894677][T12213] loop7: detected capacity change from 0 to 256 [ 140.017481][ T4832] hsr0: entered promiscuous mode [ 140.026513][T12221] netlink: 'syz.0.3083': attribute type 6 has an invalid length. [ 140.135988][T12233] netlink: 'syz.7.3089': attribute type 13 has an invalid length. [ 140.136002][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3089'. [ 140.136783][T12233] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 140.178202][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3091'. [ 140.178220][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3091'. [ 140.271078][T12248] loop7: detected capacity change from 0 to 512 [ 140.283311][T12248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 140.298621][T12248] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.3095: Failed to acquire dquot type 0 [ 140.316371][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 140.556337][T12272] loop6: detected capacity change from 0 to 256 [ 140.867527][T12298] loop7: detected capacity change from 0 to 512 [ 140.874628][T12298] EXT4-fs: Ignoring removed nobh option [ 140.879439][T12298] EXT4-fs (loop7): 1 truncate cleaned up [ 140.879878][T12298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.956828][ T8938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.347444][T12332] ip_tables: iptables: counters copy to user failed while replacing table [ 141.899632][ T4832] kernel read not supported for file /video9 (pid: 4832 comm: kworker/0:8) [ 142.352213][T12426] netlink: 'syz.0.3166': attribute type 1 has an invalid length. [ 142.352229][T12426] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3166'. [ 143.210215][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.806543][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3193'. [ 143.806565][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3193'. [ 143.948097][T12502] loop4: detected capacity change from 0 to 512 [ 144.013117][T12502] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.3197: corrupted inode contents [ 144.013142][T12502] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.016734][T12502] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #16: comm syz.4.3197: mark_inode_dirty error [ 144.016763][T12502] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.019331][T12502] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.3197: corrupted inode contents [ 144.019358][T12502] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.019511][T12502] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.3197: mark_inode_dirty error [ 144.019523][T12502] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.019744][T12502] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.3197: corrupted inode contents [ 144.019761][T12502] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.020004][ C0] EXT4-fs (loop4): error count since last fsck: 5 [ 144.020020][ C0] EXT4-fs (loop4): initial error at time 145: ext4_do_update_inode:5801: inode 16 [ 144.020037][ C0] EXT4-fs (loop4): last error at time 145: ext4_do_update_inode:5801: inode 16 [ 144.042056][T12502] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem [ 144.042093][T12502] loop4: lost filesystem error report for type 5 error -117 [ 144.055520][T12502] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #16: comm syz.4.3197: corrupted inode contents [ 144.055540][T12502] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.055700][T12502] EXT4-fs error (device loop4): ext4_truncate:4721: inode #16: comm syz.4.3197: mark_inode_dirty error [ 144.055712][T12502] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.055841][T12502] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem [ 144.055851][T12502] loop4: lost filesystem error report for type 5 error -117 [ 144.077058][T12510] i2c i2c-0: new_device: Can't parse I2C address [ 144.077271][T12502] EXT4-fs (loop4): 1 truncate cleaned up [ 144.077713][T12502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.090848][ T40] __quota_error: 32 callbacks suppressed [ 144.090858][ T40] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 144.090885][ T40] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 1 [ 144.175131][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.234766][T12524] loop5: detected capacity change from 0 to 7 [ 144.443818][T12524] Dev loop5: unable to read RDB block 7 [ 144.443842][T12524] loop5: unable to read partition table [ 144.443912][T12524] loop5: partition table beyond EOD, truncated [ 144.443931][T12524] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 144.497545][T12537] virtio-pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 144.569896][T12542] netlink: 'syz.8.3214': attribute type 4 has an invalid length. [ 144.724521][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'. [ 144.811994][T12569] loop4: detected capacity change from 0 to 512 [ 144.823987][T12569] EXT4-fs: Ignoring removed nobh option [ 144.838066][T12569] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory [ 144.838084][T12569] loop4: lost filesystem error report for type 5 error -12 [ 144.839990][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 144.840004][ C0] EXT4-fs (loop4): initial error at time 146: ext4_process_orphan:346 [ 144.840020][ C0] EXT4-fs (loop4): last error at time 146: ext4_process_orphan:346 [ 144.855713][T12569] EXT4-fs (loop4): 2 truncates cleaned up [ 144.856187][T12569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.887344][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.979418][T12578] loop6: detected capacity change from 0 to 512 [ 145.531699][T12621] loop4: detected capacity change from 0 to 8 [ 145.669309][T12632] loop0: detected capacity change from 0 to 8192 [ 145.691140][T12632] bio_check_eod: 119 callbacks suppressed [ 145.691151][T12632] syz.0.3255: attempt to access beyond end of device [ 145.691151][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.691165][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.693266][T12632] syz.0.3255: attempt to access beyond end of device [ 145.693266][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.693286][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.693310][T12632] syz.0.3255: attempt to access beyond end of device [ 145.693310][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.693323][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.693342][T12632] syz.0.3255: attempt to access beyond end of device [ 145.693342][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.693353][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.693371][T12632] syz.0.3255: attempt to access beyond end of device [ 145.693371][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.693381][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.693398][T12632] syz.0.3255: attempt to access beyond end of device [ 145.693398][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.693408][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.693425][T12632] syz.0.3255: attempt to access beyond end of device [ 145.693425][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.693435][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.693452][T12632] syz.0.3255: attempt to access beyond end of device [ 145.693452][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.693462][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.693478][T12632] syz.0.3255: attempt to access beyond end of device [ 145.693478][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.693488][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.693504][T12632] syz.0.3255: attempt to access beyond end of device [ 145.693504][T12632] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 145.693514][T12632] Buffer I/O error on dev loop0, logical block 57847, async page read [ 145.783829][T12637] loop4: detected capacity change from 0 to 512 [ 145.793485][T12637] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.3257: bg 0: block 5: invalid block bitmap [ 145.793507][T12637] loop4: lost filesystem error report for type 5 error -117 [ 145.799730][T12637] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 145.799748][T12637] loop4: lost filesystem error report for type 5 error -117 [ 145.799996][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 145.800010][ C0] EXT4-fs (loop4): initial error at time 147: ext4_validate_block_bitmap:436 [ 145.800022][ C0] EXT4-fs (loop4): last error at time 147: ext4_mb_clear_bb:6680 [ 145.814830][T12637] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3257: invalid indirect mapped block 3 (level 2) [ 145.814854][T12637] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 145.815227][T12637] EXT4-fs (loop4): 1 orphan inode deleted [ 145.815239][T12637] EXT4-fs (loop4): 1 truncate cleaned up [ 145.815803][T12637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.861727][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.889017][T12639] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 145.889036][T12639] FAT-fs (loop0): Filesystem has been set read-only [ 145.899432][T12639] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 145.995344][T12645] loop4: detected capacity change from 0 to 512 [ 146.017259][T12645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 146.031316][T12645] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 146.076927][ T4708] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /654/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.102831][ T4708] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.109606][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.109761][ T4708] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /654/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.124264][ T4708] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.124443][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.124550][ T4708] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /654/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.124889][ T4708] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.125062][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.125185][ T4708] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /654/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.125566][ T4708] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.126174][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.126291][ T4708] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /654/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.126586][ T4708] EXT4-fs error (device loop4): ext4_empty_dir:3103: inode #11: block 4: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=67332, size=2048 fake=1 [ 146.127124][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.127650][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.128080][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.129425][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.150756][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.191128][ T4708] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #11: comm syz-executor: directory missing '..' [ 146.279870][T12653] bond1: invalid ARP target 0.0.0.0 specified for addition [ 146.279886][T12653] bond1: option arp_ip_target: invalid value (0) [ 146.296604][T12653] bond1 (unregistering): Released all slaves [ 146.371875][ T4708] bridge0: port 3(syz_tun) entered disabled state [ 146.385726][ T4708] syz_tun (unregistering): left allmulticast mode [ 146.385742][ T4708] syz_tun (unregistering): left promiscuous mode [ 146.385766][ T4708] bridge0: port 3(syz_tun) entered disabled state [ 146.482057][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 146.526822][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.526846][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.573819][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.573843][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.598187][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.598211][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.613029][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.613051][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.668715][ T40] bridge_slave_1: left promiscuous mode [ 146.668811][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.674329][ T40] bridge_slave_0: left allmulticast mode [ 146.674344][ T40] bridge_slave_0: left promiscuous mode [ 146.674413][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.742498][ T40] gretap0 (unregistering): left allmulticast mode [ 146.747467][ T40] batman_adv: batadv0: Removing interface: gretap1 [ 146.775434][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.776905][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.777725][ T40] bond0 (unregistering): Released all slaves [ 146.796198][ T40] tipc: Disabling bearer [ 146.796257][ T40] tipc: Left network mode [ 146.895172][ T40] hsr_slave_0: left promiscuous mode [ 146.895421][ T40] hsr_slave_1: left promiscuous mode [ 146.895675][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.895686][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.895935][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.895945][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.899932][ T40] veth1_macvtap: left promiscuous mode [ 146.911375][ T40] veth0_macvtap: left promiscuous mode [ 146.911425][ T40] veth1_vlan: left promiscuous mode [ 146.911457][ T40] veth0_vlan: left promiscuous mode [ 147.024251][ T40] team0 (unregistering): Port device team_slave_1 removed [ 147.028308][ T40] team0 (unregistering): Port device team_slave_0 removed [ 147.183669][ T40] IPVS: stop unused estimator thread 0... [ 151.562525][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.566706][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.567928][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.568328][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.577436][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.648866][T12684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.649030][T12684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.957780][T12718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3286'. [ 151.974042][ T4399] 8021q: adding VLAN 0 to HW filter on device eth16 [ 152.194106][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.215438][T12679] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.215513][T12679] bridge_slave_0: entered allmulticast mode [ 152.215963][T12679] bridge_slave_0: entered promiscuous mode [ 152.223630][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.223869][T12679] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.223935][T12679] bridge_slave_1: entered allmulticast mode [ 152.227464][T12679] bridge_slave_1: entered promiscuous mode [ 152.280757][T12679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.281584][T12679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.321499][T12679] team0: Port device team_slave_0 added [ 152.322194][T12679] team0: Port device team_slave_1 added [ 152.355504][T12679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.355525][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.355542][T12679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.359891][T12679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.359913][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.359932][T12679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.457766][T12679] hsr_slave_0: entered promiscuous mode [ 152.458896][T12679] hsr_slave_1: entered promiscuous mode [ 152.463632][T12679] debugfs: 'hsr0' already exists in 'hsr' [ 152.463653][T12679] Cannot create hsr debugfs directory [ 152.576605][T12776] ip_tables: iptables: counters copy to user failed while replacing table [ 152.593774][T12777] loop8: detected capacity change from 0 to 512 [ 152.602160][T12777] EXT4-fs (loop8): Test dummy encryption mode enabled [ 152.607242][T12777] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.3304: inode has both inline data and extents flags [ 152.607263][T12777] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 152.607376][T12777] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.3304: couldn't read orphan inode 15 (err -117) [ 152.607389][T12777] loop8: lost filesystem error report for type 5 error -117 [ 152.607981][T12777] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.734887][T11706] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.779605][T12679] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 152.789279][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.789912][ T4399] 8021q: adding VLAN 0 to HW filter on device eth17 [ 152.796763][T12679] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 152.809585][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.809919][T12679] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 152.820861][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.827227][T12679] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 152.834054][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.873441][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.873488][T12679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.873563][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.873595][T12679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.968079][T12679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.985650][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.994805][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.022736][T12679] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.033858][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.033881][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.039084][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.039116][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.146774][T12801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.146931][T12801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.176140][T12820] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4709] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[12820] [ 153.405932][T12844] sctp: [Deprecated]: syz.7.3319 (pid 12844) Use of int in maxseg socket option. [ 153.405932][T12844] Use struct sctp_assoc_value instead [ 153.427404][ T4399] 8021q: adding VLAN 0 to HW filter on device eth19 [ 153.469131][T12679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.498085][T12849] binder: 12849 RLIMIT_NICE not set [ 153.691394][ T50] Bluetooth: hci1: command tx timeout [ 153.699614][T12679] veth0_vlan: entered promiscuous mode [ 153.711716][T12679] veth1_vlan: entered promiscuous mode [ 153.762729][T12679] veth0_macvtap: entered promiscuous mode [ 153.763783][T12679] veth1_macvtap: entered promiscuous mode [ 153.793995][T12679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.797687][T12679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.870339][ T323] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.870368][ T323] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.870384][ T323] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.870398][ T323] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.915974][ T323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.915989][ T323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.958775][ T405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.958790][ T405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.007198][T12887] loop7: detected capacity change from 0 to 256 [ 154.077694][ T4399] 8021q: adding VLAN 0 to HW filter on device eth18 [ 154.189182][T12902] binder: 12898:12902 ioctl 4018620d 0 returned -22 [ 154.274924][T12905] loop5: detected capacity change from 0 to 7 [ 154.275452][T12905] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 154.275465][T12905] loop5: partition table partially beyond EOD, truncated [ 154.275741][T12905] loop5: p1 size 487441168 extends beyond EOD, truncated [ 154.287999][ T30] audit: type=1326 audit(156.258:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12908 comm="syz.7.3334" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82578828 code=0x0 [ 154.352419][T12170] udevd[12170]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 154.478106][T12925] sctp: [Deprecated]: syz.6.3340 (pid 12925) Use of int in max_burst socket option deprecated. [ 154.478106][T12925] Use struct sctp_assoc_value instead [ 154.605464][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3344'. [ 154.605483][T12935] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3344'. [ 154.752028][ T30] audit: type=1400 audit(156.728:102): lsm=SMACK fn=smack_ptrace_access_check action=denied subject="w" object="_" requested=rw pid=12938 comm="syz.9.3345" opid=12938 ocomm="syz.9.3345" [ 155.158273][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3360'. [ 155.507237][T13018] loop7: detected capacity change from 0 to 8192 [ 155.522081][T13022] FAULT_INJECTION: forcing a failure. [ 155.522081][T13022] name failslab, interval 1, probability 0, space 0, times 1 [ 155.522112][T13022] CPU: 0 UID: 0 PID: 13022 Comm: syz.8.3371 Tainted: G L syzkaller #0 PREEMPT [ 155.522132][T13022] Tainted: [L]=SOFTLOCKUP [ 155.522136][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 155.522144][T13022] Call trace: [ 155.522147][T13022] show_stack+0x2c/0x3c (C) [ 155.522170][T13022] __dump_stack+0x30/0x40 [ 155.522184][T13022] dump_stack_lvl+0xd8/0x12c [ 155.522196][T13022] dump_stack+0x1c/0x28 [ 155.522207][T13022] should_fail_ex+0x418/0x58c [ 155.522221][T13022] should_failslab+0xc4/0x120 [ 155.522234][T13022] kmem_cache_alloc_noprof+0x94/0x5d4 [ 155.522243][T13022] ioctx_alloc+0xf4/0x780 [ 155.522253][T13022] __arm64_sys_io_setup+0x14c/0x2f4 [ 155.522262][T13022] invoke_syscall+0x98/0x244 [ 155.522274][T13022] el0_svc_common+0xec/0x23c [ 155.522286][T13022] do_el0_svc+0x4c/0x5c [ 155.522297][T13022] el0_svc+0x60/0x1d8 [ 155.522309][T13022] el0t_64_sync_handler+0x44/0x104 [ 155.522321][T13022] el0t_64_sync+0x198/0x19c [ 155.771235][ T50] Bluetooth: hci1: command tx timeout [ 155.993320][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3377'. [ 156.197753][T13058] can0: slcan on ptm0. [ 156.392675][T13068] kernel read not supported for file /events/enable (pid: 13068 comm: syz.9.3382) [ 156.395080][T12995] syzkaller1: entered promiscuous mode [ 156.395105][T12995] syzkaller1: entered allmulticast mode [ 156.448666][T13057] can0 (unregistered): slcan off ptm0. [ 156.732561][T13093] FAULT_INJECTION: forcing a failure. [ 156.732561][T13093] name failslab, interval 1, probability 0, space 0, times 0 [ 156.732590][T13093] CPU: 0 UID: 0 PID: 13093 Comm: syz.7.3388 Tainted: G L syzkaller #0 PREEMPT [ 156.732604][T13093] Tainted: [L]=SOFTLOCKUP [ 156.732607][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 156.732613][T13093] Call trace: [ 156.732616][T13093] show_stack+0x2c/0x3c (C) [ 156.732636][T13093] __dump_stack+0x30/0x40 [ 156.732648][T13093] dump_stack_lvl+0xd8/0x12c [ 156.732660][T13093] dump_stack+0x1c/0x28 [ 156.732671][T13093] should_fail_ex+0x418/0x58c [ 156.732684][T13093] should_failslab+0xc4/0x120 [ 156.732697][T13093] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 156.732707][T13093] sock_alloc_inode+0x30/0x180 [ 156.732720][T13093] alloc_inode+0x68/0x198 [ 156.732732][T13093] sock_alloc+0x4c/0x204 [ 156.732741][T13093] __sock_create+0x108/0x670 [ 156.732751][T13093] sock_create_kern+0x4c/0x64 [ 156.732760][T13093] smc_create_clcsk+0x40/0xb8 [ 156.732770][T13093] smc_create+0xe8/0x490 [ 156.732778][T13093] __sock_create+0x31c/0x670 [ 156.732788][T13093] __sys_socket_create+0xc0/0x11c [ 156.732798][T13093] __sys_socket+0x44/0xec [ 156.732807][T13093] __arm64_sys_socket+0x84/0x9c [ 156.732817][T13093] invoke_syscall+0x98/0x244 [ 156.732830][T13093] el0_svc_common+0xec/0x23c [ 156.732841][T13093] do_el0_svc+0x4c/0x5c [ 156.732853][T13093] el0_svc+0x60/0x1d8 [ 156.732865][T13093] el0t_64_sync_handler+0x44/0x104 [ 156.732876][T13093] el0t_64_sync+0x198/0x19c [ 156.732888][T13093] socket: no more sockets [ 156.869666][T13100] ------------[ cut here ]------------ [ 156.869675][T13100] WARNING: drivers/virtio/virtio.c:378 at virtio_dev_remove+0x194/0x1b4, CPU#0: syz.0.3393/13100 [ 156.872897][T13100] Modules linked in: [ 156.873719][T13100] CPU: 0 UID: 0 PID: 13100 Comm: syz.0.3393 Tainted: G L syzkaller #0 PREEMPT [ 156.875852][T13100] Tainted: [L]=SOFTLOCKUP [ 156.876750][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 156.878891][T13100] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 156.880527][T13100] pc : virtio_dev_remove+0x194/0x1b4 [ 156.881632][T13100] lr : virtio_dev_remove+0x194/0x1b4 [ 156.882744][T13100] sp : ffff8000933174c0 [ 156.883611][T13100] x29: ffff8000933174c0 x28: 1fffe000189d681b x27: 1fffe000189d681a [ 156.885383][T13100] x26: ffff0000c4eb40d0 x25: 1fffe000189d681d x24: ffff8000891e2740 [ 156.887189][T13100] x23: 1fffe000189d68ad x22: ffff0000c4eb4568 x21: dfff800000000000 [ 156.889129][T13100] x20: 00000000000000ff x19: ffff0000c4eb4088 x18: 00000000ffffffff [ 156.890838][T13100] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800080c8c6e0 [ 156.892547][T13100] x14: 0000000000000001 x13: 0000000000000001 x12: 0000000000000003 [ 156.894140][T13100] x11: ffff80008a529e28 x10: 0000000000080000 x9 : 0000000000019744 [ 156.895794][T13100] x8 : ffff80009ed27000 x7 : 0000000000000000 x6 : ffff80008016662c [ 156.897464][T13100] x5 : ffff0001514621f8 x4 : 0000000000000008 x3 : ffff800081fbd3ac [ 156.899097][T13100] x2 : 00000000000000ff x1 : ffff0000cea0d880 x0 : 0000000000000001 [ 156.900805][T13100] Call trace: [ 156.901479][T13100] virtio_dev_remove+0x194/0x1b4 (P) [ 156.902619][T13100] device_remove+0xc4/0x134 [ 156.903449][T13100] device_release_driver_internal+0x124/0x20c [ 156.904695][T13100] device_release_driver+0x28/0x38 [ 156.905734][T13100] bus_remove_device+0x2d0/0x400 [ 156.906685][T13100] device_del+0x3ec/0x71c [ 156.907532][T13100] device_unregister+0x2c/0xf0 [ 156.908523][T13100] unregister_virtio_device+0x38/0x74 [ 156.909644][T13100] virtio_pci_remove+0x7c/0xf4 [ 156.910640][T13100] pci_device_remove+0x9c/0x1ac [ 156.911655][T13100] device_remove+0xc4/0x134 [ 156.912591][T13100] device_release_driver_internal+0x124/0x20c [ 156.913858][T13100] device_release_driver+0x28/0x38 [ 156.914873][T13100] pci_stop_bus_device+0x108/0x14c [ 156.915911][T13100] pci_stop_and_remove_bus_device+0x84/0xd0 [ 156.917014][T13100] pci_stop_and_remove_bus_device_locked+0x24/0x38 [ 156.918230][T13100] remove_store+0xdc/0x148 [ 156.919048][T13100] dev_attr_store+0x6c/0x90 [ 156.919958][T13100] sysfs_kf_write+0xe0/0x108 [ 156.920897][T13100] kernfs_fop_write_iter+0x260/0x3b8 [ 156.921928][T13100] vfs_write+0x51c/0xa0c [ 156.922775][T13100] ksys_write+0x12c/0x228 [ 156.923634][T13100] __arm64_sys_write+0x84/0x98 [ 156.924598][T13100] invoke_syscall+0x98/0x244 [ 156.925455][T13100] el0_svc_common+0xec/0x23c [ 156.926372][T13100] do_el0_svc+0x4c/0x5c [ 156.927209][T13100] el0_svc+0x60/0x1d8 [ 156.928024][T13100] el0t_64_sync_handler+0x44/0x104 [ 156.929167][T13100] el0t_64_sync+0x198/0x19c [ 156.930181][T13100] irq event stamp: 1170 [ 156.931010][T13100] hardirqs last enabled at (1169): [] kasan_quarantine_put+0xb4/0x1c4 [ 156.932840][T13100] hardirqs last disabled at (1170): [] el1_brk64+0x20/0x54 [ 156.934579][T13100] softirqs last enabled at (694): [] handle_softirqs+0xb2c/0xcbc [ 156.936446][T13100] softirqs last disabled at (585): [] __do_softirq+0x14/0x20 [ 156.938177][T13100] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.433399][ T40] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.573513][ T40] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.611541][ T40] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.642549][ T40] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.699223][ T40] bridge_slave_1: left allmulticast mode [ 157.699241][ T40] bridge_slave_1: left promiscuous mode [ 157.699309][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.706377][ T40] bridge_slave_0: left allmulticast mode [ 157.706390][ T40] bridge_slave_0: left promiscuous mode [ 157.706460][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.786518][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.787610][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.788371][ T40] bond0 (unregistering): Released all slaves [ 157.896710][ T40] hsr_slave_0: left promiscuous mode [ 157.896948][ T40] hsr_slave_1: left promiscuous mode [ 157.904933][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.904948][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.905241][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.905251][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.908825][ T40] veth1_macvtap: left promiscuous mode [ 157.908849][ T40] veth0_macvtap: left promiscuous mode [ 157.908893][ T40] veth1_vlan: left promiscuous mode [ 157.908925][ T40] veth0_vlan: left promiscuous mode [ 158.096401][ T40] team0 (unregistering): Port device team_slave_1 removed [ 158.107087][ T40] team0 (unregistering): Port device team_slave_0 removed [ 158.164737][ T4399] 8021q: adding VLAN 0 to HW filter on device eth20 [ 158.289797][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.319550][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.344921][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.382777][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.432442][ T4399] 8021q: adding VLAN 0 to HW filter on device eth21 [ 158.484712][ T40] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.507598][ T40] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.544589][ T40] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.566792][ T40] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.679746][ T40] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.686422][ T4399] 8021q: adding VLAN 0 to HW filter on device eth23 [ 158.707245][ T40] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.727369][ T40] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.751498][ T40] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.827253][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.858195][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.888847][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.919355][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.979220][ T4399] 8021q: adding VLAN 0 to HW filter on device eth22 [ 158.996971][ T40] bridge_slave_1: left promiscuous mode [ 158.997050][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.997850][ T40] bridge_slave_0: left allmulticast mode [ 158.997861][ T40] bridge_slave_0: left promiscuous mode [ 158.997914][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.012413][ T40] bridge_slave_1: left allmulticast mode [ 159.012430][ T40] bridge_slave_1: left promiscuous mode [ 159.012492][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.014044][ T40] bridge_slave_0: left allmulticast mode [ 159.014056][ T40] bridge_slave_0: left promiscuous mode [ 159.014121][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.029069][ T40] bridge_slave_1: left allmulticast mode [ 159.029082][ T40] bridge_slave_1: left promiscuous mode [ 159.029147][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.036723][ T40] bridge_slave_0: left allmulticast mode [ 159.036736][ T40] bridge_slave_0: left promiscuous mode [ 159.036797][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.048834][ T40] bridge_slave_1: left allmulticast mode [ 159.048850][ T40] bridge_slave_1: left promiscuous mode [ 159.048908][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.049765][ T40] bridge_slave_0: left allmulticast mode [ 159.049775][ T40] bridge_slave_0: left promiscuous mode [ 159.049826][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.065099][ T40] batman_adv: batadv0: Interface deactivated: gretap1 [ 159.193266][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.194373][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.195128][ T40] bond0 (unregistering): Released all slaves [ 159.256219][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.257332][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.258061][ T40] bond0 (unregistering): Released all slaves [ 159.312213][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.313244][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.313967][ T40] bond0 (unregistering): Released all slaves [ 159.363371][ T40] batman_adv: batadv0: Removing interface: gretap1 [ 159.383076][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.384139][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.384867][ T40] bond0 (unregistering): Released all slaves [ 159.695503][ T4399] 8021q: adding VLAN 0 to HW filter on device eth24 [ 159.788343][ T40] hsr_slave_0: left promiscuous mode [ 159.788601][ T40] hsr_slave_1: left promiscuous mode [ 159.788839][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.788848][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.789123][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.789133][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.799832][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.799846][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.807632][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.807645][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.814361][ T40] hsr_slave_0: left promiscuous mode [ 159.814960][ T40] hsr_slave_1: left promiscuous mode [ 159.817456][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.817469][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.817728][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.817737][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.832692][ T40] hsr_slave_0: left promiscuous mode [ 159.832923][ T40] hsr_slave_1: left promiscuous mode [ 159.833189][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.833198][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.833449][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.833459][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.866212][ T40] veth1_macvtap: left promiscuous mode [ 159.866241][ T40] veth0_macvtap: left promiscuous mode [ 159.866305][ T40] veth1_vlan: left promiscuous mode [ 159.866340][ T40] veth0_vlan: left promiscuous mode [ 159.876538][ T40] veth1_macvtap: left promiscuous mode [ 159.876568][ T40] veth0_macvtap: left promiscuous mode [ 159.876612][ T40] veth1_vlan: left promiscuous mode [ 159.876642][ T40] veth0_vlan: left promiscuous mode [ 159.878616][ T40] veth1_macvtap: left promiscuous mode [ 159.878635][ T40] veth0_macvtap: left promiscuous mode [ 159.878679][ T40] veth1_vlan: left promiscuous mode [ 159.878711][ T40] veth0_vlan: left promiscuous mode [ 159.898386][ T40] veth1_macvtap: left promiscuous mode [ 159.898411][ T40] veth0_macvtap: left promiscuous mode [ 159.898443][ T40] veth1_vlan: left promiscuous mode [ 159.898474][ T40] veth0_vlan: left promiscuous mode [ 160.157249][ T40] team0 (unregistering): Port device team_slave_1 removed [ 160.165023][ T40] team0 (unregistering): Port device team_slave_0 removed [ 160.297843][ T40] team0 (unregistering): Port device team_slave_1 removed [ 160.305375][ T40] team0 (unregistering): Port device team_slave_0 removed [ 160.429073][ T40] team0 (unregistering): Port device team_slave_1 removed [ 160.434639][ T40] team0 (unregistering): Port device team_slave_0 removed [ 160.556516][ T40] team0 (unregistering): Port device team_slave_1 removed [ 160.565659][ T40] team0 (unregistering): Port device team_slave_0 removed [ 160.624501][ T4399] 8021q: adding VLAN 0 to HW filter on device eth25 [ 160.891169][ T4399] 8021q: adding VLAN 0 to HW filter on device eth26 [ 160.979586][ T40] IPVS: stop unused estimator thread 0... [ 161.063313][ T4399] 8021q: adding VLAN 0 to HW filter on device eth27 [ 161.182070][ T4399] 8021q: adding VLAN 0 to HW filter on device eth30 [ 161.298856][ T4399] 8021q: adding VLAN 0 to HW filter on device eth29 [ 161.417994][ T4399] 8021q: adding VLAN 0 to HW filter on device eth28 [ 161.536923][ T4399] 8021q: adding VLAN 0 to HW filter on device eth31 [ 161.655074][ T4399] 8021q: adding VLAN 0 to HW filter on device eth32 [ 161.774003][ T4399] 8021q: adding VLAN 0 to HW filter on device eth33 [ 166.384873][ T4399] 8021q: adding VLAN 0 to HW filter on device eth35 [ 166.531009][ T4399] 8021q: adding VLAN 0 to HW filter on device eth34 [ 166.649719][ T4399] 8021q: adding VLAN 0 to HW filter on device eth36 [ 166.770920][ T4399] 8021q: adding VLAN 0 to HW filter on device eth37