last executing test programs: 47.077344468s ago: executing program 0 (id=6): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x280440e, &(0x7f0000000500), 0x1, 0xbdb, &(0x7f0000001000)="$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") openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 46.975145101s ago: executing program 0 (id=7): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x5, 0x3, 0xffffffec}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 46.81601938s ago: executing program 0 (id=9): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local, @random, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x3, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) 46.742664161s ago: executing program 0 (id=12): capset(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0), 0x0) 46.544893853s ago: executing program 0 (id=20): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) 44.878224291s ago: executing program 0 (id=60): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchmod(r1, 0xe) 44.860179321s ago: executing program 32 (id=60): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchmod(r1, 0xe) 25.765605088s ago: executing program 2 (id=759): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdafdf000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000003c0)=""/223) 25.732799151s ago: executing program 4 (id=760): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.677920037s ago: executing program 4 (id=762): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x1e, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 25.649884043s ago: executing program 4 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x9, 0x1}}, 0x20) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) 25.628094006s ago: executing program 4 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 25.60022771s ago: executing program 4 (id=766): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="836bb66f", 0x30, 0x0, 0x0, 0xfffffffffffffec8) 25.549774967s ago: executing program 2 (id=767): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 25.476323895s ago: executing program 2 (id=769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 25.431611712s ago: executing program 2 (id=771): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000700)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@numtail}, {@rodir}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 25.27684816s ago: executing program 2 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x1, r1, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendto$packet(r2, 0x0, 0x0, 0x10, 0x0, 0x0) 25.150213403s ago: executing program 4 (id=779): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x20040001) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="91400300000000002000128008000100736974001400028008000300ac1e010106000d0009000000140003006e"], 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x8010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 25.055936898s ago: executing program 33 (id=779): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x20040001) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="91400300000000002000128008000100736974001400028008000300ac1e010106000d0009000000140003006e"], 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x8010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24.947357017s ago: executing program 2 (id=784): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 24.880465739s ago: executing program 34 (id=784): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 21.392290917s ago: executing program 6 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 21.336193889s ago: executing program 6 (id=848): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x24000840) 20.481367927s ago: executing program 6 (id=891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfff8}}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)=@newqdisc={0x24, 0x28, 0x1, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000080) 20.403151569s ago: executing program 35 (id=891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfff8}}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)=@newqdisc={0x24, 0x28, 0x1, 0x4003, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000080) 20.124440909s ago: executing program 5 (id=907): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) 20.066875099s ago: executing program 5 (id=909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x1, 0x0, 0x0) 20.015277479s ago: executing program 5 (id=911): recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000003980)=[{0x0}, {&(0x7f0000003600)=""/235, 0xeb}], 0x2}, 0x9}], 0x1, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010100}, 0x10) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 19.950065122s ago: executing program 5 (id=914): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 19.800999228s ago: executing program 5 (id=920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100140000307e0000000200000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x700}, 0x0) 19.438218556s ago: executing program 5 (id=930): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 19.383907153s ago: executing program 36 (id=930): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 19.113967084s ago: executing program 1 (id=938): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast1}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c24", 0x2a}], 0x1}, 0x30008b08) 19.022057506s ago: executing program 1 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80c) 18.944459767s ago: executing program 1 (id=942): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000001d00)={0xffffffffffffffff, 0x0, 0x4000}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 18.899982736s ago: executing program 1 (id=943): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 18.838270591s ago: executing program 1 (id=944): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000008c0)={&(0x7f0000000400)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x34}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000440)="4ce4", 0x2}], 0x1}, 0xc8d0) 18.489691925s ago: executing program 1 (id=945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1e00, 0x8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002080)=@newtaction={0x118, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x40, 0x1, [@m_simple={0x3c, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xc4, 0x1, [@m_simple={0xc0, 0x2, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}]}, {0x85, 0x6, "ebc6d23aaa5ba80d0f802173a723fcfa0cf2d0ebb06113a27802ae394942b641c58b2d19d2d38e2d3aefaedd845a777ce244c34529788bec9caea801696b43e73eba1d5f57253ded4007888d4dfb2d4d560cc3a21e5362d7322c39e51b110d62a241245060777b51d51b8fcc7955bce8eb39b61de1a07ec7afee370d347a3b49ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4090, 0x1b4}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f0000000540)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000080)=""/192, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 18.443891932s ago: executing program 37 (id=945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1e00, 0x8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002080)=@newtaction={0x118, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x40, 0x1, [@m_simple={0x3c, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xc4, 0x1, [@m_simple={0xc0, 0x2, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}]}, {0x85, 0x6, "ebc6d23aaa5ba80d0f802173a723fcfa0cf2d0ebb06113a27802ae394942b641c58b2d19d2d38e2d3aefaedd845a777ce244c34529788bec9caea801696b43e73eba1d5f57253ded4007888d4dfb2d4d560cc3a21e5362d7322c39e51b110d62a241245060777b51d51b8fcc7955bce8eb39b61de1a07ec7afee370d347a3b49ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4090, 0x1b4}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f0000000540)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000080)=""/192, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 17.355943488s ago: executing program 8 (id=892): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfd94, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 17.28027256s ago: executing program 8 (id=957): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) 17.22797775s ago: executing program 8 (id=958): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x68) read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0x2020) 17.181679258s ago: executing program 8 (id=959): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 14.387068095s ago: executing program 7 (id=1005): mount(&(0x7f00000000c0)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 14.30425158s ago: executing program 7 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="8000010018000000180034801400350069703665727370616e", @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) 14.238266867s ago: executing program 7 (id=1010): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x2, @mcast2, 0x400}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001"], 0x10c) 14.191368976s ago: executing program 7 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 14.160991927s ago: executing program 7 (id=1013): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, &(0x7f00000000c0)) 13.8623209s ago: executing program 7 (id=1024): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)=""/253, 0xfd}], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 13.786811116s ago: executing program 38 (id=1024): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)=""/253, 0xfd}], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 11.802638194s ago: executing program 3 (id=1048): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 11.755535201s ago: executing program 3 (id=1049): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x203c) 11.737635652s ago: executing program 3 (id=1050): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/40, 0x28}], 0x1, 0x0, 0x31}, 0x10040) 10.885350536s ago: executing program 3 (id=1053): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0/../file0/../file0/../file0/file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x0) 10.781988526s ago: executing program 3 (id=1057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x4d) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000940)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 10.38626069s ago: executing program 3 (id=1068): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500e9990000000000000000ff010000000000000000000000000001ac1e000100"/48, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="010000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000100"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 10.373643976s ago: executing program 39 (id=1068): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500e9990000000000000000ff010000000000000000000000000001ac1e000100"/48, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="010000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000100"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2.083369176s ago: executing program 40 (id=959): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 1.414007205s ago: executing program 9 (id=1210): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:*\t'], 0xa) 1.396704877s ago: executing program 9 (id=1211): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000180)="71d2", 0xfffd, 0x8001, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 545.085802ms ago: executing program 9 (id=1212): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x1, 0x18, r0, 0x0) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) 448.989357ms ago: executing program 9 (id=1213): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 392.002802ms ago: executing program 9 (id=1214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) 2.155828ms ago: executing program 9 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB="5000508011000100ec3bd87b59ecb393bce7f9ac6700000009000100c8803781500000000400060007000400478d000005000900020000000c00088004"], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000) 0s ago: executing program 41 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB="5000508011000100ec3bd87b59ecb393bce7f9ac6700000009000100c8803781500000000400060007000400478d000005000900020000000c00088004"], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000) kernel console output (not intermixed with test programs): h 8) [ 48.899874][ T6236] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 48.899912][ T6236] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.899912][ T6236] [ 48.900923][ T4723] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 48.901673][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.928868][ T6514] netlink: 'syz.5.583': attribute type 10 has an invalid length. [ 49.000826][ T6523] warning: `syz.3.586' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.083100][ T6531] __nla_validate_parse: 3 callbacks suppressed [ 49.083156][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 49.117662][ T6538] loop5: detected capacity change from 0 to 256 [ 49.118998][ T6535] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 49.119020][ T6535] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.124030][ T6535] vhci_hcd vhci_hcd.0: Device attached [ 49.144177][ T6535] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 49.144202][ T6535] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.144253][ T6535] vhci_hcd vhci_hcd.0: Device attached [ 49.152411][ T6535] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 49.152437][ T6535] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.152496][ T6535] vhci_hcd vhci_hcd.0: Device attached [ 49.159596][ T6535] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 49.159620][ T6535] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.159668][ T6535] vhci_hcd vhci_hcd.0: Device attached [ 49.160447][ T6535] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 49.163088][ T6541] vhci_hcd: connection closed [ 49.164979][ T6544] vhci_hcd: connection closed [ 49.167071][ T6546] vhci_hcd: connection closed [ 49.168451][ T6539] vhci_hcd: connection closed [ 49.170036][ T6230] vhci_hcd vhci_hcd.3: stop threads [ 49.170266][ T6230] vhci_hcd vhci_hcd.3: release socket [ 49.170289][ T6230] vhci_hcd vhci_hcd.3: disconnect device [ 49.173762][ T6230] vhci_hcd vhci_hcd.3: stop threads [ 49.173772][ T6230] vhci_hcd vhci_hcd.3: release socket [ 49.173784][ T6230] vhci_hcd vhci_hcd.3: disconnect device [ 49.186336][ T6230] vhci_hcd vhci_hcd.3: stop threads [ 49.186371][ T6230] vhci_hcd vhci_hcd.3: release socket [ 49.186389][ T6230] vhci_hcd vhci_hcd.3: disconnect device [ 49.186539][ T6230] vhci_hcd vhci_hcd.3: stop threads [ 49.186553][ T6230] vhci_hcd vhci_hcd.3: release socket [ 49.186568][ T6230] vhci_hcd vhci_hcd.3: disconnect device [ 49.188622][ T6538] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 49.188638][ T6538] FAT-fs (loop5): Filesystem has been set read-only [ 49.368032][ T6233] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 49.377687][ T6578] loop2: detected capacity change from 0 to 512 [ 49.403883][ T6578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.444631][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.493491][ T6592] loop2: detected capacity change from 0 to 1024 [ 49.496663][ T6592] EXT4-fs: Ignoring removed nobh option [ 49.497794][ T6592] EXT4-fs: Ignoring removed bh option [ 49.500090][ T6592] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 49.526324][ T6592] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 49.526378][ T6592] System zones: 0-1, 3-12 [ 49.526937][ T6592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.584279][ T6592] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #12: block 7: comm syz.2.602: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 49.591348][ T6592] EXT4-fs (loop2): Remounting filesystem read-only [ 49.632984][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.692688][ T6613] loop5: detected capacity change from 0 to 128 [ 49.696316][ T6614] loop4: detected capacity change from 0 to 128 [ 49.696525][ T6613] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.696873][ T6613] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.712966][ T6614] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 49.712993][ T6614] FAT-fs (loop4): Filesystem has been set read-only [ 49.812219][ T6629] netlink: 'syz.4.617': attribute type 13 has an invalid length. [ 49.910977][ T6637] loop8: detected capacity change from 0 to 524288000 [ 50.138040][ T6661] netlink: 11 bytes leftover after parsing attributes in process `syz.4.626'. [ 50.573448][ T6710] mmap: syz.1.646 (6710) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.590325][ T6718] loop5: detected capacity change from 0 to 512 [ 50.616426][ T6718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.627171][ T6718] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.650: corrupted xattr block 33: invalid header [ 50.630256][ T6718] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.650: corrupted xattr block 33: invalid header [ 50.633753][ T6718] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.650: corrupted xattr block 33: invalid header [ 50.656854][ T6731] loop4: detected capacity change from 0 to 512 [ 50.672801][ T6731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.674412][ T6731] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.681006][ T6731] EXT4-fs (loop4): 1 truncate cleaned up [ 50.681500][ T6731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.746244][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.771007][ T6734] netlink: 'syz.1.655': attribute type 6 has an invalid length. [ 50.809806][ T6741] loop2: detected capacity change from 0 to 1024 [ 50.810583][ T6741] EXT4-fs: inline encryption not supported [ 50.861458][ T6741] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.656: lblock 3 mapped to illegal pblock 3 (length 3) [ 50.865281][ T6741] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 50.867459][ T6741] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.867459][ T6741] [ 50.873997][ T6741] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.656: lblock 3 mapped to illegal pblock 3 (length 3) [ 50.882949][ T6751] binder: 6750:6751 got reply transaction with no transaction stack [ 50.883011][ T6751] binder: 6750:6751 transaction reply to 0:0 failed 1/29201/-71, code 0 size 0-0 line 3155 [ 50.887335][ T6751] binder: 6750:6751 ioctl c0306201 20000040 returned -14 [ 50.894236][ T6230] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 50.894496][ T6230] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 50.894520][ T6230] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.894520][ T6230] [ 50.903858][ T4711] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 50.973431][ T6761] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 50.973507][ T6761] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 50.973538][ T6761] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.662: Failed to acquire dquot type 1 [ 50.973556][ T6761] loop2: lost filesystem error report for type 5 error -117 [ 50.974769][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 50.974791][ C0] EXT4-fs (loop2): last error at time 50: ext4_acquire_dquot:7041 [ 50.975129][ T6761] EXT4-fs (loop2): 1 truncate cleaned up [ 51.023230][ T6770] EXT4-fs: Ignoring removed nobh option [ 51.023296][ T6770] EXT4-fs: Ignoring removed bh option [ 51.028580][ T6770] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 51.041984][ T6770] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 51.042052][ T6770] System zones: 0-1, 3-12 [ 51.095801][ T6770] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.665: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 51.102374][ T6770] EXT4-fs (loop5): Remounting filesystem read-only [ 51.185019][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 51.303237][ T6803] loop5: p1 < > p4 < > [ 51.304087][ T6803] loop5: partition table partially beyond EOD, truncated [ 51.315793][ T6803] loop5: p4 start 42180 is beyond EOD, truncated [ 51.467576][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 51.586803][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.681'. [ 51.618351][ T6856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.656591][ T6860] syzkaller1: entered promiscuous mode [ 51.657828][ T6860] syzkaller1: entered allmulticast mode [ 51.683099][ T6856] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.682: bg 0: block 112: padding at end of block bitmap is not set [ 51.687513][ T6856] EXT4-fs (loop2): Remounting filesystem read-only [ 51.881913][ T6887] team0: entered promiscuous mode [ 51.881952][ T6887] team_slave_0: entered promiscuous mode [ 51.882004][ T6887] team_slave_1: entered promiscuous mode [ 51.882385][ T6887] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 51.982005][ T6897] binder: 6896:6897 got reply transaction with no transaction stack [ 51.984208][ T6897] binder: 6896:6897 transaction reply to 0:0 failed 2/29201/-71, code 0 size 0-0 line 3155 [ 51.987629][ T6897] binder: 6896:6897 ioctl c0306201 20000040 returned -14 [ 52.147363][ T6919] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 52.152514][ T6919] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 52.152568][ T6919] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.704: Failed to acquire dquot type 1 [ 52.152593][ T6919] loop3: lost filesystem error report for type 5 error -117 [ 52.156841][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.156856][ C1] EXT4-fs (loop3): last error at time 52: ext4_acquire_dquot:7041 [ 52.165691][ T6919] EXT4-fs (loop3): 1 truncate cleaned up [ 52.290351][ T6932] EXT4-fs warning (device loop1): ext4_begin_enable_verity:135: inode #13: comm syz.1.708: verity is only allowed on extent-based files [ 52.302994][ T6935] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.709: corrupted inode contents [ 52.313336][ T6935] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #2: comm syz.4.709: mark_inode_dirty error [ 52.317915][ T6935] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.709: corrupted inode contents [ 52.320879][ T6935] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.709: mark_inode_dirty error [ 52.327091][ T6935] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.709: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 52.327091][ T6935] [ 52.336060][ T6935] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.709: corrupted inode contents [ 52.339263][ T6935] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.709: mark_inode_dirty error [ 52.341970][ T6935] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 52.348443][ T6935] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.709: corrupted inode contents [ 52.349163][ T6935] EXT4-fs error (device loop4): add_dirent_to_buf:2151: inode #2: comm syz.4.709: mark_inode_dirty error [ 52.357216][ T6942] EXT4-fs: Ignoring removed bh option [ 52.441735][ T6951] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.442708][ T6951] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.122645][ T6966] hub 5-0:1.0: USB hub found [ 53.122762][ T6966] hub 5-0:1.0: 8 ports detected [ 53.254162][ T30] audit: type=1400 audit(53.220:3): lsm=SMACK fn=smack_ptrace_access_check action=denied subject="w" object="_" requested=rw pid=6972 comm="syz.1.724" opid=6972 ocomm="syz.1.724" [ 53.350054][ T30] audit: type=1326 audit(53.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.4.719" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9137a168 code=0x7fc00000 [ 53.464882][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 53.700666][ T30] audit: type=1326 audit(53.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.2.749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae37a168 code=0x7ffc0000 [ 53.700710][ T30] audit: type=1326 audit(53.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.2.749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae37a168 code=0x7ffc0000 [ 53.710600][ T30] audit: type=1326 audit(53.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.2.749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae37a168 code=0x7ffc0000 [ 53.710735][ T30] audit: type=1326 audit(53.680:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.2.749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffae37a168 code=0x7ffc0000 [ 53.710901][ T30] audit: type=1326 audit(53.680:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.2.749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae37a168 code=0x7ffc0000 [ 53.711605][ T30] audit: type=1326 audit(53.680:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7028 comm="syz.2.749" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae37a168 code=0x7ffc0000 [ 53.850688][ T1060] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 53.857011][ T1060] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.071869][ T7067] set_capacity_and_notify: 11 callbacks suppressed [ 54.074413][ T7067] loop2: detected capacity change from 0 to 512 [ 54.098040][ T7067] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.767: corrupted inode contents [ 54.098675][ T7067] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #2: comm syz.2.767: mark_inode_dirty error [ 54.098941][ T7067] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.767: corrupted inode contents [ 54.099097][ T7067] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.767: mark_inode_dirty error [ 54.101664][ T7067] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.767: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 54.101664][ T7067] [ 54.101793][ T7067] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.767: corrupted inode contents [ 54.101951][ T7067] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.767: mark_inode_dirty error [ 54.102557][ T7067] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 54.106582][ T7067] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.767: corrupted inode contents [ 54.106777][ T7067] EXT4-fs error (device loop2): add_dirent_to_buf:2151: inode #2: comm syz.2.767: mark_inode_dirty error [ 54.178988][ T7075] loop2: detected capacity change from 0 to 256 [ 54.275145][ T7087] macvlan1: entered promiscuous mode [ 54.278581][ T7087] ipvlan0: entered promiscuous mode [ 54.280733][ T7087] ipvlan0: left promiscuous mode [ 54.287298][ T7087] macvlan1: left promiscuous mode [ 54.288892][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 54.319316][ T4711] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 54.319357][ T4711] FAT-fs (loop2): Filesystem has been set read-only [ 54.319593][ T4711] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 54.464059][ T6230] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.484551][ T7105] loop1: detected capacity change from 0 to 512 [ 54.528449][ T7105] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.780: corrupted inode contents [ 54.528946][ T7105] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #2: comm syz.1.780: mark_inode_dirty error [ 54.529143][ T7105] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.780: corrupted inode contents [ 54.531162][ T7105] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.780: mark_inode_dirty error [ 54.537897][ T7105] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.780: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 54.537897][ T7105] [ 54.538081][ T7105] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.780: corrupted inode contents [ 54.538240][ T7105] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.780: mark_inode_dirty error [ 54.538370][ T7105] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 54.541853][ T7105] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.780: corrupted inode contents [ 54.542054][ T7105] EXT4-fs error (device loop1): add_dirent_to_buf:2151: inode #2: comm syz.1.780: mark_inode_dirty error [ 54.600508][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.602282][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.602813][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.603082][ T6230] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.603693][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.603927][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.718839][ T6230] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.776368][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.778358][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.781778][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.786758][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.788634][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.823632][ T6230] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.999110][ T6230] bridge_slave_1: left allmulticast mode [ 55.000250][ T6230] bridge_slave_1: left promiscuous mode [ 55.001436][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.004517][ T6230] bridge_slave_0: left allmulticast mode [ 55.006565][ T6230] bridge_slave_0: left promiscuous mode [ 55.006665][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.114627][ T6230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.136616][ T6230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.139733][ T6230] bond0 (unregistering): Released all slaves [ 55.160950][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.162219][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.162338][ T7113] bridge_slave_0: entered allmulticast mode [ 55.162860][ T7113] bridge_slave_0: entered promiscuous mode [ 55.172370][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.173068][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.173157][ T7113] bridge_slave_1: entered allmulticast mode [ 55.173756][ T7113] bridge_slave_1: entered promiscuous mode [ 55.189838][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.196304][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.222751][ T7113] team0: Port device team_slave_0 added [ 55.223771][ T7113] team0: Port device team_slave_1 added [ 55.229090][ T7173] loop3: detected capacity change from 0 to 128 [ 55.320257][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.323636][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.328924][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.339766][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.339793][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.339822][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.374144][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.442278][ T7113] hsr_slave_0: entered promiscuous mode [ 55.442704][ T7113] hsr_slave_1: entered promiscuous mode [ 55.514850][ T6230] hsr_slave_0: left promiscuous mode [ 55.518063][ T6230] hsr_slave_1: left promiscuous mode [ 55.518373][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.518385][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.522589][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.522619][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.535184][ T6230] veth1_macvtap: left promiscuous mode [ 55.536334][ T6230] veth0_macvtap: left promiscuous mode [ 55.537746][ T6230] veth1_vlan: left promiscuous mode [ 55.538819][ T6230] veth0_vlan: left promiscuous mode [ 55.659330][ T6230] team0 (unregistering): Port device team_slave_1 removed [ 55.663318][ T6230] team0 (unregistering): Port device team_slave_0 removed [ 55.721768][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 55.722052][ T7218] netlink: 34959 bytes leftover after parsing attributes in process `syz.5.805'. [ 55.722125][ T7220] veth0_macvtap: Caught tx_queue_len zero misconfig [ 55.728665][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 55.843177][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.844694][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.849183][ T7132] bridge_slave_0: entered allmulticast mode [ 55.850848][ T7132] bridge_slave_0: entered promiscuous mode [ 55.860088][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.861584][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.862994][ T7132] bridge_slave_1: entered allmulticast mode [ 55.864623][ T7132] bridge_slave_1: entered promiscuous mode [ 55.893533][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.915514][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.959214][ T7242] syzkaller1: entered promiscuous mode [ 55.959258][ T7242] syzkaller1: entered allmulticast mode [ 55.965409][ T7132] team0: Port device team_slave_0 added [ 55.987703][ T7132] team0: Port device team_slave_1 added [ 56.037136][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.037170][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.037186][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.038643][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 56.039387][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.039395][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.039412][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.050585][ T7132] hsr_slave_0: entered promiscuous mode [ 56.050913][ T7132] hsr_slave_1: entered promiscuous mode [ 56.051124][ T7132] debugfs: 'hsr0' already exists in 'hsr' [ 56.051135][ T7132] Cannot create hsr debugfs directory [ 56.067603][ T7113] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 56.071247][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.073119][ T7113] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 56.087367][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.087795][ T7113] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 56.091224][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.092929][ T7113] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 56.096343][ T7113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.244683][ T6230] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.366622][ T6230] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.413937][ T7319] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.441112][ T6230] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.488139][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.549895][ T6230] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.555517][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.599180][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.599232][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.599769][ T1410] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.599787][ T1410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.610038][ T7132] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 56.616004][ T7132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.639079][ T7132] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 56.648501][ T7132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.648899][ T7132] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 56.661795][ T7132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.662560][ T7132] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 56.665097][ T4720] Bluetooth: hci3: command tx timeout [ 56.669514][ T7132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.709635][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 56.727707][ T6230] bridge_slave_1: left allmulticast mode [ 56.728823][ T6230] bridge_slave_1: left promiscuous mode [ 56.730013][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.734408][ T6230] bridge_slave_0: left allmulticast mode [ 56.734440][ T6230] bridge_slave_0: left promiscuous mode [ 56.735300][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.807372][ T6230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.825073][ T4720] Bluetooth: hci4: command tx timeout [ 56.837288][ T6230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.876604][ T6230] bond0 (unregistering): Released all slaves [ 56.914445][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.964274][ T7132] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.978754][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.978802][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.979343][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.979369][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.064722][ T7132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.066322][ T7132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.098119][ T7402] loop1: detected capacity change from 0 to 1024 [ 57.253300][ T6230] hsr_slave_0: left promiscuous mode [ 57.272074][ T6230] hsr_slave_1: left promiscuous mode [ 57.272450][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.272465][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.274662][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.274675][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.292361][ T6230] veth1_macvtap: left promiscuous mode [ 57.292410][ T6230] veth0_macvtap: left promiscuous mode [ 57.292461][ T6230] veth1_vlan: left promiscuous mode [ 57.292499][ T6230] veth0_vlan: left promiscuous mode [ 57.511157][ T6230] team_slave_1 (unregistering): left promiscuous mode [ 57.516975][ T6230] team0 (unregistering): Port device team_slave_1 removed [ 57.520211][ T6230] team_slave_0 (unregistering): left promiscuous mode [ 57.526348][ T6230] team0 (unregistering): Port device team_slave_0 removed [ 57.572221][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 57.572265][ T30] audit: type=1400 audit(57.530:23): lsm=SMACK fn=smack_file_lock action=denied subject="_" object="lowerdir" requested=l pid=7437 comm="syz.1.840" path="/192/file0" dev="tmpfs" ino=1016 [ 57.647675][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 57.663884][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.820219][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.822454][ T7113] veth0_vlan: entered promiscuous mode [ 57.828747][ T7113] veth1_vlan: entered promiscuous mode [ 57.857723][ T7113] veth0_macvtap: entered promiscuous mode [ 57.872410][ T7113] veth1_macvtap: entered promiscuous mode [ 57.876061][ T7469] netlink: 'syz.3.844': attribute type 11 has an invalid length. [ 57.893053][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.897125][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.937693][ T1253] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.937758][ T1253] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.937779][ T1253] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.937796][ T1253] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.953812][ T7477] loop3: detected capacity change from 0 to 4096 [ 57.975947][ T7477] EXT4-fs: inline encryption not supported [ 58.007593][ T7477] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.007633][ T7477] EXT4-fs (loop3): Test dummy encryption mode enabled [ 58.014708][ T7477] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 58.015570][ T7477] System zones: 0-5 [ 58.027133][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.027166][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.031304][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 58.080802][ T6236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.080837][ T6236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.100214][ T7132] veth0_vlan: entered promiscuous mode [ 58.132382][ T7132] veth1_vlan: entered promiscuous mode [ 58.164487][ T7132] veth0_macvtap: entered promiscuous mode [ 58.169578][ T7132] veth1_macvtap: entered promiscuous mode [ 58.174681][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.177497][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.178379][ T7490] gadgetfs: bound to dummy_udc driver [ 58.182830][ T6230] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.182929][ T6230] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.182990][ T6230] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.183038][ T6230] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.218839][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.218870][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.231358][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.231393][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.462394][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 58.512312][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 58.513952][ T7527] netlink: 'syz.3.858': attribute type 26 has an invalid length. [ 58.541473][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.541537][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.541595][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.541632][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.541672][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.541705][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.541737][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.541768][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.541799][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.541830][ T7531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 58.784390][ T7566] Injecting memory failure for pfn 0x15b5c6 at process virtual address 0x20000000 [ 58.791256][ T7566] Memory failure: 0x15b5c6: Sending SIGBUS to syz.7.871:7566 due to hardware memory corruption [ 58.793474][ T7566] Memory failure: 0x15b5c6: recovery action for dirty LRU page: Recovered [ 58.803076][ T7566] Injecting memory failure for pfn 0x219250 at process virtual address 0x20001000 [ 58.803262][ T7566] Memory failure: 0x219250: Sending SIGBUS to syz.7.871:7566 due to hardware memory corruption [ 58.803287][ T7566] Memory failure: 0x219250: recovery action for already poisoned page: Failed [ 58.804632][ T7566] input: syz0 as /devices/virtual/input/input6 [ 58.818398][ T7569] netlink: 104 bytes leftover after parsing attributes in process `syz.3.872'. [ 58.880790][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11 [ 58.905727][ T4720] Bluetooth: hci4: command tx timeout [ 59.009648][ T7602] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.881'. [ 59.010164][ T7592] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.881'. [ 59.092911][ T7611] loop7: detected capacity change from 0 to 512 [ 59.143184][ T7611] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #2: comm syz.7.888: corrupted inode contents [ 59.152262][ T7611] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #2: comm syz.7.888: mark_inode_dirty error [ 59.152536][ T7611] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #2: comm syz.7.888: corrupted inode contents [ 59.153812][ T7611] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.888: mark_inode_dirty error [ 59.184437][ T6230] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.241561][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 59.333991][ T7642] loop7: detected capacity change from 0 to 512 [ 59.356505][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.357355][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.357666][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.357983][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.358198][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.383235][ T7642] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.896: invalid indirect mapped block 256 (level 2) [ 59.383271][ T7642] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 59.386209][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 59.386222][ C1] EXT4-fs (loop7): initial error at time 59: ext4_free_branches:1023: inode 11 [ 59.386242][ C1] EXT4-fs (loop7): last error at time 59: ext4_free_branches:1023: inode 11 [ 59.396886][ T7642] EXT4-fs (loop7): 2 truncates cleaned up [ 59.535495][ T6230] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.588174][ T7681] syzkaller1: entered promiscuous mode [ 59.588208][ T7681] syzkaller1: entered allmulticast mode [ 59.671736][ T7695] loop5: detected capacity change from 0 to 512 [ 59.679627][ T7695] EXT4-fs (loop5): Test dummy encryption mode enabled [ 59.679662][ T7695] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.692085][ T7695] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.914: bad orphan inode 131083 [ 59.692123][ T7695] loop5: lost filesystem error report for type 5 error -117 [ 59.694771][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 59.694799][ C0] EXT4-fs (loop5): initial error at time 59: ext4_orphan_get:1425 [ 59.694829][ C0] EXT4-fs (loop5): last error at time 59: ext4_orphan_get:1425 [ 59.713021][ T7695] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 59.727304][ T7702] loop1: detected capacity change from 0 to 8 [ 59.730416][ T7695] overlayfs: upper fs needs to support d_type. [ 59.750889][ T6230] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.766181][ T7695] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.914: path /: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 59.783361][ T5039] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /170/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 59.853744][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.855598][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.857165][ T7647] bridge_slave_0: entered allmulticast mode [ 59.861066][ T7647] bridge_slave_0: entered promiscuous mode [ 59.863865][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.867335][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.868906][ T7647] bridge_slave_1: entered allmulticast mode [ 59.870765][ T7647] bridge_slave_1: entered promiscuous mode [ 59.881742][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.886472][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.934565][ T6230] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.943734][ T7647] team0: Port device team_slave_0 added [ 59.951723][ T7647] team0: Port device team_slave_1 added [ 59.969942][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.978590][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.978644][ T7647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.979300][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.979316][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.979337][ T7647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.018116][ T7728] loop3: detected capacity change from 0 to 1024 [ 60.019187][ T7647] hsr_slave_0: entered promiscuous mode [ 60.020679][ T7647] hsr_slave_1: entered promiscuous mode [ 60.020908][ T7647] debugfs: 'hsr0' already exists in 'hsr' [ 60.020920][ T7647] Cannot create hsr debugfs directory [ 60.114848][ T7735] loop3: detected capacity change from 0 to 128 [ 60.122570][ T7735] EXT4-fs (loop3): Test dummy encryption mode enabled [ 60.209372][ T6230] bridge_slave_1: left allmulticast mode [ 60.210480][ T6230] bridge_slave_1: left promiscuous mode [ 60.211755][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.222635][ T6230] bridge_slave_0: left allmulticast mode [ 60.222670][ T6230] bridge_slave_0: left promiscuous mode [ 60.222751][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.287267][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.289774][ T4720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.300503][ T4720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.300936][ T4720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.301420][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.411748][ T6230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.438223][ T6230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.456060][ T6230] bond0 (unregistering): Released all slaves [ 60.468381][ T4399] 8021q: adding VLAN 0 to HW filter on device eth12 [ 60.503642][ T7647] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 60.521510][ T7647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.593507][ T7647] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 60.597832][ T7647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.598222][ T7647] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 60.601507][ T7647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.602669][ T7647] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 60.609649][ T7647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.688694][ T4399] 8021q: adding VLAN 0 to HW filter on device eth13 [ 60.712848][ T7809] loop1: detected capacity change from 0 to 512 [ 60.720920][ T7809] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.723133][ T7809] EXT4-fs (loop1): 1 truncate cleaned up [ 60.726818][ T6230] hsr_slave_0: left promiscuous mode [ 60.728303][ T6230] hsr_slave_1: left promiscuous mode [ 60.729686][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.731240][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.733039][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.734501][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.740440][ T6230] veth1_macvtap: left promiscuous mode [ 60.740495][ T6230] veth0_macvtap: left promiscuous mode [ 60.740556][ T6230] veth1_vlan: left promiscuous mode [ 60.740597][ T6230] veth0_vlan: left promiscuous mode [ 60.760582][ T4710] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 60.763441][ T4710] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 60.763700][ T4710] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 60.857749][ T6230] team0 (unregistering): Port device team_slave_1 removed [ 60.863177][ T6230] team0 (unregistering): Port device team_slave_0 removed [ 60.984922][ T4720] Bluetooth: hci4: command tx timeout [ 61.000202][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.008199][ T7647] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.013157][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.013208][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.022048][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.022088][ T6236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.052678][ T7647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.080061][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.081700][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.083167][ T7745] bridge_slave_0: entered allmulticast mode [ 61.086034][ T7745] bridge_slave_0: entered promiscuous mode [ 61.088049][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.089496][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.090959][ T7745] bridge_slave_1: entered allmulticast mode [ 61.092642][ T7745] bridge_slave_1: entered promiscuous mode [ 61.138833][ T7832] loop3: detected capacity change from 0 to 256 [ 61.157349][ T7745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.160569][ T7745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.169124][ T7745] team0: Port device team_slave_0 added [ 61.170998][ T7745] team0: Port device team_slave_1 added [ 61.180598][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.182078][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.194652][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.201195][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.203290][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.203327][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.244649][ T4399] 8021q: adding VLAN 0 to HW filter on device eth15 [ 61.290137][ T7745] hsr_slave_0: entered promiscuous mode [ 61.291559][ T7745] hsr_slave_1: entered promiscuous mode [ 61.324727][ T6230] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.329359][ T4728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.330135][ T4728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.330425][ T4728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.332895][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.333128][ T4728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.384926][ T4728] Bluetooth: hci3: command tx timeout [ 61.429459][ T6230] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.454612][ T7647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.561901][ T6230] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.573403][ T7745] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 61.583313][ T7745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.583739][ T7745] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 61.587878][ T7745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.596236][ T7745] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 61.599205][ T7745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.599818][ T7745] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 61.601369][ T7745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.665485][ T6230] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.738266][ T4399] 8021q: adding VLAN 0 to HW filter on device eth14 [ 61.802750][ T7647] veth0_vlan: entered promiscuous mode [ 61.850585][ T7647] veth1_vlan: entered promiscuous mode [ 61.881441][ T7647] veth0_macvtap: entered promiscuous mode [ 61.888957][ T7647] veth1_macvtap: entered promiscuous mode [ 61.893775][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.896862][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.900758][ T6236] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.900859][ T6236] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.900886][ T6236] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.900909][ T6236] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.910502][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.916566][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.916670][ T7850] bridge_slave_0: entered allmulticast mode [ 61.917708][ T7850] bridge_slave_0: entered promiscuous mode [ 61.939876][ T6230] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.954840][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 61.965295][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.965380][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.965473][ T7850] bridge_slave_1: entered allmulticast mode [ 61.966212][ T7850] bridge_slave_1: entered promiscuous mode [ 61.996575][ T7745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.004001][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.007425][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.040582][ T6230] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.050410][ T7850] team0: Port device team_slave_0 added [ 62.059524][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.069675][ T7850] team0: Port device team_slave_1 added [ 62.085914][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.085946][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.103941][ T6230] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.116639][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.116666][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.116684][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.117344][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.117352][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.117367][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.117951][ T4399] 8021q: adding VLAN 0 to HW filter on device eth16 [ 62.136237][ T7850] hsr_slave_0: entered promiscuous mode [ 62.136604][ T7850] hsr_slave_1: entered promiscuous mode [ 62.136820][ T7850] debugfs: 'hsr0' already exists in 'hsr' [ 62.136830][ T7850] Cannot create hsr debugfs directory [ 62.142823][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.142875][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.167561][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.167609][ T6236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.178166][ T1410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.178198][ T1410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.213596][ T6230] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.347225][ T4728] Bluetooth: hci1: command tx timeout [ 62.524430][ T4399] 8021q: adding VLAN 0 to HW filter on device eth17 [ 62.577904][ T7745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.651889][ T6230] bridge_slave_1: left allmulticast mode [ 62.651928][ T6230] bridge_slave_1: left promiscuous mode [ 62.652020][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.654954][ T6230] bridge_slave_0: left allmulticast mode [ 62.654968][ T6230] bridge_slave_0: left promiscuous mode [ 62.655036][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.670518][ T6230] bridge_slave_1: left allmulticast mode [ 62.670555][ T6230] bridge_slave_1: left promiscuous mode [ 62.670626][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.673761][ T6230] bridge_slave_0: left allmulticast mode [ 62.673774][ T6230] bridge_slave_0: left promiscuous mode [ 62.673869][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.770168][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 62.832021][ T6230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.853265][ T6230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.875821][ T6230] bond0 (unregistering): Released all slaves [ 62.925733][ T6230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.956343][ T6230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.995770][ T6230] bond0 (unregistering): Released all slaves [ 63.049416][ T4399] 8021q: adding VLAN 0 to HW filter on device eth18 [ 63.064956][ T4728] Bluetooth: hci4: command tx timeout [ 63.198976][ T7745] veth0_vlan: entered promiscuous mode [ 63.207165][ T7745] veth1_vlan: entered promiscuous mode [ 63.218223][ T7745] veth0_macvtap: entered promiscuous mode [ 63.223646][ T7745] veth1_macvtap: entered promiscuous mode [ 63.270384][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.277632][ T7745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.289543][ T39] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.289596][ T39] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.289618][ T39] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.289634][ T39] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.333527][ T8011] loop3: detected capacity change from 0 to 2048 [ 63.383580][ T8011] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 63.387851][ T4728] Bluetooth: hci0: command tx timeout [ 63.399426][ T8011] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 63.399459][ T8011] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.399459][ T8011] [ 63.399483][ T8011] EXT4-fs (loop3): Total free blocks count 0 [ 63.399496][ T8011] EXT4-fs (loop3): Free/Dirty block details [ 63.399756][ T8011] EXT4-fs (loop3): free_blocks=2415919504 [ 63.399873][ T8011] EXT4-fs (loop3): dirty_blocks=16 [ 63.399884][ T8011] EXT4-fs (loop3): Block reservation details [ 63.399894][ T8011] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 63.423090][ T4716] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 63.442507][ T30] audit: type=1326 audit(63.410:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.3.970" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffba97a168 code=0x0 [ 63.450843][ T4399] 8021q: adding VLAN 0 to HW filter on device eth19 [ 63.465402][ T4728] Bluetooth: hci3: command tx timeout [ 63.473848][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.473879][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.490119][ T6236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.490150][ T6236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.672269][ T4399] 8021q: adding VLAN 0 to HW filter on device eth21 [ 63.681152][ T6230] hsr_slave_0: left promiscuous mode [ 63.685664][ T6230] hsr_slave_1: left promiscuous mode [ 63.685921][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.685947][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.690421][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.690442][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.699127][ T6230] hsr_slave_0: left promiscuous mode [ 63.700621][ T6230] hsr_slave_1: left promiscuous mode [ 63.702051][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.703622][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.706840][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.709038][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.718008][ T8047] loop9: detected capacity change from 0 to 4096 [ 63.719701][ T8047] EXT4-fs: inline encryption not supported [ 63.721622][ T6230] veth1_macvtap: left promiscuous mode [ 63.722771][ T6230] veth0_macvtap: left promiscuous mode [ 63.723942][ T6230] veth1_vlan: left promiscuous mode [ 63.726277][ T6230] veth0_vlan: left promiscuous mode [ 63.728199][ T8047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.730129][ T8047] EXT4-fs (loop9): Test dummy encryption mode enabled [ 63.732245][ T6230] veth1_macvtap: left promiscuous mode [ 63.732282][ T6230] veth0_macvtap: left promiscuous mode [ 63.732352][ T6230] veth1_vlan: left promiscuous mode [ 63.732389][ T6230] veth0_vlan: left promiscuous mode [ 63.736416][ T8047] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 63.736463][ T8047] System zones: 0-5 [ 63.910818][ T6230] team0 (unregistering): Port device team_slave_1 removed [ 63.926271][ T8054] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.006375][ T8056] block nbd9: shutting down sockets [ 64.097249][ T6230] team0 (unregistering): Port device team_slave_1 removed [ 64.101782][ T6230] team0 (unregistering): Port device team_slave_0 removed [ 64.257335][ T8074] set_capacity_and_notify: 1 callbacks suppressed [ 64.259844][ T8074] loop7: detected capacity change from 0 to 512 [ 64.261626][ T8074] EXT4-fs: Ignoring removed nobh option [ 64.263093][ T8074] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 64.282363][ T8074] EXT4-fs (loop7): 1 truncate cleaned up [ 64.282830][ T8074] EXT4-fs mount: 47 callbacks suppressed [ 64.282852][ T8074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.364118][ T8084] loop3: detected capacity change from 0 to 512 [ 64.369745][ T7132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.410407][ T8084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 64.426060][ T4728] Bluetooth: hci1: command tx timeout [ 64.455642][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 64.506819][ T1599] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.506869][ T1599] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.508023][ T26] cfg80211: failed to load regulatory.db [ 64.533098][ T4399] 8021q: adding VLAN 0 to HW filter on device eth20 [ 64.648949][ T8122] loop9: detected capacity change from 0 to 2048 [ 64.693309][ T8122] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.978906][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.000927][ T6230] IPVS: stop unused estimator thread 0... [ 65.131872][ T8150] net_ratelimit: 56 callbacks suppressed [ 65.131908][ T8150] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.146611][ T4399] 8021q: adding VLAN 0 to HW filter on device eth22 [ 65.331261][ T8175] ip6erspan0: entered allmulticast mode [ 65.465203][ T4728] Bluetooth: hci0: command tx timeout [ 65.522602][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1015'. [ 65.530490][ T8200] team1: entered promiscuous mode [ 65.531545][ T8200] team1: entered allmulticast mode [ 65.532841][ T8200] 8021q: adding VLAN 0 to HW filter on device team1 [ 65.553742][ T4728] Bluetooth: hci3: command tx timeout [ 65.647153][ T8213] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1019'. [ 65.772172][ T6233] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.876110][ T6233] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.892063][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.894477][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.898462][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.900328][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.901964][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.940906][ T6233] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.021415][ T6233] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.151131][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.152580][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.154096][ T8238] bridge_slave_0: entered allmulticast mode [ 66.156890][ T8238] bridge_slave_0: entered promiscuous mode [ 66.179439][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.180905][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.182394][ T8238] bridge_slave_1: entered allmulticast mode [ 66.184125][ T8238] bridge_slave_1: entered promiscuous mode [ 66.190943][ T6233] bridge_slave_1: left allmulticast mode [ 66.190974][ T6233] bridge_slave_1: left promiscuous mode [ 66.191069][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.196428][ T6233] bridge_slave_0: left allmulticast mode [ 66.197736][ T6233] bridge_slave_0: left promiscuous mode [ 66.197844][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.295982][ T6233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.337099][ T6233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.349220][ T6233] bond0 (unregistering): Released all slaves [ 66.370465][ T8238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.373667][ T8238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.378680][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.400957][ T8238] team0: Port device team_slave_0 added [ 66.404576][ T8238] team0: Port device team_slave_1 added [ 66.445772][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.448356][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.448404][ T8238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.449103][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.449117][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.449139][ T8238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.504867][ T4728] Bluetooth: hci1: command tx timeout [ 66.530184][ T8238] hsr_slave_0: entered promiscuous mode [ 66.532917][ T8238] hsr_slave_1: entered promiscuous mode [ 66.534565][ T8238] debugfs: 'hsr0' already exists in 'hsr' [ 66.537672][ T8238] Cannot create hsr debugfs directory [ 66.560034][ T8289] loop3: detected capacity change from 0 to 256 [ 66.644423][ T8295] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 66.665163][ T6233] hsr_slave_0: left promiscuous mode [ 66.666416][ T6233] hsr_slave_1: left promiscuous mode [ 66.666678][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.666690][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.669492][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.669503][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.676100][ T6233] veth1_macvtap: left promiscuous mode [ 66.676148][ T6233] veth0_macvtap: left promiscuous mode [ 66.676196][ T6233] veth1_vlan: left promiscuous mode [ 66.676229][ T6233] veth0_vlan: left promiscuous mode [ 66.953700][ T6233] team0 (unregistering): Port device team_slave_1 removed [ 66.963280][ T6233] team0 (unregistering): Port device team_slave_0 removed [ 67.192154][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1036'. [ 67.193891][ T8345] netlink: 'syz.9.1036': attribute type 10 has an invalid length. [ 67.197339][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1036'. [ 67.544959][ T4728] Bluetooth: hci0: command tx timeout [ 67.565151][ T30] audit: type=1326 audit(67.540:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.3.1043" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffba97a168 code=0x0 [ 67.628023][ T4728] Bluetooth: hci3: command tx timeout [ 67.720285][ T8403] loop3: detected capacity change from 0 to 128 [ 67.731402][ T8403] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.749025][ T8403] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.944877][ T4728] Bluetooth: hci4: command tx timeout [ 68.168532][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 68.291874][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 68.408921][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.535496][ T4399] 8021q: adding VLAN 0 to HW filter on device eth23 [ 68.584963][ T4728] Bluetooth: hci1: command tx timeout [ 68.667273][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b2262c51: rx timeout, send abort [ 68.668405][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000b2262c51: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 68.731480][ T8529] loop3: detected capacity change from 0 to 512 [ 68.739485][ T8529] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.749793][ T8529] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1053: Allocating blocks 41-42 which overlap fs metadata [ 68.749831][ T8529] loop3: lost filesystem error report for type 5 error -117 [ 68.754376][ T8529] EXT4-fs (loop3): Remounting filesystem read-only [ 68.754627][ T8529] Quota error (device loop3): write_blk: dquota write failed [ 68.754638][ T8529] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 68.754706][ T8529] Quota error (device loop3): write_blk: dquota write failed [ 68.754777][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 68.754790][ C0] EXT4-fs (loop3): initial error at time 68: ext4_mb_mark_diskspace_used:4222 [ 68.754802][ C0] EXT4-fs (loop3): last error at time 68: ext4_mb_mark_diskspace_used:4222 [ 68.755360][ T8529] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 68.755423][ T8529] EXT4-fs (loop3): 1 truncate cleaned up [ 68.755887][ T8529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.912986][ T8542] loop9: detected capacity change from 0 to 8 [ 68.926427][ T8542] SQUASHFS error: Failed to read block 0x6e6: -5 [ 68.926455][ T8542] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 69.028381][ T8548] loop9: detected capacity change from 0 to 512 [ 69.030157][ T8548] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 69.033184][ T8548] EXT4-fs (loop9): 1 truncate cleaned up [ 69.034645][ T8548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.041971][ T8548] Invalid ELF header len 10 [ 69.056106][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.161382][ T8560] loop9: detected capacity change from 0 to 2048 [ 69.161510][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.162660][ T8560] EXT4-fs: Ignoring removed i_version option [ 69.176980][ T8560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.200661][ T6233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.209973][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.260809][ T4720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.267327][ T4720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.269664][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.270494][ T6233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.273183][ T4720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.274687][ T4720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.321674][ T6233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.341356][ T8578] loop9: detected capacity change from 0 to 512 [ 69.350879][ T8578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.362608][ T8578] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.1072: corrupted xattr block 33: overlapping e_value [ 69.365777][ T8578] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.1072: corrupted xattr block 33: overlapping e_value [ 69.368566][ T8578] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.1072: corrupted xattr block 33: overlapping e_value [ 69.401181][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.412262][ T6233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.472900][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.474319][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.474423][ T8566] bridge_slave_0: entered allmulticast mode [ 69.477321][ T8566] bridge_slave_0: entered promiscuous mode [ 69.480197][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.481648][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.483049][ T8566] bridge_slave_1: entered allmulticast mode [ 69.487016][ T8566] bridge_slave_1: entered promiscuous mode [ 69.499164][ T8566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.501698][ T8566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.523896][ T8566] team0: Port device team_slave_0 added [ 69.524709][ T8566] team0: Port device team_slave_1 added [ 69.555376][ T6233] team0: left allmulticast mode [ 69.555408][ T6233] team_slave_0: left allmulticast mode [ 69.555422][ T6233] team_slave_1: left allmulticast mode [ 69.556587][ T6233] team0: left promiscuous mode [ 69.556599][ T6233] team_slave_0: left promiscuous mode [ 69.556673][ T6233] team_slave_1: left promiscuous mode [ 69.556850][ T6233] bridge0: port 3(team0) entered disabled state [ 69.558864][ T6233] bridge_slave_1: left allmulticast mode [ 69.558934][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.561879][ T6233] bridge_slave_0: left allmulticast mode [ 69.561890][ T6233] bridge_slave_0: left promiscuous mode [ 69.561956][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.617323][ T6233] team0: Port device bridge1 removed [ 69.621693][ T6233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.625959][ T4728] Bluetooth: hci0: command tx timeout [ 69.652530][ T6233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.665707][ T6233] bond0 (unregistering): Released all slaves [ 69.669951][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.669982][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.670007][ T8566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.680862][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.682226][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.688195][ T8566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.704325][ T8566] hsr_slave_0: entered promiscuous mode [ 69.707138][ T8566] hsr_slave_1: entered promiscuous mode [ 69.707345][ T8566] debugfs: 'hsr0' already exists in 'hsr' [ 69.707356][ T8566] Cannot create hsr debugfs directory [ 69.724063][ T6233] tipc: Left network mode [ 69.844712][ T4399] 8021q: adding VLAN 0 to HW filter on device eth24 [ 70.024818][ T4728] Bluetooth: hci4: command tx timeout [ 70.093192][ T6233] hsr_slave_0: left promiscuous mode [ 70.094615][ T6233] hsr_slave_1: left promiscuous mode [ 70.103602][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.105711][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.110107][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.111510][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.115978][ T6233] veth1_macvtap: left promiscuous mode [ 70.117016][ T6233] veth0_macvtap: left promiscuous mode [ 70.118107][ T6233] veth1_vlan: left promiscuous mode [ 70.119055][ T6233] veth0_vlan: left promiscuous mode [ 70.232500][ T6233] team0 (unregistering): Port device team_slave_1 removed [ 70.236760][ T6233] team0 (unregistering): Port device team_slave_0 removed [ 70.285613][ T4399] 8021q: adding VLAN 0 to HW filter on device eth26 [ 70.347316][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.360488][ T8653] loop9: detected capacity change from 0 to 1024 [ 70.360873][ T8653] EXT4-fs: Ignoring removed bh option [ 70.383496][ T8653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.423328][ T7745] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /61/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 70.423587][ T7745] EXT4-fs (loop9): Remounting filesystem read-only [ 70.431011][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.447070][ T6233] IPVS: stop unused estimator thread 0... [ 70.591810][ T8686] loop9: detected capacity change from 0 to 256 [ 70.622046][ T4399] 8021q: adding VLAN 0 to HW filter on device eth27 [ 70.657722][ T8692] batadv_slave_0: entered promiscuous mode [ 70.658525][ T8691] batadv_slave_0: left promiscuous mode [ 70.665654][ T4898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.867623][ T8722] syzkaller1: entered promiscuous mode [ 70.868796][ T8722] syzkaller1: entered allmulticast mode [ 71.039623][ T4399] 8021q: adding VLAN 0 to HW filter on device eth25 [ 71.304812][ T4728] Bluetooth: hci2: command tx timeout [ 71.714947][ T4898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.104862][ T4728] Bluetooth: hci4: command tx timeout [ 72.286456][ T7995] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.289403][ T7995] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.408961][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1098'. [ 72.417846][ T8834] team0: Port device team_slave_0 removed [ 72.745673][ T7995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.042855][ T8868] loop9: detected capacity change from 0 to 256 [ 73.147012][ T8873] Injecting memory failure for pfn 0x16010a at process virtual address 0x2050a000 [ 73.161955][ T8873] Memory failure: 0x16010a: Sending SIGBUS to syz.9.1116:8873 due to hardware memory corruption [ 73.162016][ T8873] Memory failure: 0x16010a: recovery action for dirty LRU page: Recovered [ 73.385313][ T4728] Bluetooth: hci2: command tx timeout [ 73.386632][ T895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.408173][ T8891] loop9: detected capacity change from 0 to 512 [ 73.411501][ T8891] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.1124: corrupted in-inode xattr: bad e_name length [ 73.414297][ T8891] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.414637][ T8891] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1124: couldn't read orphan inode 15 (err -117) [ 73.416573][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 73.416591][ C1] EXT4-fs (loop9): initial error at time 73: ext4_iget_extra_inode:5180: inode 15 [ 73.416607][ C1] EXT4-fs (loop9): last error at time 73: ext4_iget_extra_inode:5180: inode 15 [ 73.423443][ T8891] loop9: lost filesystem error report for type 5 error -117 [ 73.424894][ T8891] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.436534][ T8891] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1124: bg 0: block 465: padding at end of block bitmap is not set [ 73.437925][ T8891] EXT4-fs (loop9): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 73.437941][ T8891] EXT4-fs (loop9): This should not happen!! Data will be lost [ 73.437941][ T8891] [ 73.437949][ T8891] EXT4-fs (loop9): Total free blocks count 0 [ 73.437957][ T8891] EXT4-fs (loop9): Free/Dirty block details [ 73.437969][ T8891] EXT4-fs (loop9): free_blocks=0 [ 73.437980][ T8891] EXT4-fs (loop9): dirty_blocks=6 [ 73.437986][ T8891] EXT4-fs (loop9): Block reservation details [ 73.437993][ T8891] EXT4-fs (loop9): i_reserved_data_blocks=6 [ 73.448773][ T6233] EXT4-fs (loop9): Delayed block allocation failed for inode 13 at logical offset 4 with max blocks 4 with error 28 [ 73.449769][ T7745] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 73.659730][ T8902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.659892][ T8902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.660014][ T8902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.717993][ T8905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.718192][ T8905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.737404][ T8907] loop9: detected capacity change from 0 to 1024 [ 73.743381][ T8907] EXT4-fs: Ignoring removed orlov option [ 73.743439][ T8907] EXT4-fs: Ignoring removed orlov option [ 73.756788][ T8907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.779537][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.184840][ T4728] Bluetooth: hci4: command tx timeout [ 74.762492][ T8954] loop9: detected capacity change from 0 to 512 [ 74.787847][ T8954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.794986][ T8954] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.1136: corrupted xattr block 6: invalid header [ 74.798948][ T8954] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.1136: corrupted xattr block 6: invalid header [ 74.801719][ T8954] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.1136: corrupted xattr block 6: invalid header [ 74.804553][ T8954] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.1136: corrupted xattr block 6: invalid header [ 74.810304][ T8954] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.1136: corrupted xattr block 6: invalid header [ 74.812603][ T8954] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null. [ 74.812675][ T8954] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.1136: corrupted xattr block 6: invalid header [ 74.820157][ T8954] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.1136: corrupted xattr block 6: invalid header [ 74.833687][ T7745] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2972: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 74.833734][ T7745] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 74.836663][ T7745] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 74.836811][ T7745] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 74.842226][ T7745] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 74.845559][ T7745] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.847417][ T7745] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 74.852129][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.011297][ T8977] syzkaller1: entered promiscuous mode [ 75.012431][ T8977] syzkaller1: entered allmulticast mode [ 75.152563][ T8983] loop9: detected capacity change from 0 to 512 [ 75.166436][ T8983] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.177644][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.360392][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1152'. [ 75.387328][ T4821] net_ratelimit: 2 callbacks suppressed [ 75.387364][ T4821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.465621][ T4728] Bluetooth: hci2: command tx timeout [ 75.518798][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.522359][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.589048][ T9010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.589195][ T9010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.589353][ T9010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.590495][ T9010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.590568][ T9010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.590671][ T9010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.591763][ T9009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.613111][ T9012] Bluetooth: MGMT ver 1.23 [ 75.653802][ T4806] IPVS: starting estimator thread 0... [ 75.655359][ T9016] tipc: Started in network mode [ 75.656278][ T9016] tipc: Node identity ac1414aa, cluster identity 4711 [ 75.658052][ T9016] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 75.659685][ T9016] tipc: Enabled bearer , priority 10 [ 75.754807][ T9017] IPVS: using max 60 ests per chain, 144000 per kthread [ 75.795801][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 76.147235][ T9031] Bluetooth: hci0: load_link_keys: too big key_count value 16128 [ 76.627315][ T1410] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 76.701638][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1181'. [ 76.776047][ T4806] tipc: Node number set to 2886997162 [ 76.854005][ T9074] loop9: detected capacity change from 0 to 1024 [ 76.854367][ T9074] EXT4-fs: inline encryption not supported [ 76.866854][ T9074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.882917][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.010567][ T9086] loop9: detected capacity change from 0 to 512 [ 77.011987][ T9086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 77.012045][ T9086] System zones: 1-12 [ 77.012614][ T9086] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.1191: missing EA_INODE flag [ 77.012629][ T9086] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 77.014043][ T9086] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.1191: error while reading EA inode 12 err=-117 [ 77.014062][ T9086] loop9: lost filesystem error report for type 5 error -117 [ 77.014202][ T9086] EXT4-fs (loop9): 1 orphan inode deleted [ 77.016242][ T9086] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.041389][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.272787][ T4834] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 77.273329][ T4834] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.552908][ T4720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.554493][ T4720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.556216][ T4715] Bluetooth: hci2: command tx timeout [ 77.556452][ T4720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.557243][ T4720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.557466][ T4720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.711258][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.711346][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.711441][ T9110] bridge_slave_0: entered allmulticast mode [ 77.711905][ T9110] bridge_slave_0: entered promiscuous mode [ 77.713344][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.713396][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.713459][ T9110] bridge_slave_1: entered allmulticast mode [ 77.713886][ T9110] bridge_slave_1: entered promiscuous mode [ 77.723792][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.728419][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.744179][ T9110] team0: Port device team_slave_0 added [ 77.748154][ T9110] team0: Port device team_slave_1 added [ 77.763844][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.768560][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.774250][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.781229][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.781261][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.781284][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.804708][ T9110] hsr_slave_0: entered promiscuous mode [ 77.806642][ T9110] hsr_slave_1: entered promiscuous mode [ 77.807917][ T9110] debugfs: 'hsr0' already exists in 'hsr' [ 77.808951][ T9110] Cannot create hsr debugfs directory [ 77.820551][ T9137] netlink: 16198 bytes leftover after parsing attributes in process `syz.9.1205'. [ 79.162864][ T9184] loop9: detected capacity change from 0 to 1024 [ 79.190259][ T9184] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.208844][ T7745] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /197/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 79.209388][ T7745] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /197/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 79.209643][ T7745] EXT4-fs error (device loop9): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 79.211364][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.211493][ T7745] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /197/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 79.211673][ T7745] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /197/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 79.211879][ T7745] EXT4-fs error (device loop9): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 79.212017][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.212112][ T7745] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /197/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 79.212268][ T7745] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /197/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 79.212451][ T7745] EXT4-fs error (device loop9): empty_inline_dir:1778: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 79.212593][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.212695][ T7745] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /197/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 79.213099][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.213612][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.214104][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.214951][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.215463][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.215988][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.216492][ T7745] EXT4-fs warning (device loop9): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.540373][ T7745] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.591377][ T40] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.624906][ T4720] Bluetooth: hci5: command tx timeout [ 79.633508][ T4728] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.634437][ T4728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.634725][ T4728] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.640202][ T4728] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.640464][ T4728] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.674325][ T40] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.739742][ T40] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.824147][ T40] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.829722][ T9212] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.829906][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.830023][ T9212] bridge_slave_0: entered allmulticast mode [ 79.830831][ T9212] bridge_slave_0: entered promiscuous mode [ 79.833694][ T9212] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.833755][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.833841][ T9212] bridge_slave_1: entered allmulticast mode [ 79.834302][ T9212] bridge_slave_1: entered promiscuous mode [ 79.842193][ T9212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.843245][ T9212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.850930][ T9212] team0: Port device team_slave_0 added [ 79.851786][ T9212] team0: Port device team_slave_1 added [ 79.858637][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.858666][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.858684][ T9212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.859220][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.859228][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.859242][ T9212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.872455][ T9212] hsr_slave_0: entered promiscuous mode [ 79.872794][ T9212] hsr_slave_1: entered promiscuous mode [ 79.873023][ T9212] debugfs: 'hsr0' already exists in 'hsr' [ 79.873035][ T9212] Cannot create hsr debugfs directory [ 79.955712][ T40] bridge_slave_1: left allmulticast mode [ 79.955778][ T40] bridge_slave_1: left promiscuous mode [ 79.955867][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.956985][ T40] bridge_slave_0: left allmulticast mode [ 79.957001][ T40] bridge_slave_0: left promiscuous mode [ 79.957064][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.031672][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.037341][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.040067][ T40] bond0 (unregistering): Released all slaves [ 80.071897][ T40] tipc: Disabling bearer [ 80.072952][ T40] tipc: Left network mode [ 80.331260][ T40] hsr_slave_0: left promiscuous mode [ 80.332378][ T40] hsr_slave_1: left promiscuous mode [ 80.332854][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.332865][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.348071][ T40] veth1_macvtap: left promiscuous mode [ 80.348112][ T40] veth0_macvtap: left promiscuous mode [ 80.348179][ T40] veth1_vlan: left promiscuous mode [ 80.348231][ T40] veth0_vlan: left promiscuous mode [ 80.452984][ T40] team0 (unregistering): Port device team_slave_1 removed [ 80.716474][ T40] IPVS: stop unused estimator thread 0... [ 81.159279][ T4399] 8021q: adding VLAN 0 to HW filter on device eth28 [ 81.279807][ T4399] 8021q: adding VLAN 0 to HW filter on device eth30 [ 81.391977][ T4399] 8021q: adding VLAN 0 to HW filter on device eth29 [ 81.500709][ T4399] 8021q: adding VLAN 0 to HW filter on device eth31 [ 81.704866][ T4728] Bluetooth: hci1: command tx timeout [ 81.705585][ T4720] Bluetooth: hci5: command tx timeout [ 83.784857][ T4720] Bluetooth: hci1: command tx timeout [ 83.784866][ T4728] Bluetooth: hci5: command tx timeout [ 85.864833][ T4728] Bluetooth: hci5: command tx timeout [ 85.864875][ T4728] Bluetooth: hci1: command tx timeout [ 87.944799][ T4720] Bluetooth: hci1: command tx timeout [ 121.441919][ T4728] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.442763][ T4728] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.443304][ T4728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.443631][ T4728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.443845][ T4728] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 121.578023][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.578109][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.578171][ T9560] bridge_slave_0: entered allmulticast mode [ 121.578615][ T9560] bridge_slave_0: entered promiscuous mode [ 121.579784][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.579834][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.579892][ T9560] bridge_slave_1: entered allmulticast mode [ 121.580328][ T9560] bridge_slave_1: entered promiscuous mode [ 121.587851][ T9560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.588773][ T9560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.594978][ T9560] team0: Port device team_slave_0 added [ 121.595777][ T9560] team0: Port device team_slave_1 added [ 121.601826][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.602129][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.602150][ T9560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.602784][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.602791][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.602806][ T9560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.612723][ T9560] hsr_slave_0: entered promiscuous mode [ 121.613018][ T9560] hsr_slave_1: entered promiscuous mode [ 123.464801][ T4728] Bluetooth: hci6: command tx timeout [ 125.544826][ T4728] Bluetooth: hci6: command tx timeout [ 125.943390][ T4720] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 125.944163][ T4720] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 125.944465][ T4720] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 125.945703][ T4720] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 125.945977][ T4720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.947279][ T1599] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.947306][ T1599] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.093978][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.094060][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.094127][ T9578] bridge_slave_0: entered allmulticast mode [ 126.094573][ T9578] bridge_slave_0: entered promiscuous mode [ 126.095304][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.095326][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.095384][ T9578] bridge_slave_1: entered allmulticast mode [ 126.095813][ T9578] bridge_slave_1: entered promiscuous mode [ 126.102521][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.103450][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.111861][ T9578] team0: Port device team_slave_0 added [ 126.112655][ T9578] team0: Port device team_slave_1 added [ 126.118338][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.118359][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.118374][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.118903][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.118909][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.118924][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.128766][ T9578] hsr_slave_0: entered promiscuous mode [ 126.129081][ T9578] hsr_slave_1: entered promiscuous mode [ 126.129314][ T9578] debugfs: 'hsr0' already exists in 'hsr' [ 126.129325][ T9578] Cannot create hsr debugfs directory [ 127.624812][ T4728] Bluetooth: hci6: command tx timeout [ 128.025107][ T4728] Bluetooth: hci7: command tx timeout [ 129.448874][ T4720] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 129.449676][ T4720] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 129.449992][ T4720] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 129.450309][ T4720] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 129.450565][ T4720] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 129.581890][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.581990][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.582065][ T9596] bridge_slave_0: entered allmulticast mode [ 129.582522][ T9596] bridge_slave_0: entered promiscuous mode [ 129.583790][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.583838][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.583900][ T9596] bridge_slave_1: entered allmulticast mode [ 129.584342][ T9596] bridge_slave_1: entered promiscuous mode [ 129.592544][ T9596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.593594][ T9596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.600837][ T9596] team0: Port device team_slave_0 added [ 129.601650][ T9596] team0: Port device team_slave_1 added [ 129.607670][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.607690][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.607702][ T9596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.608238][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.608244][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.608260][ T9596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.618938][ T9596] hsr_slave_0: entered promiscuous mode [ 129.619269][ T9596] hsr_slave_1: entered promiscuous mode [ 129.619467][ T9596] debugfs: 'hsr0' already exists in 'hsr' [ 129.619478][ T9596] Cannot create hsr debugfs directory [ 129.704816][ T4728] Bluetooth: hci6: command tx timeout [ 130.104803][ T4728] Bluetooth: hci7: command tx timeout [ 131.465595][ T4728] Bluetooth: hci8: command tx timeout [ 132.194803][ T4728] Bluetooth: hci7: command tx timeout [ 133.544792][ T4728] Bluetooth: hci8: command tx timeout [ 134.264787][ T4728] Bluetooth: hci7: command tx timeout [ 135.634792][ T4728] Bluetooth: hci8: command tx timeout [ 137.704788][ T4728] Bluetooth: hci8: command tx timeout [ 137.952583][ T4720] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 137.954518][ T4720] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 137.956528][ T4720] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 137.958609][ T4720] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 137.960620][ T4720] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 138.103766][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.103860][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.104291][ T9620] bridge_slave_0: entered allmulticast mode [ 138.105165][ T9620] bridge_slave_0: entered promiscuous mode [ 138.106306][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.106359][ T9620] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.106460][ T9620] bridge_slave_1: entered allmulticast mode [ 138.106893][ T9620] bridge_slave_1: entered promiscuous mode [ 138.114676][ T9620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.116276][ T9620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.122555][ T9620] team0: Port device team_slave_0 added [ 138.123756][ T9620] team0: Port device team_slave_1 added [ 138.130422][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.130442][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.130458][ T9620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.131028][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.131036][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.131051][ T9620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.141931][ T9620] hsr_slave_0: entered promiscuous mode [ 138.142253][ T9620] hsr_slave_1: entered promiscuous mode [ 138.142458][ T9620] debugfs: 'hsr0' already exists in 'hsr' [ 138.142470][ T9620] Cannot create hsr debugfs directory [ 139.957191][ T4720] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 139.958906][ T4720] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 139.959592][ T4720] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 139.959950][ T4720] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 139.960198][ T4720] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 140.025108][ T4720] Bluetooth: hci9: command tx timeout [ 140.091949][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.092034][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.092147][ T9639] bridge_slave_0: entered allmulticast mode [ 140.092625][ T9639] bridge_slave_0: entered promiscuous mode [ 140.093818][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.093837][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.093900][ T9639] bridge_slave_1: entered allmulticast mode [ 140.094315][ T9639] bridge_slave_1: entered promiscuous mode [ 140.102073][ T9639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.103530][ T9639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.110897][ T9639] team0: Port device team_slave_0 added [ 140.111744][ T9639] team0: Port device team_slave_1 added [ 140.118060][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.118080][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.118097][ T9639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.118689][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.118695][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.118706][ T9639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.130222][ T9639] hsr_slave_0: entered promiscuous mode [ 140.130581][ T9639] hsr_slave_1: entered promiscuous mode [ 140.130791][ T9639] debugfs: 'hsr0' already exists in 'hsr' [ 140.130803][ T9639] Cannot create hsr debugfs directory [ 142.024825][ T4720] Bluetooth: hci10: command tx timeout [ 142.104883][ T4720] Bluetooth: hci9: command tx timeout [ 144.104854][ T4720] Bluetooth: hci10: command tx timeout [ 144.184817][ T4720] Bluetooth: hci9: command tx timeout [ 146.184789][ T4720] Bluetooth: hci10: command tx timeout [ 146.264842][ T4720] Bluetooth: hci9: command tx timeout [ 148.264780][ T4720] Bluetooth: hci10: command tx timeout [ 181.526430][ T4728] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 181.528717][ T4728] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 181.530363][ T4728] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 181.531212][ T4728] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 181.531426][ T4728] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 181.664174][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.664265][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.664340][ T9658] bridge_slave_0: entered allmulticast mode [ 181.665455][ T9658] bridge_slave_0: entered promiscuous mode [ 181.666996][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.667083][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.667152][ T9658] bridge_slave_1: entered allmulticast mode [ 181.667663][ T9658] bridge_slave_1: entered promiscuous mode [ 181.676881][ T9658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.678350][ T9658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.684560][ T9658] team0: Port device team_slave_0 added [ 181.685486][ T9658] team0: Port device team_slave_1 added [ 181.691406][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.691427][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.691444][ T9658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.692028][ T9658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.692035][ T9658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.692047][ T9658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.702450][ T9658] hsr_slave_0: entered promiscuous mode [ 181.702817][ T9658] hsr_slave_1: entered promiscuous mode [ 181.703039][ T9658] debugfs: 'hsr0' already exists in 'hsr' [ 181.703050][ T9658] Cannot create hsr debugfs directory [ 183.544792][ T4720] Bluetooth: hci11: command tx timeout [ 184.344810][ T4720] Bluetooth: hci3: command 0x0406 tx timeout [ 185.624783][ T4728] Bluetooth: hci11: command tx timeout [ 186.511554][ T4720] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 186.513787][ T4720] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 186.514508][ T4720] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 186.515298][ T4720] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 186.515529][ T4720] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 186.646643][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.646687][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.646813][ T9677] bridge_slave_0: entered allmulticast mode [ 186.647279][ T9677] bridge_slave_0: entered promiscuous mode [ 186.648562][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.648622][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.648694][ T9677] bridge_slave_1: entered allmulticast mode [ 186.649138][ T9677] bridge_slave_1: entered promiscuous mode [ 186.656693][ T9677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.657785][ T9677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.664375][ T9677] team0: Port device team_slave_0 added [ 186.665836][ T9677] team0: Port device team_slave_1 added [ 186.671832][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.672080][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.672102][ T9677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.672687][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.672695][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.672712][ T9677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.683452][ T9677] hsr_slave_0: entered promiscuous mode [ 186.683976][ T9677] hsr_slave_1: entered promiscuous mode [ 186.684183][ T9677] debugfs: 'hsr0' already exists in 'hsr' [ 186.684194][ T9677] Cannot create hsr debugfs directory [ 187.386255][ T1599] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.386304][ T1599] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.714817][ T4720] Bluetooth: hci11: command tx timeout [ 188.584886][ T4720] Bluetooth: hci12: command tx timeout [ 189.464816][ T4719] Bluetooth: hci0: command 0x0406 tx timeout [ 189.464900][ T4720] Bluetooth: hci4: command 0x0406 tx timeout [ 189.512070][ T4719] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 189.512790][ T4719] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 189.513118][ T4719] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 189.513467][ T4719] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 189.513698][ T4719] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 189.644440][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.644533][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.644623][ T9694] bridge_slave_0: entered allmulticast mode [ 189.645141][ T9694] bridge_slave_0: entered promiscuous mode [ 189.646425][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.646481][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.646573][ T9694] bridge_slave_1: entered allmulticast mode [ 189.647041][ T9694] bridge_slave_1: entered promiscuous mode [ 189.655563][ T9694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.656803][ T9694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.663280][ T9694] team0: Port device team_slave_0 added [ 189.664507][ T9694] team0: Port device team_slave_1 added [ 189.671476][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.671496][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.671511][ T9694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.672081][ T9694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.672088][ T9694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.672104][ T9694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.682757][ T9694] hsr_slave_0: entered promiscuous mode [ 189.683097][ T9694] hsr_slave_1: entered promiscuous mode [ 189.683322][ T9694] debugfs: 'hsr0' already exists in 'hsr' [ 189.683333][ T9694] Cannot create hsr debugfs directory [ 189.784821][ T4728] Bluetooth: hci11: command tx timeout [ 190.664818][ T4728] Bluetooth: hci12: command tx timeout [ 191.544829][ T4728] Bluetooth: hci13: command tx timeout [ 192.754820][ T4715] Bluetooth: hci12: command tx timeout [ 193.634778][ T4715] Bluetooth: hci13: command tx timeout [ 194.585102][ T4715] Bluetooth: hci2: command 0x0406 tx timeout [ 194.824838][ T4728] Bluetooth: hci12: command tx timeout [ 195.704791][ T4728] Bluetooth: hci13: command tx timeout [ 197.794871][ T4728] Bluetooth: hci13: command tx timeout [ 198.021513][ T4719] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 198.022223][ T4719] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 198.022529][ T4719] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 198.022860][ T4719] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 198.023068][ T4719] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 198.160014][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.160097][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.160184][ T9716] bridge_slave_0: entered allmulticast mode [ 198.160653][ T9716] bridge_slave_0: entered promiscuous mode [ 198.161832][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.161889][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.161976][ T9716] bridge_slave_1: entered allmulticast mode [ 198.162439][ T9716] bridge_slave_1: entered promiscuous mode [ 198.170070][ T9716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.171168][ T9716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.178215][ T9716] team0: Port device team_slave_0 added [ 198.179069][ T9716] team0: Port device team_slave_1 added [ 198.185366][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.185390][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.185413][ T9716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.186004][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.186011][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.186027][ T9716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.196631][ T9716] hsr_slave_0: entered promiscuous mode [ 198.196979][ T9716] hsr_slave_1: entered promiscuous mode [ 198.197201][ T9716] debugfs: 'hsr0' already exists in 'hsr' [ 198.197212][ T9716] Cannot create hsr debugfs directory [ 199.704917][ T4719] Bluetooth: hci5: command 0x0406 tx timeout [ 200.023105][ T4719] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 200.024229][ T4719] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 200.024582][ T4719] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 200.025829][ T4719] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 200.025988][ T4719] Bluetooth: hci14: command tx timeout [ 200.026731][ T4719] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 200.161839][ T9735] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.161913][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.162044][ T9735] bridge_slave_0: entered allmulticast mode [ 200.162538][ T9735] bridge_slave_0: entered promiscuous mode [ 200.163396][ T9735] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.163419][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.163496][ T9735] bridge_slave_1: entered allmulticast mode [ 200.163963][ T9735] bridge_slave_1: entered promiscuous mode [ 200.172430][ T9735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.173617][ T9735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.182231][ T9735] team0: Port device team_slave_0 added [ 200.183140][ T9735] team0: Port device team_slave_1 added [ 200.190361][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.190383][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.190399][ T9735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.191028][ T9735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.191035][ T9735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.191049][ T9735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.202405][ T9735] hsr_slave_0: entered promiscuous mode [ 200.202786][ T9735] hsr_slave_1: entered promiscuous mode [ 200.203068][ T9735] debugfs: 'hsr0' already exists in 'hsr' [ 200.203079][ T9735] Cannot create hsr debugfs directory [ 202.105031][ T4719] Bluetooth: hci14: command tx timeout [ 202.105547][ T4715] Bluetooth: hci15: command tx timeout [ 204.184819][ T4715] Bluetooth: hci15: command tx timeout [ 204.184856][ T4715] Bluetooth: hci14: command tx timeout [ 204.824799][ T4728] Bluetooth: hci1: command 0x0406 tx timeout [ 206.264815][ T4728] Bluetooth: hci15: command tx timeout [ 206.265387][ T4719] Bluetooth: hci14: command tx timeout [ 208.354816][ T4719] Bluetooth: hci15: command tx timeout [ 213.625412][ T31] INFO: task syz-executor:7850 blocked for more than 143 seconds. [ 213.625443][ T31] Not tainted syzkaller #0 [ 213.625460][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.625469][ T31] task:syz-executor state:D stack:0 pid:7850 tgid:7850 ppid:1 task_fla ** replaying previous printk message ** [ 213.625469][ T31] task:syz-executor state:D stack:0 pid:7850 tgid:7850 ppid:1 task_flags:0x480140 flags:0x00800011 [ 213.625492][ T31] Call trace: [ 213.625499][ T31] __switch_to+0x2b0/0x6e0 (T) [ 213.625519][ T31] __schedule+0x1370/0x2d80 [ 213.625536][ T31] schedule+0x13c/0x20c [ 213.625550][ T31] schedule_timeout+0xc0/0x28c [ 213.625566][ T31] wait_for_common+0x220/0x394 [ 213.625581][ T31] wait_for_completion+0x18/0x24 [ 213.625594][ T31] remove_one+0x28c/0x380 [ 213.625609][ T31] __simple_recursive_removal+0x1a8/0x430 [ 213.625624][ T31] simple_recursive_removal+0x2c/0x3c [ 213.625638][ T31] debugfs_remove+0x60/0x88 [ 213.625651][ T31] nsim_dev_debugfs_exit+0x80/0x90 [ 213.625665][ T31] nsim_drv_remove+0x6c/0x114 [ 213.625678][ T31] nsim_bus_remove+0x20/0x30 [ 213.625691][ T31] device_remove+0xc4/0x134 [ 213.625705][ T31] device_release_driver_internal+0x124/0x20c [ 213.625719][ T31] device_release_driver+0x28/0x38 [ 213.625733][ T31] bus_remove_device+0x2d0/0x400 [ 213.625746][ T31] device_del+0x3ec/0x71c [ 213.625757][ T31] device_unregister+0x2c/0xf0 [ 213.625768][ T31] nsim_bus_dev_del+0x60/0x8c [ 213.625782][ T31] del_device_store+0x24c/0x2d4 [ 213.625795][ T31] bus_attr_store+0x80/0xa4 [ 213.625808][ T31] sysfs_kf_write+0xe0/0x108 [ 213.625822][ T31] kernfs_fop_write_iter+0x260/0x3b8 [ 213.625835][ T31] vfs_write+0x51c/0xa0c SYZFAIL: failed to recv rpc [ 213.625847][ T31] ksys_write+0x12c/0x228 [ 213.625857][ T31] __arm64_sys_write+0x84/0x98 [ 213.625868][ T31] invoke_syscall+0x98/0x244 [ 213.625884][ T31] el0_svc_common+0xec/0x23c [ 213.625897][ T31] do_el0_svc+0x4c/0x5c fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 213.625911][ T31] el0_svc+0x64/0x260 [ 213.625925][ T31] el0t_64_sync_handler+0x48/0x148 [ 213.625939][ T31] el0t_64_sync+0x198/0x19c [ 213.625955][ T31] INFO: task syz.8.959:7953 blocked for more than 143 seconds. [ 213.625964][ T31] Not tainted syzkaller #0 [ 213.625972][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.625979][ T31] task:syz.8.959 state:D stack:0 pid:7953 tgid:7952 ppid:7647 task_flags:0x400140 flags:0x04000001 [ 213.625999][ T31] Call trace: [ 213.626005][ T31] __switch_to+0x2b0/0x6e0 (T) [ 213.626018][ T31] __schedule+0x1370/0x2d80 [ 213.626030][ T31] schedule+0x13c/0x20c [ 213.626042][ T31] schedule_preempt_disabled+0x18/0x2c [ 213.626055][ T31] __mutex_lock+0x4ec/0xf14 [ 213.626068][ T31] mutex_lock_nested+0x24/0x30 [ 213.626081][ T31] devl_lock+0x24/0x34 [ 213.626096][ T31] nsim_bus_dev_max_vfs_write+0x304/0x4ac [ 213.626109][ T31] full_proxy_write+0x11c/0x160 [ 213.626123][ T31] vfs_write+0x2a4/0xa0c [ 213.626134][ T31] ksys_write+0x12c/0x228 [ 213.626145][ T31] __arm64_sys_write+0x84/0x98 [ 213.626156][ T31] invoke_syscall+0x98/0x244 [ 213.626169][ T31] el0_svc_common+0xec/0x23c [ 213.626183][ T31] do_el0_svc+0x4c/0x5c [ 213.626197][ T31] el0_svc+0x64/0x260 [ 213.626210][ T31] el0t_64_sync_handler+0x48/0x148 [ 213.626224][ T31] el0t_64_sync+0x198/0x19c [ 213.626240][ T31] INFO: task syz-executor:8238 blocked for more than 143 seconds. [ 213.626249][ T31] Not tainted syzkaller #0 [ 213.626257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.626264][ T31] task:syz-executor state:D stack:0 pid:8238 tgid:8238 ppid:1 task_flags:0x400140 flags:0x00800001 [ 213.626282][ T31] Call trace: [ 213.626288][ T31] __switch_to+0x2b0/0x6e0 (T) [ 213.626301][ T31] __schedule+0x1370/0x2d80 [ 213.626314][ T31] schedule+0x13c/0x20c [ 213.626326][ T31] schedule_preempt_disabled+0x18/0x2c [ 213.626339][ T31] __mutex_lock+0x4ec/0xf14 [ 213.626351][ T31] mutex_lock_nested+0x24/0x30 [ 213.626364][ T31] del_device_store+0xd8/0x2d4 [ 213.626378][ T31] bus_attr_store+0x80/0xa4 [ 213.626391][ T31] sysfs_kf_write+0xe0/0x108 [ 213.626404][ T31] kernfs_fop_write_iter+0x260/0x3b8 [ 213.626417][ T31] vfs_write+0x51c/0xa0c [ 213.626428][ T31] ksys_write+0x12c/0x228 [ 213.626439][ T31] __arm64_sys_write+0x84/0x98 [ 213.626449][ T31] invoke_syscall+0x98/0x244 [ 213.626463][ T31] el0_svc_common+0xec/0x23c [ 213.626477][ T31] do_el0_svc+0x4c/0x5c [ 213.626491][ T31] el0_svc+0x64/0x260 [ 213.626504][ T31] el0t_64_sync_handler+0x48/0x148 [ 213.626518][ T31] el0t_64_sync+0x198/0x19c [ 213.626538][ T31] INFO: task syz-executor:8566 blocked for more than 143 seconds. [ 213.626547][ T31] Not tainted syzkaller #0 [ 213.626555][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.626562][ T31] task:syz-executor state:D stack:0 pid:8566 tgid:8566 ppid:1 task_flags:0x400140 flags:0x00800001 [ 213.626580][ T31] Call trace: [ 213.626586][ T31] __switch_to+0x2b0/0x6e0 (T) [ 213.626599][ T31] __schedule+0x1370/0x2d80 [ 213.626611][ T31] schedule+0x13c/0x20c [ 213.626623][ T31] schedule_preempt_disabled+0x18/0x2c [ 213.626636][ T31] __mutex_lock+0x4ec/0xf14 [ 213.626649][ T31] mutex_lock_nested+0x24/0x30 [ 213.626662][ T31] del_device_store+0xd8/0x2d4 [ 213.626675][ T31] bus_attr_store+0x80/0xa4 [ 213.626688][ T31] sysfs_kf_write+0xe0/0x108 [ 213.626701][ T31] kernfs_fop_write_iter+0x260/0x3b8 [ 213.626714][ T31] vfs_write+0x51c/0xa0c [ 213.626725][ T31] ksys_write+0x12c/0x228 [ 213.626735][ T31] __arm64_sys_write+0x84/0x98 [ 213.626746][ T31] invoke_syscall+0x98/0x244 [ 213.626760][ T31] el0_svc_common+0xec/0x23c [ 213.626774][ T31] do_el0_svc+0x4c/0x5c [ 213.626787][ T31] el0_svc+0x64/0x260 [ 213.626801][ T31] el0t_64_sync_handler+0x48/0x148 [ 213.626815][ T31] el0t_64_sync+0x198/0x19c [ 213.626867][ T31] [ 213.626867][ T31] Showing all locks held in the system: [ 213.626877][ T31] 1 lock held by khungtaskd/31: [ 213.626885][ T31] #0: ffff800088cf7020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 213.626947][ T31] 2 locks held by getty/4493: [ 213.626956][ T31] #0: ffff0000d10f30a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 213.627000][ T31] #1: ffff8000924ae2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 213.627048][ T31] 3 locks held by kworker/u8:10/6230: [ 213.627058][ T31] 7 locks held by syz-executor/7850: [ 213.627066][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.627111][ T31] #1: ffff0000f1e93880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.627155][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.630789][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.630821][ T31] #4: ffff0000f11b6128 (&dev->mutex){....}-{4:4}, at: __device_driver_lock+0x90/0xc8 [ 213.630846][ T31] #5: ffff0000f11b5258 (&devlink->lock_key){+.+.}-{4:4}, at: devl_lock+0x24/0x34 [ 213.630870][ T31] #6: ffff0000d1cc5950 (&sb->s_type->i_mutex_key#17/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x150/0x430 [ 213.630900][ T31] 3 locks held by syz.8.959/7953: [ 213.630906][ T31] #0: ffff0000d2977cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x100/0x144 [ 213.630926][ T31] #1: ffff0000c1dce450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.630948][ T31] #2: ffff0000f11b5258 (&devlink->lock_key){+.+.}-{4:4}, at: devl_lock+0x24/0x34 [ 213.630972][ T31] 4 locks held by syz-executor/8238: [ 213.630977][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.630999][ T31] #1: ffff0000d9960480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.631020][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.631044][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.631069][ T31] 4 locks held by syz-executor/8566: [ 213.631074][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.631095][ T31] #1: ffff0000f24f1080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.631116][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.631329][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.631359][ T31] 4 locks held by syz-executor/9110: [ 213.631364][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.631386][ T31] #1: ffff0001085d4080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.631407][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.631430][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.631453][ T31] 4 locks held by syz-executor/9212: [ 213.631458][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.631479][ T31] #1: ffff0000f3e17480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.631501][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.631524][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.631553][ T31] 4 locks held by syz-executor/9560: [ 213.631558][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.631580][ T31] #1: ffff0000f19e3080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.631601][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.631625][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.631648][ T31] 4 locks held by syz-executor/9578: [ 213.631653][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.631674][ T31] #1: ffff0000d2b64c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.631695][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.631719][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.631742][ T31] 4 locks held by syz-executor/9596: [ 213.631747][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.631768][ T31] #1: ffff0000d2fabc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.631789][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.631813][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.631837][ T31] 4 locks held by syz-executor/9620: [ 213.631841][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.631863][ T31] #1: ffff0000ef632080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.631884][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.631907][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.631931][ T31] 4 locks held by syz-executor/9639: [ 213.631935][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.631957][ T31] #1: ffff0000d9ccb480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.631978][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.632001][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.632025][ T31] 4 locks held by syz-executor/9658: [ 213.632029][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.632051][ T31] #1: ffff0000f0d5dc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.632072][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.632095][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.632119][ T31] 4 locks held by syz-executor/9677: [ 213.632124][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.632145][ T31] #1: ffff0000c71aa080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.632166][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.632190][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.632213][ T31] 4 locks held by syz-executor/9694: [ 213.632218][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.632239][ T31] #1: ffff0000f264dc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.632260][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.632284][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.632308][ T31] 4 locks held by syz-executor/9716: [ 213.632312][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.632334][ T31] #1: ffff0000d9f5b080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.632355][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.632378][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.632402][ T31] 4 locks held by syz-executor/9735: [ 213.632407][ T31] #0: ffff0000c4ba0450 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x248/0xa0c [ 213.632428][ T31] #1: ffff0000f17a9080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b0/0x3b8 [ 213.632449][ T31] #2: ffff0000c9ea7c38 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f0/0x3b8 [ 213.632473][ T31] #3: ffff8000895c4120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd8/0x2d4 [ 213.632498][ T31] [ 213.632501][ T31] ============================================= [ 213.632501][ T31] [ 213.632506][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 213.855201][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 213.856675][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 213.858484][ T31] Call trace: [ 213.859078][ T31] show_stack+0x2c/0x3c (C) [ 213.859906][ T31] __dump_stack+0x30/0x40 [ 213.860708][ T31] dump_stack_lvl+0x30/0x12c [ 213.861496][ T31] dump_stack+0x1c/0x28 [ 213.862246][ T31] vpanic+0x594/0xaf8 [ 213.862960][ T31] vpanic+0x0/0xaf8 [ 213.863661][ T31] hung_task_panic+0x0/0x2c [ 213.864508][ T31] kthread+0x304/0x3d4 [ 213.865225][ T31] ret_from_fork+0x10/0x20 [ 213.865991][ T31] SMP: stopping secondary CPUs [ 213.866830][ T31] Kernel Offset: disabled [ 213.867588][ T31] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 213.868799][ T31] Memory Limit: none [ 214.245464][ T31] Rebooting in 86400 seconds..