last executing test programs: 2m31.884351203s ago: executing program 4 (id=942): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 2m31.817737706s ago: executing program 4 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000003600)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) 2m31.802830679s ago: executing program 4 (id=948): add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 2m31.70746376s ago: executing program 4 (id=953): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a0471a, &(0x7f0000000000)={[{@test_dummy_encryption_v1}]}, 0x11, 0x48f, &(0x7f0000000d00)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc41, 0x3) 2m31.562855091s ago: executing program 4 (id=960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockname$netlink(r1, 0x0, 0x0) 2m31.274536906s ago: executing program 4 (id=981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 2m31.264631346s ago: executing program 32 (id=981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 2m16.755488545s ago: executing program 1 (id=1635): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x10, "369d42072f65c8e67eb8fcfd6852"}]}}}}}}}}, 0x0) 2m16.670889184s ago: executing program 1 (id=1638): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) 2m16.597419513s ago: executing program 1 (id=1642): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) 2m16.519257598s ago: executing program 1 (id=1647): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file3\x00', 0x1010041, &(0x7f0000000000)={[{@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpjquota}]}, 0x1, 0x546, &(0x7f0000000180)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') mount$9p_xen(0x0, &(0x7f0000000100)='./file3\x00', 0x0, 0x32048, 0x0) 2m16.384957568s ago: executing program 1 (id=1654): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000329000/0x4000)=nil, &(0x7f0000013000/0x4000)=nil, 0x4000}) 2m16.07492809s ago: executing program 1 (id=1668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_pipe\x00', 0x800, 0x0) read(r0, &(0x7f0000000300)=""/4096, 0x1000) 2m16.036784117s ago: executing program 33 (id=1668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_pipe\x00', 0x800, 0x0) read(r0, &(0x7f0000000300)=""/4096, 0x1000) 1m22.523492521s ago: executing program 3 (id=2796): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4b6, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) syz_emit_vhci(&(0x7f0000000b80)=ANY=[@ANYBLOB="040e05033b20"], 0x8) 1m21.666225583s ago: executing program 3 (id=2800): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m20.967184247s ago: executing program 3 (id=2807): recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x4e, 0x1, 0x70bd2a, 0x0, {0xa}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x5f) 1m20.52721806s ago: executing program 3 (id=2810): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x95e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}, {@grpid}, {@oldalloc}]}, 0x3, 0x44d, &(0x7f0000000ec0)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m19.542009432s ago: executing program 3 (id=2817): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 1m17.982099391s ago: executing program 3 (id=2826): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00006cb000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000100)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x0) 1m17.074464939s ago: executing program 34 (id=2826): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00006cb000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000100)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x0) 4.023335385s ago: executing program 0 (id=3309): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) fchdir(r0) exit(0x3) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) 3.824869227s ago: executing program 7 (id=3310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000019b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000046cb95a850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.234546785s ago: executing program 5 (id=3314): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 3.199363142s ago: executing program 6 (id=3315): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x1d, 0x1c, "6bf125058e637b44e58c1c72a4c01c47e54a2793c042d4aea496bdbdce2feb94cb576a5d539a0f68412e32c700", "563e7e5b61a321b296a4d887df2f85a1df244fa2aa8ca412c1f9ec49aa05000200842300", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56224563b3", [0x3, 0x355f]}) 3.18920387s ago: executing program 2 (id=3316): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="01303030303030202d", 0x9) 3.184623349s ago: executing program 7 (id=3317): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x13) 2.758171266s ago: executing program 0 (id=3318): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 2.676357562s ago: executing program 2 (id=3319): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) munmap$binder(0x0, 0xffffffff) splice(r0, &(0x7f0000000080)=0xffffffffffffffef, r1, 0x0, 0x808, 0x0) 2.655631277s ago: executing program 5 (id=3320): setresuid(0xee01, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000240)=0xfde9) setreuid(0x0, r1) 2.526523039s ago: executing program 6 (id=3321): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.444721856s ago: executing program 7 (id=3322): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 2.177089038s ago: executing program 0 (id=3323): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000000200)=[@exit_looper, @release, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 2.076177543s ago: executing program 5 (id=3324): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.065183296s ago: executing program 2 (id=3325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a0000010000000000000000") ioctl(r0, 0x8914, &(0x7f0000000300)="76657468303a300000000000000000000100"/32) ioctl(r0, 0x890b, &(0x7f0000000000)="0000000000000000020000000a00000100000000000000000200000000000000000000000000000002000000ffffffff000000000000000005000000000000000000000000000000000000000000000000020000007f00"/106) 1.883288652s ago: executing program 6 (id=3326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000040) 1.811525228s ago: executing program 7 (id=3327): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="30000000240005050000000000000000000000000200000000000100ffffffff000000000c00010063616b655f6d7100"], 0x30}], 0x1}, 0x0) 1.628175666s ago: executing program 0 (id=3328): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0x2, 0x8, @loopback}, 0x10) 1.48497821s ago: executing program 2 (id=3329): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x36, @local, 0x406}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 1.453887318s ago: executing program 5 (id=3330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x2e, &(0x7f0000002080)=""/4102}, 0x94) 1.295161328s ago: executing program 6 (id=3331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 1.066007584s ago: executing program 0 (id=3332): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="c3b528", 0x3) 961.623194ms ago: executing program 7 (id=3333): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8092) 881.864635ms ago: executing program 2 (id=3334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c0900000800270001000000300051"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 792.739908ms ago: executing program 5 (id=3335): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x7, 0x3, &(0x7f0000000040)='\x00\x00\x00', 0x9, 0x1, 0x4f3, 0x5df, 0x8b, 0x1, 0x9, 'syz0\x00'}) 726.815172ms ago: executing program 6 (id=3336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1, 0xa9, 0x2) 478.466728ms ago: executing program 0 (id=3337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 342.367013ms ago: executing program 7 (id=3338): r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 245.136085ms ago: executing program 2 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) 172.229123ms ago: executing program 5 (id=3340): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=3341): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/174, 0xae}], 0x1) kernel console output (not intermixed with test programs): EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.847728][ T4718] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 43.859442][ T4718] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 43.862732][ T4718] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 43.983230][ T7003] loop1: detected capacity change from 0 to 2048 [ 43.993339][ T7003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.002595][ T7005] tap0: tun_chr_ioctl cmd 1074025677 [ 44.003931][ T7005] tap0: linktype set to 825 [ 44.023398][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.087558][ T7021] loop1: detected capacity change from 0 to 256 [ 44.092256][ T7021] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.102751][ T7021] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.131403][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.258631][ T4710] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.260847][ T4710] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.262679][ T4710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.264279][ T4710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.266046][ T4710] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.309672][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.818364][ T4724] Bluetooth: hci2: command 0x0c1a tx timeout [ 44.842756][ T7072] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 44.842774][ T7072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.847024][ T7072] vhci_hcd vhci_hcd.0: Device attached [ 44.848629][ T4724] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 44.849001][ T7073] vhci_hcd: connection closed [ 44.850437][ T14] vhci_hcd vhci_hcd.3: stop threads [ 44.850569][ T14] vhci_hcd vhci_hcd.3: release socket [ 44.850598][ T14] vhci_hcd vhci_hcd.3: disconnect device [ 45.043374][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.105164][ T7091] netlink: 'syz.0.1001': attribute type 15 has an invalid length. [ 45.147037][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.183314][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.184363][ T7102] loop1: detected capacity change from 0 to 512 [ 45.186981][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.187089][ T7039] bridge_slave_0: entered allmulticast mode [ 45.187571][ T7039] bridge_slave_0: entered promiscuous mode [ 45.188366][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.188407][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.188467][ T7039] bridge_slave_1: entered allmulticast mode [ 45.188895][ T7039] bridge_slave_1: entered promiscuous mode [ 45.200539][ T7102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.207857][ T7102] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1005: inode has both inline data and extents flags [ 45.207891][ T7102] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.208005][ T7102] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1005: couldn't read orphan inode 15 (err -117) [ 45.208018][ T7102] loop1: lost filesystem error report for type 5 error -117 [ 45.208602][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.228906][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.231672][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.270439][ T7039] team0: Port device team_slave_0 added [ 45.271226][ T7039] team0: Port device team_slave_1 added [ 45.310525][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.319481][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.319507][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.319533][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.320165][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.320171][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.320185][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.359234][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.391057][ T7039] hsr_slave_0: entered promiscuous mode [ 45.410138][ T7039] hsr_slave_1: entered promiscuous mode [ 45.410376][ T7039] debugfs: 'hsr0' already exists in 'hsr' [ 45.410387][ T7039] Cannot create hsr debugfs directory [ 45.682159][ T40] bridge_slave_0: left allmulticast mode [ 45.682199][ T40] bridge_slave_0: left promiscuous mode [ 45.682700][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.836444][ T7150] usbcore.quirks: string doesn't fit in 127 chars. [ 46.006841][ T7170] loop0: detected capacity change from 0 to 512 [ 46.015942][ T7170] EXT4-fs: Ignoring removed orlov option [ 46.018631][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.029029][ T7170] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.030337][ T7170] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.032190][ T7170] EXT4-fs (loop0): 1 truncate cleaned up [ 46.032655][ T7170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.040744][ T7170] EXT4-fs (loop0): shut down requested (2) [ 46.050100][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.055706][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.085473][ T7173] loop0: detected capacity change from 0 to 256 [ 46.092020][ T40] bond0 (unregistering): Released all slaves [ 46.115194][ T7039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.130750][ T7039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.131430][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 46.131952][ T7039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.143615][ T7039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.157028][ T7039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.179015][ T7039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.179377][ T7039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.187726][ T7039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.301867][ T7191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.332123][ T4724] Bluetooth: hci3: command tx timeout [ 46.359381][ T7191] __nla_validate_parse: 12 callbacks suppressed [ 46.359414][ T7191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1037'. [ 46.398772][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.403499][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.412382][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.416260][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.416311][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.419471][ T7200] binder: 7198:7200 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 46.419489][ T7200] binder: 7198:7200 ioctl c0306201 200001c0 returned -22 [ 46.427728][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.427769][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.464368][ T7039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.525194][ T7214] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.525312][ T7214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.525319][ T7214] IPv6: NLM_F_CREATE should be set when creating new route [ 46.525332][ T7214] IPv6: NLM_F_CREATE should be set when creating new route [ 46.525341][ T7214] IPv6: NLM_F_CREATE should be set when creating new route [ 46.539816][ T7214] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1042'. [ 46.728057][ T40] hsr_slave_0: left promiscuous mode [ 46.737904][ T40] hsr_slave_1: left promiscuous mode [ 46.738274][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.739825][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.740387][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.740397][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.756597][ T40] veth1_macvtap: left promiscuous mode [ 46.756656][ T40] veth0_macvtap: left promiscuous mode [ 46.756724][ T40] veth1_vlan: left promiscuous mode [ 46.756769][ T40] veth0_vlan: left promiscuous mode [ 46.927788][ T40] team0 (unregistering): Port device team_slave_1 removed [ 46.933609][ T40] team0 (unregistering): Port device team_slave_0 removed [ 47.038580][ T7250] EXT4-fs: inline encryption not supported [ 47.039133][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 47.040299][ T7250] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.058431][ T7250] EXT4-fs (loop1): 1 truncate cleaned up [ 47.058924][ T7250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.077933][ T7256] Injecting memory failure for pfn 0x136928 at process virtual address 0x20001000 [ 47.084516][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.098583][ T7256] Memory failure: 0x136928: Sending SIGBUS to syz.0.1054:7256 due to hardware memory corruption [ 47.099870][ T7256] Memory failure: 0x136928: recovery action for dirty LRU page: Recovered [ 47.100085][ T7256] Injecting memory failure for pfn 0x219070 at process virtual address 0x20002000 [ 47.100142][ T7256] Memory failure: 0x219070: unhandlable page. [ 47.100155][ T7256] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 47.145153][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.209543][ T7271] netlink: 'syz.1.1058': attribute type 2 has an invalid length. [ 47.252592][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.344712][ T7266] EXT4-fs: Ignoring removed bh option [ 47.344769][ T7266] EXT4-fs: old and new quota format mixing [ 47.370548][ T7039] veth0_vlan: entered promiscuous mode [ 47.374012][ T7039] veth1_vlan: entered promiscuous mode [ 47.380705][ T7039] veth0_macvtap: entered promiscuous mode [ 47.382988][ T7039] veth1_macvtap: entered promiscuous mode [ 47.389994][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.392504][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.406218][ T39] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.406308][ T39] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.406362][ T39] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.421482][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.439588][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.525548][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.525581][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.569805][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.569957][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.617586][ T7316] overlayfs: failed to clone upperpath [ 47.654218][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 47.717606][ T7333] hugetlbfs: syz.1.1078 (7333): Using mlock ulimits for SHM_HUGETLB is obsolete [ 47.854070][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 47.935274][ T7366] set_capacity_and_notify: 3 callbacks suppressed [ 47.942822][ T7366] loop1: detected capacity change from 0 to 4096 [ 47.944420][ T7366] EXT4-fs: inline encryption not supported [ 47.946818][ T7366] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.950370][ T7366] EXT4-fs (loop1): Test dummy encryption mode enabled [ 47.972183][ T7366] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 47.972257][ T7366] System zones: 0-5 [ 47.974847][ T7366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.033229][ T7380] loop3: detected capacity change from 0 to 8192 [ 48.047146][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.071914][ T7387] loop5: detected capacity change from 0 to 256 [ 48.098690][ T7387] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.144826][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 48.178878][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 48.181243][ T7400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1104'. [ 48.210121][ T7401] caif0: tun_chr_ioctl cmd 1074025676 [ 48.210154][ T7401] caif0: owner set to 0 [ 48.243432][ T7408] Bluetooth: MGMT ver 1.23 [ 48.272397][ T7411] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1109'. [ 48.311624][ T7417] Injecting memory failure for pfn 0x13845d at process virtual address 0x20001000 [ 48.313511][ T7417] Memory failure: 0x13845d: recovery action for clean LRU page: Recovered [ 48.313548][ T7417] Injecting memory failure for pfn 0x137597 at process virtual address 0x20002000 [ 48.313601][ T7417] Memory failure: 0x137597: recovery action for clean LRU page: Recovered [ 48.313612][ T7417] Injecting memory failure for pfn 0x137594 at process virtual address 0x20003000 [ 48.313651][ T7417] Memory failure: 0x137594: recovery action for clean LRU page: Recovered [ 48.361336][ T7420] loop3: detected capacity change from 0 to 512 [ 48.374235][ T7420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.408973][ T4724] Bluetooth: hci3: command tx timeout [ 48.412789][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.714582][ T7472] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1136'. [ 48.780046][ T7477] io-wq is not configured for unbound workers [ 48.801969][ T7470] loop5: detected capacity change from 0 to 8192 [ 48.823315][ T7481] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1140'. [ 48.825583][ T7481] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1140'. [ 48.857114][ T7482] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 48.967395][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1147'. [ 48.967435][ T7497] netlink: 'syz.0.1147': attribute type 7 has an invalid length. [ 48.967456][ T7497] netlink: 'syz.0.1147': attribute type 8 has an invalid length. [ 48.976174][ T7494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.984288][ T7494] bond0: (slave bond1): Enslaving as an active interface with an up link [ 49.278262][ T7526] loop1: detected capacity change from 0 to 2048 [ 49.291468][ T7526] EXT4-fs: Ignoring removed bh option [ 49.291505][ T7526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.308272][ T7526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.339309][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.413339][ T7544] loop0: detected capacity change from 0 to 256 [ 49.425799][ T7548] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 49.663979][ T7569] netlink: 'syz.1.1179': attribute type 15 has an invalid length. [ 49.664031][ T7569] bond0: option resend_igmp: invalid value (196616) [ 49.664216][ T7569] bond0: option resend_igmp: allowed values 0 - 255 [ 49.841222][ T7587] loop1: detected capacity change from 0 to 1024 [ 49.861471][ T7587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 49.862034][ T7587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.912365][ T7587] EXT4-fs: Ignoring removed bh option [ 49.935430][ T7587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a047c01c, mo2=0002] [ 49.940116][ T7587] System zones: 0-1, 3-12 [ 49.940936][ T7587] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 49.989928][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.165994][ T7639] ima: rule for LSM 'u' is undefined [ 50.167045][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 50.167084][ T30] audit: type=1807 audit(306.136:38): action=measure func=FILE_CHECK obj_type=u res=0 [ 50.167110][ T30] audit: type=1802 audit(306.136:39): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.5.1210" res=0 errno=0 [ 50.167493][ T7637] ima: policy update failed [ 50.174291][ T30] audit: type=1802 audit(306.136:40): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.5.1210" res=0 errno=0 [ 50.182840][ T7640] netlink: 'syz.3.1209': attribute type 20 has an invalid length. [ 50.495110][ T7679] 9p: Bad value for 'rfdno' [ 50.500312][ T4724] Bluetooth: hci3: command tx timeout [ 50.613947][ T7701] 9p: Bad value for 'rfdno' [ 50.838399][ T7726] binder: 7724:7726 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 50.840020][ T7726] binder: 7724:7726 ioctl c0306201 200001c0 returned -22 [ 50.948168][ T7740] netlink: 'syz.0.1249': attribute type 2 has an invalid length. [ 51.145277][ T7765] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 51.313962][ T7775] hub 5-0:1.0: USB hub found [ 51.315193][ T7775] hub 5-0:1.0: 8 ports detected [ 51.363400][ T7787] tipc: Enabling of bearer rejected, already enabled [ 51.400443][ T7791] loop3: detected capacity change from 0 to 512 [ 51.403143][ T7791] EXT4-fs: inline encryption not supported [ 51.409944][ T7791] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 51.413957][ T7791] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1268: corrupted in-inode xattr: e_value size too large [ 51.413988][ T7791] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.417399][ T7791] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1268: couldn't read orphan inode 15 (err -117) [ 51.419217][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 51.419231][ C1] EXT4-fs (loop3): initial error at time 307: ext4_iget_extra_inode:5180: inode 15 [ 51.419248][ C1] EXT4-fs (loop3): last error at time 307: ext4_iget_extra_inode:5180: inode 15 [ 51.427139][ T7791] loop3: lost filesystem error report for type 5 error -117 [ 51.428522][ T7791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.459835][ T7791] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.480178][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.490068][ T7799] ip_tables: iptables: counters copy to user failed while replacing table [ 51.526375][ T7801] loop5: detected capacity change from 0 to 4096 [ 51.537702][ T7801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.557881][ T7801] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1273: corrupted inode contents [ 51.562686][ T7801] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.1273: mark_inode_dirty error [ 51.564723][ T7801] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1273: corrupted inode contents [ 51.569372][ T7801] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.1273: mark_inode_dirty error [ 51.569717][ T7801] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1273: corrupted inode contents [ 51.571955][ T7801] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.1273: mark_inode_dirty error [ 51.576639][ T7801] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1273: corrupted inode contents [ 51.580289][ T7801] EXT4-fs error (device loop5): ext4_truncate:4691: inode #15: comm syz.5.1273: mark_inode_dirty error [ 51.583018][ T7801] EXT4-fs error (device loop5) in ext4_setattr:6172: Corrupt filesystem [ 51.605380][ T7808] EXT4-fs: Ignoring removed nobh option [ 51.612246][ T7801] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.1273: corrupted inode contents [ 51.614780][ T7808] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 51.616856][ T7808] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 51.616982][ T7808] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.624182][ T7808] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.1275: attempt to clear invalid blocks 1024 len 1 [ 51.624219][ T7808] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.627615][ T7808] EXT4-fs (loop3): Remounting filesystem read-only [ 51.628334][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 51.628349][ C1] EXT4-fs (loop3): initial error at time 307: ext4_clear_blocks:876: inode 11 [ 51.628365][ C1] EXT4-fs (loop3): last error at time 307: ext4_clear_blocks:876: inode 11 [ 51.636378][ T7808] EXT4-fs (loop3): 1 truncate cleaned up [ 51.649869][ T7039] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.661619][ T7039] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.674834][ T7039] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 51.888828][ T7833] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.103595][ T7856] tipc: Enabled bearer , priority 0 [ 52.150403][ T4837] Bluetooth: hci5: Frame reassembly failed (-84) [ 52.151723][ T7850] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 52.225499][ T7864] ipvlan2: entered allmulticast mode [ 52.225533][ T7864] macvlan1: entered allmulticast mode [ 52.225554][ T7864] veth1_vlan: entered allmulticast mode [ 52.468521][ T7912] __nla_validate_parse: 9 callbacks suppressed [ 52.469143][ T7912] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1323'. [ 52.479184][ T7914] bridge_slave_1: invalid flags given to default FDB implementation [ 52.570192][ T4710] Bluetooth: hci3: command tx timeout [ 52.575091][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 52.596133][ T7939] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1336'. [ 52.862573][ T7977] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1354'. [ 52.974380][ T7985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.031175][ T7999] set_capacity_and_notify: 2 callbacks suppressed [ 53.032559][ T7999] loop3: detected capacity change from 0 to 1024 [ 53.057493][ T7985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.062631][ T7999] EXT4-fs: Ignoring removed bh option [ 53.064045][ T7999] EXT4-fs: old and new quota format mixing [ 53.085679][ T8004] overlayfs: failed to clone lowerpath [ 53.134090][ T7985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.222351][ T7985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.237989][ T8017] loop3: detected capacity change from 0 to 512 [ 53.276032][ T8017] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1372: corrupted xattr block 33: invalid header [ 53.280736][ T8017] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1372: corrupted xattr block 33: invalid header [ 53.283873][ T8017] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1372: corrupted xattr block 33: invalid header [ 53.317467][ T8017] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1372: corrupted xattr block 33: invalid header [ 53.351191][ T4837] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 53.352522][ T4837] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 53.352540][ T4837] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.352540][ T4837] [ 53.352548][ T4837] EXT4-fs (loop3): Total free blocks count 0 [ 53.352554][ T4837] EXT4-fs (loop3): Free/Dirty block details [ 53.352561][ T4837] EXT4-fs (loop3): free_blocks=65280 [ 53.352583][ T4837] EXT4-fs (loop3): dirty_blocks=8 [ 53.352590][ T4837] EXT4-fs (loop3): Block reservation details [ 53.352596][ T4837] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 53.369633][ T4708] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 53.402624][ T8027] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1374'. [ 53.410673][ T8027] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1374'. [ 53.737987][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'. [ 53.842787][ T8097] loop0: detected capacity change from 0 to 512 [ 53.862055][ T8097] EXT4-fs (loop0): 1 truncate cleaned up [ 53.866087][ T8102] loop3: detected capacity change from 0 to 256 [ 53.870009][ T8102] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.914724][ T8109] Injecting memory failure for pfn 0x11ee6e at process virtual address 0x20001000 [ 53.934988][ T8109] Memory failure: 0x11ee6e: recovery action for clean LRU page: Recovered [ 53.935033][ T8109] Injecting memory failure for pfn 0x13c81f at process virtual address 0x20002000 [ 53.939484][ T8109] Memory failure: 0x13c81f: recovery action for clean LRU page: Recovered [ 53.939503][ T8109] Injecting memory failure for pfn 0x11f3f2 at process virtual address 0x20003000 [ 53.939661][ T8109] Memory failure: 0x11f3f2: recovery action for clean LRU page: Recovered [ 54.069649][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'. [ 54.129365][ T8139] Soft offlining pfn 0x134ff9 at process virtual address 0x20ff9000 [ 54.142197][ T8139] Memory failure: 0x134ff9: unhandlable page. [ 54.171258][ T4724] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 54.174209][ T4710] Bluetooth: hci0: adv larger than maximum supported [ 54.174245][ T4710] Bluetooth: hci0: Malformed LE Event: 0x0d [ 54.734362][ T8190] loop5: detected capacity change from 0 to 512 [ 54.782170][ T8190] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1450: corrupted xattr block 33: invalid header [ 54.785739][ T8190] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1450: corrupted xattr block 33: invalid header [ 54.789178][ T8190] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1450: corrupted xattr block 33: invalid header [ 54.823445][ T8190] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.1450: corrupted xattr block 33: invalid header [ 55.123377][ T1409] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 55.123476][ T1409] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 55.123492][ T1409] EXT4-fs (loop5): This should not happen!! Data will be lost [ 55.123492][ T1409] [ 55.123503][ T1409] EXT4-fs (loop5): Total free blocks count 0 [ 55.123514][ T1409] EXT4-fs (loop5): Free/Dirty block details [ 55.123524][ T1409] EXT4-fs (loop5): free_blocks=65280 [ 55.123536][ T1409] EXT4-fs (loop5): dirty_blocks=8 [ 55.123545][ T1409] EXT4-fs (loop5): Block reservation details [ 55.123554][ T1409] EXT4-fs (loop5): i_reserved_data_blocks=8 [ 55.140484][ T7039] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 55.156820][ T8196] loop0: detected capacity change from 0 to 256 [ 55.223960][ T8204] loop1: detected capacity change from 0 to 512 [ 55.225336][ T8204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.447242][ T8231] netlink: 'syz.5.1469': attribute type 2 has an invalid length. [ 55.504344][ T8236] loop3: detected capacity change from 0 to 4096 [ 55.515168][ T8236] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.534446][ T8236] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1471'. [ 55.534485][ T8236] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1471'. [ 55.561879][ T8243] netlink: 'syz.2.1474': attribute type 1 has an invalid length. [ 55.600843][ T8246] overlayfs: failed to resolve './cgroup': -2 [ 55.690630][ T8259] loop5: detected capacity change from 0 to 512 [ 55.728065][ T8267] loop1: detected capacity change from 0 to 256 [ 55.822544][ T30] audit: type=1400 audit(311.796:41): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=r pid=8273 comm="syz.2.1490" name="file1" dev="tmpfs" ino=1994 [ 55.987286][ T8301] netlink: 'syz.3.1501': attribute type 12 has an invalid length. [ 56.014211][ T8306] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 56.146030][ T8320] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1509: corrupted xattr block 33: invalid header [ 56.149325][ T8320] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1509: corrupted xattr block 33: invalid header [ 56.149491][ T8320] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1509: corrupted xattr block 33: invalid header [ 56.222999][ T8320] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1509: corrupted xattr block 33: invalid header [ 56.275361][ T40] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.275462][ T40] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 56.275473][ T40] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.275473][ T40] [ 56.275480][ T40] EXT4-fs (loop1): Total free blocks count 0 [ 56.275486][ T40] EXT4-fs (loop1): Free/Dirty block details [ 56.275493][ T40] EXT4-fs (loop1): free_blocks=65280 [ 56.275501][ T40] EXT4-fs (loop1): dirty_blocks=8 [ 56.275506][ T40] EXT4-fs (loop1): Block reservation details [ 56.275512][ T40] EXT4-fs (loop1): i_reserved_data_blocks=8 [ 56.283936][ T4711] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 56.414390][ T8354] RDS: rds_bind could not find a transport for ::8000:20:0:0, load rds_tcp or rds_rdma? [ 56.489388][ T8352] EXT4-fs error (device loop1): ext4_get_first_dir_block:3548: inode #12: comm syz.1.1525: directory missing '.' [ 56.490102][ T8352] EXT4-fs (loop1): Remounting filesystem read-only [ 56.743114][ T4710] block nbd0: Receive control failed (result -32) [ 56.916257][ T8415] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 56.925454][ T8415] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.1553: invalid block [ 56.927807][ T8415] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 56.928308][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 56.928330][ C0] EXT4-fs (loop1): initial error at time 312: ext4_get_branch:178: inode 13: block 1024 [ 56.928372][ C0] EXT4-fs (loop1): last error at time 312: ext4_get_branch:178: inode 13: block 1024 [ 56.936907][ T8415] EXT4-fs (loop1): 1 truncate cleaned up [ 57.182423][ T8463] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.1575: corrupted inode contents [ 57.182462][ T8463] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.183566][ T8463] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 57.183594][ T8463] loop3: lost filesystem error report for type 5 error -117 [ 57.183729][ T8463] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.1575: corrupted inode contents [ 57.183743][ T8463] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.183855][ T8463] EXT4-fs error (device loop3): ext4_evict_inode:315: inode #15: comm syz.3.1575: mark_inode_dirty error [ 57.183866][ T8463] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.184022][ T8463] EXT4-fs (loop3): 1 orphan inode deleted [ 57.459868][ T8501] veth0_macvtap: left promiscuous mode [ 57.488215][ T8501] netlink: 'syz.5.1592': attribute type 1 has an invalid length. [ 57.488249][ T8501] netlink: 'syz.5.1592': attribute type 2 has an invalid length. [ 57.562945][ T8515] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 58.211515][ T8543] 9p: Bad value for 'rfdno' [ 58.293296][ T8555] set_capacity_and_notify: 11 callbacks suppressed [ 58.293609][ T8555] loop1: detected capacity change from 0 to 1024 [ 58.293978][ T8555] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.308151][ T8555] EXT4-fs: Ignoring removed bh option [ 58.321542][ T8555] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 58.464740][ T8573] loop0: detected capacity change from 0 to 1024 [ 58.470955][ T8573] EXT4-fs: inline encryption not supported [ 58.477481][ T8573] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.488047][ T8573] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.1620: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.488089][ T8573] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.488212][ T8573] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 58.488237][ T8573] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.1620: Invalid inode table block 1 in block_group 0 [ 58.488249][ T8573] loop0: lost filesystem error report for type 5 error -117 [ 58.488338][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 58.488347][ C1] EXT4-fs (loop0): initial error at time 314: ext4_map_blocks:791: inode 3: block 2 [ 58.488365][ C1] EXT4-fs (loop0): last error at time 314: ext4_map_blocks:791: inode 3: block 2 [ 58.491187][ T8573] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 58.491207][ T8573] loop0: lost filesystem error report for type 5 error -117 [ 58.491617][ T8573] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.1620: mark_inode_dirty error [ 58.491632][ T8573] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.491716][ T8573] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 58.491726][ T8573] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1620: Failed to acquire dquot type 0 [ 58.491736][ T8573] loop0: lost filesystem error report for type 5 error -117 [ 58.491861][ T8573] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 58.491872][ T8573] loop0: lost filesystem error report for type 5 error -117 [ 58.492255][ T8573] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.1620: mark_inode_dirty error [ 58.492273][ T8573] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.492355][ T8573] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 58.492390][ T8573] EXT4-fs (loop0): 1 orphan inode deleted [ 58.497977][ T8573] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #3: comm syz.0.1620: ES cache extent failed: add [0,1,48,0x1] conflict with existing [0,1,48,0x12] [ 58.497977][ T8573] [ 58.498091][ T8573] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 48: comm syz.0.1620: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.541831][ T8573] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 58.542752][ T40] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.552271][ T40] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 58.552303][ T40] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 58.590632][ T4712] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.592585][ T4712] loop0: lost filesystem error report for type 5 error -117 [ 58.594404][ T4712] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 58.594447][ T4712] loop0: lost filesystem error report for type 5 error -117 [ 58.595884][ T4712] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 58.595904][ T4712] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 58.645712][ T8592] __nla_validate_parse: 4 callbacks suppressed [ 58.645756][ T8592] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1626'. [ 58.676423][ T8602] loop0: detected capacity change from 0 to 2048 [ 58.679560][ T30] audit: type=1400 audit(314.656:42): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="er" requested=r pid=8603 comm="syz.1.1630" path="/298/file1" dev="tmpfs" ino=1567 [ 58.689932][ T8602] EXT4-fs: Ignoring removed i_version option [ 58.706832][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 58.708589][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 58.710333][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 58.822900][ T8624] netlink: 'syz.1.1638': attribute type 2 has an invalid length. [ 58.822941][ T8624] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 58.822951][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'. [ 58.822961][ T8624] netlink: 'syz.1.1638': attribute type 2 has an invalid length. [ 58.822969][ T8624] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 58.822976][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'. [ 58.822982][ T8624] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 58.914539][ T8641] loop3: detected capacity change from 0 to 128 [ 58.991620][ T8650] loop1: detected capacity change from 0 to 512 [ 59.013943][ T8650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.018888][ T8650] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 59.018921][ T8650] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 59.018968][ T8650] System zones: 0-1, 15-15, 18-18, 34-34 [ 59.019111][ T8650] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.019148][ T8650] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 59.019188][ T8650] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 59.019203][ T8650] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 59.028734][ T8650] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1647: bg 0: block 40: padding at end of block bitmap is not set [ 59.028765][ T8650] loop1: lost filesystem error report for type 5 error -117 [ 59.034247][ T8650] EXT4-fs (loop1): Remounting filesystem read-only [ 59.034307][ T8650] EXT4-fs (loop1): 1 truncate cleaned up [ 59.189065][ T8679] loop3: detected capacity change from 0 to 8 [ 59.242128][ T8685] team0: No ports can be present during mode change [ 59.248965][ T6439] tipc: Resetting bearer [ 59.276259][ T6439] tipc: Disabling bearer [ 59.311207][ T8691] loop5: detected capacity change from 0 to 512 [ 59.313215][ T8691] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.328830][ T8691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 59.330513][ T8691] System zones: 1-12 [ 59.339389][ T8691] EXT4-fs (loop5): 1 truncate cleaned up [ 59.344173][ T1409] bridge_slave_1: left allmulticast mode [ 59.344204][ T1409] bridge_slave_1: left promiscuous mode [ 59.344320][ T1409] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.349752][ T1409] bridge_slave_0: left allmulticast mode [ 59.349780][ T1409] bridge_slave_0: left promiscuous mode [ 59.349851][ T1409] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.470831][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.473239][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.474894][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.476538][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.478149][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.560463][ T1409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.583991][ T1409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.609686][ T1409] bond0 (unregistering): Released all slaves [ 59.661348][ T1409] tipc: Disabling bearer [ 59.661488][ T1409] tipc: Left network mode [ 59.691734][ T8728] loop5: detected capacity change from 0 to 512 [ 59.699172][ T8728] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.702006][ T8728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 59.702059][ T8728] System zones: 1-12 [ 59.704928][ T8728] EXT4-fs (loop5): 1 truncate cleaned up [ 59.725575][ T8728] EXT4-fs (loop5): shut down requested (1) [ 59.948040][ T8747] sctp: [Deprecated]: syz.5.1687 (pid 8747) Use of int in maxseg socket option. [ 59.948040][ T8747] Use struct sctp_assoc_value instead [ 59.998559][ T8753] loop5: detected capacity change from 0 to 128 [ 60.062094][ T1409] hsr_slave_0: left promiscuous mode [ 60.063504][ T1409] hsr_slave_1: left promiscuous mode [ 60.073102][ T1409] veth1_macvtap: left promiscuous mode [ 60.074152][ T1409] veth0_macvtap: left promiscuous mode [ 60.075342][ T1409] veth1_vlan: left allmulticast mode [ 60.078437][ T1409] veth1_vlan: left promiscuous mode [ 60.078497][ T1409] veth0_vlan: left promiscuous mode [ 60.114740][ T8766] sctp: [Deprecated]: syz.5.1695 (pid 8766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.114740][ T8766] Use struct sctp_sack_info instead [ 60.262359][ T1409] team0 (unregistering): Port device team_slave_1 removed [ 60.266294][ T1409] team0 (unregistering): Port device team_slave_0 removed [ 60.305906][ T1409] team0 (unregistering): Port device dummy0 removed [ 60.362674][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.369499][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.369614][ T8704] bridge_slave_0: entered allmulticast mode [ 60.370065][ T8704] bridge_slave_0: entered promiscuous mode [ 60.370812][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.370843][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.370902][ T8704] bridge_slave_1: entered allmulticast mode [ 60.371317][ T8704] bridge_slave_1: entered promiscuous mode [ 60.397693][ T8781] loop3: detected capacity change from 0 to 128 [ 60.432726][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.435593][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.483782][ T8704] team0: Port device team_slave_0 added [ 60.484559][ T8704] team0: Port device team_slave_1 added [ 60.543178][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.543212][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.543224][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.543743][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.543749][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.543762][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.566961][ T8704] hsr_slave_0: entered promiscuous mode [ 60.567383][ T8704] hsr_slave_1: entered promiscuous mode [ 60.567616][ T8704] debugfs: 'hsr0' already exists in 'hsr' [ 60.567626][ T8704] Cannot create hsr debugfs directory [ 60.653624][ T8704] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 60.656526][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.659044][ T8704] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 60.661310][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.663274][ T8704] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 60.665512][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.667046][ T8704] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.671016][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.680245][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.680282][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.680368][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.680405][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.702355][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.711423][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.712934][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.717398][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.721860][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.721901][ T7210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.725994][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.726035][ T7210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.746856][ T8704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.746894][ T8704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.868035][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.939618][ T8704] veth0_vlan: entered promiscuous mode [ 60.943532][ T8704] veth1_vlan: entered promiscuous mode [ 60.953415][ T8704] veth0_macvtap: entered promiscuous mode [ 60.955722][ T8704] veth1_macvtap: entered promiscuous mode [ 60.962913][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.966688][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.998478][ T7210] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.004542][ T7210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.004572][ T7210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.018820][ T7210] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.019041][ T7210] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.019063][ T7210] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.024395][ T7210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.024420][ T7210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.224598][ T8857] EXT4-fs: inline encryption not supported [ 61.226176][ T8857] EXT4-fs: Ignoring removed bh option [ 61.229928][ T8857] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.528427][ T4710] Bluetooth: hci1: command tx timeout [ 61.561388][ T8869] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 61.696545][ T8887] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 61.983937][ T8911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1734'. [ 61.983977][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1734'. [ 61.987828][ T8913] netlink: 'syz.0.1735': attribute type 3 has an invalid length. [ 62.017989][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 62.068758][ T39] Bluetooth: hci6: Frame reassembly failed (-84) [ 62.416450][ T8943] tipc: Started in network mode [ 62.417537][ T8943] tipc: Node identity ac14140f, cluster identity 4711 [ 62.419022][ T8943] tipc: New replicast peer: 255.255.255.255 [ 62.420318][ T8943] tipc: Enabled bearer , priority 10 [ 62.568515][ T4715] Bluetooth: hci5: command 0x1003 tx timeout [ 62.568871][ T4724] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 63.477191][ T9008] set_capacity_and_notify: 4 callbacks suppressed [ 63.478479][ T9008] loop6: detected capacity change from 0 to 256 [ 63.538404][ T24] tipc: Node number set to 2886997007 [ 63.610046][ T4724] Bluetooth: hci1: command tx timeout [ 63.696238][ T24] input: syz0 as /devices/virtual/misc/uhid/0005:0572:0306.0001/input/input7 [ 63.711938][ T24] hid-generic 0005:0572:0306.0001: input,hidraw0: BLUETOOTH HID v0.08 Gamepad [syz0] on syz0 [ 63.740906][ T9043] fido_id[9043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.744406][ T9045] trusted_key: encrypted_key: keyword 'updadefault' not recognized [ 63.894232][ T9063] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1804'. [ 63.949049][ T9070] loop5: detected capacity change from 0 to 1024 [ 63.950926][ T9070] EXT4-fs: Ignoring removed orlov option [ 63.954054][ T9070] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 63.958571][ T9070] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 63.960303][ T9070] EXT4-fs (loop5): orphan cleanup on readonly fs [ 63.968102][ T9070] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.1807: Invalid inode table block 0 in block_group 0 [ 63.968140][ T9070] loop5: lost filesystem error report for type 5 error -117 [ 63.968571][ T9070] EXT4-fs (loop5): Remounting filesystem read-only [ 63.968586][ T9070] Quota error (device loop5): write_blk: dquota write failed [ 63.968620][ T9070] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 63.968671][ T9070] EXT4-fs (loop5): 1 truncate cleaned up [ 63.976819][ T9070] EXT4-fs (loop5): shut down requested (0) [ 63.988581][ T9073] bond0: option arp_interval: invalid value ( Ýß) [ 63.988617][ T9073] bond0: option arp_interval: allowed values 0 - 2147483647 [ 64.076732][ T9081] loop5: detected capacity change from 0 to 8 [ 64.088862][ T4724] Bluetooth: hci6: command 0x1003 tx timeout [ 64.088900][ T4710] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 64.215941][ T9097] loop0: detected capacity change from 0 to 512 [ 64.217769][ T9097] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.279303][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'. [ 64.307491][ T9112] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 64.307541][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 64.307568][ T9112] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 64.307585][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 64.307620][ T9112] iwpm_send_hello: Unable to send a nlmsg [ 64.342955][ T9115] sctp: [Deprecated]: syz.3.1830 (pid 9115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.342955][ T9115] Use struct sctp_sack_info instead [ 64.346991][ T4837] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.347055][ T4837] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.347085][ T4837] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.347100][ T4837] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.491125][ T10] cfg80211: failed to load regulatory.db [ 64.492134][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492163][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.563259][ T9143] loop5: detected capacity change from 0 to 2048 [ 64.586702][ T9148] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1847'. [ 64.590136][ T9143] EXT4-fs mount: 51 callbacks suppressed [ 64.590172][ T9143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.600137][ T9153] bridge0: port 3(batadv1) entered blocking state [ 64.602374][ T9153] bridge0: port 3(batadv1) entered disabled state [ 64.603566][ T9153] batadv1: entered allmulticast mode [ 64.607329][ T9153] batadv1: entered promiscuous mode [ 64.666731][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'. [ 64.692354][ T9159] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1842: bg 0: block 345: padding at end of block bitmap is not set [ 64.698105][ T9159] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 64.698136][ T9159] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.698136][ T9159] [ 64.705338][ T4837] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 445 with error 28 [ 64.705366][ T4837] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.705366][ T4837] [ 64.705379][ T4837] EXT4-fs (loop5): Total free blocks count 0 [ 64.705391][ T4837] EXT4-fs (loop5): Free/Dirty block details [ 64.705402][ T4837] EXT4-fs (loop5): free_blocks=0 [ 64.705414][ T4837] EXT4-fs (loop5): dirty_blocks=448 [ 64.705423][ T4837] EXT4-fs (loop5): Block reservation details [ 64.739932][ T7039] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 64.785941][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 64.785983][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 64.795820][ T9173] gretap0: entered promiscuous mode [ 64.797277][ T9173] macvlan2: entered allmulticast mode [ 64.797312][ T9173] gretap0: entered allmulticast mode [ 64.852777][ T9185] loop5: detected capacity change from 0 to 1024 [ 64.886978][ T9185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.914938][ T9185] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 64.928715][ T9185] EXT4-fs (loop5): Remounting filesystem read-only [ 64.951914][ T9201] loop3: detected capacity change from 0 to 128 [ 64.954793][ T9202] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 64.957407][ T9202] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 64.959452][ T9202] iwpm_send_hello: Unable to send a nlmsg [ 64.975194][ T9201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 64.975237][ T9201] System zones: 1-3, 19-19, 35-36 [ 64.975894][ T9201] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.985670][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.030853][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.055752][ T9210] loop0: detected capacity change from 0 to 8192 [ 65.061115][ T9210] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.098611][ T39] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 65.098642][ T39] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 65.221914][ T9224] Injecting memory failure for pfn 0x139984 at process virtual address 0x20001000 [ 65.225966][ T9224] Memory failure: 0x139984: recovery action for clean LRU page: Recovered [ 65.227507][ T9224] Injecting memory failure for pfn 0x11e348 at process virtual address 0x20002000 [ 65.229721][ T9224] Memory failure: 0x11e348: recovery action for clean LRU page: Recovered [ 65.231316][ T9224] Injecting memory failure for pfn 0x13c9e8 at process virtual address 0x20003000 [ 65.233029][ T9224] Memory failure: 0x13c9e8: recovery action for clean LRU page: Recovered [ 65.273774][ T9234] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1881'. [ 65.273809][ T9234] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1881'. [ 65.282568][ T9236] rnbd_client L127: Can't parse path ip:127v0.0.1žµÖ×@: -22 [ 65.342804][ T9246] overlayfs: failed to clone lowerpath [ 65.409164][ T9248] loop5: detected capacity change from 0 to 8192 [ 65.415458][ T9248] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.610503][ T9277] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 65.688574][ T4710] Bluetooth: hci1: command tx timeout [ 65.700150][ T9289] loop5: detected capacity change from 0 to 1024 [ 65.722387][ T9289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.730561][ T9289] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 65.735655][ T9289] EXT4-fs (loop5): Remounting filesystem read-only [ 65.745840][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.860489][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.864858][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.872487][ T9312] EXT4-fs: Ignoring removed nobh option [ 65.873738][ T9312] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 65.875397][ T9312] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1919: attempt to clear invalid blocks 1 len 1 [ 65.875415][ T9312] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 65.875639][ T9312] EXT4-fs (loop6): Remounting filesystem read-only [ 65.875975][ T9312] EXT4-fs (loop6): 1 truncate cleaned up [ 65.876420][ T9312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.146361][ T9344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.150228][ T9344] EXT4-fs (loop3): 1 truncate cleaned up [ 66.150694][ T9344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.180671][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.201472][ T4819] input: syz0 as /devices/virtual/misc/uhid/0005:0572:0306.0002/input/input8 [ 66.202419][ T4819] hid-generic 0005:0572:0306.0002: input,hidraw0: BLUETOOTH HID v0.08 Gamepad [syz0] on syz0 [ 66.237705][ T9352] fido_id[9352]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.249717][ T30] audit: type=1400 audit(322.216:43): lsm=SMACK fn=smack_file_ioctl action=denied subject="_" object="l" requested=r pid=9353 comm="syz.0.1938" path="/418/file1" dev="tmpfs" ino=2189 [ 66.391857][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.546066][ T9396] trusted_key: encrypted_key: key user:syz not found [ 66.656293][ T9413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.671644][ T9413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.741431][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.859880][ T9442] netlink: 'syz.6.1981': attribute type 12 has an invalid length. [ 67.131817][ T9482] process 'syz.3.1999' launched './file2' with NULL argv: empty string added [ 67.273247][ T30] audit: type=1326 audit(323.246:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.3.2009" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df792a8 code=0x7ffc0000 [ 67.278580][ T30] audit: type=1326 audit(323.246:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.3.2009" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df792a8 code=0x7ffc0000 [ 67.291498][ T30] audit: type=1326 audit(323.266:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.3.2009" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8df792a8 code=0x7ffc0000 [ 67.296220][ T30] audit: type=1326 audit(323.266:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.3.2009" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df792a8 code=0x7ffc0000 [ 67.301139][ T30] audit: type=1326 audit(323.266:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.3.2009" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df792a8 code=0x7ffc0000 [ 67.306328][ T30] audit: type=1326 audit(323.266:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.3.2009" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8df792a8 code=0x7ffc0000 [ 67.306372][ T30] audit: type=1326 audit(323.266:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9499 comm="syz.3.2009" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df792a8 code=0x7ffc0000 [ 67.771449][ T4710] Bluetooth: hci1: command tx timeout [ 68.067864][ T9532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.096956][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.227485][ T9550] EXT4-fs: Ignoring removed bh option [ 68.239945][ T9550] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 68.242000][ T9550] EXT4-fs (loop0): 1 truncate cleaned up [ 68.242891][ T9550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.281165][ T9555] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03 [ 68.301238][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.932667][ T9626] set_capacity_and_notify: 6 callbacks suppressed [ 68.935719][ T9626] loop3: detected capacity change from 0 to 512 [ 68.952935][ T9626] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2068: iget: bad extended attribute block 134217728 [ 68.952974][ T9626] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.953373][ T9626] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2068: couldn't read orphan inode 15 (err -117) [ 68.953397][ T9626] loop3: lost filesystem error report for type 5 error -117 [ 68.954176][ T9626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.989308][ T9626] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2068: invalid indirect mapped block 234881024 (level 0) [ 68.994178][ T9626] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2068: invalid indirect mapped block 768 (level 1) [ 69.049711][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.199416][ T9513] Set syz1 is full, maxelem 65536 reached [ 69.433114][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 69.433154][ T30] audit: type=1326 audit(325.406:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb792a8 code=0x7ffc0000 [ 69.433182][ T30] audit: type=1326 audit(325.406:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fb792a8 code=0x7ffc0000 [ 69.442807][ T30] audit: type=1326 audit(325.406:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9fb5c16c code=0x7ffc0000 [ 69.442832][ T30] audit: type=1326 audit(325.406:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9fb5c16c code=0x7ffc0000 [ 69.442849][ T30] audit: type=1326 audit(325.406:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9fb5c16c code=0x7ffc0000 [ 69.442865][ T30] audit: type=1326 audit(325.406:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9fb5c16c code=0x7ffc0000 [ 69.442881][ T30] audit: type=1326 audit(325.406:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9fb5c16c code=0x7ffc0000 [ 69.442897][ T30] audit: type=1326 audit(325.416:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9fb5c16c code=0x7ffc0000 [ 69.453325][ T30] audit: type=1326 audit(325.416:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9fb5c16c code=0x7ffc0000 [ 69.453350][ T30] audit: type=1326 audit(325.416:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.6.2092" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9fb5c16c code=0x7ffc0000 [ 69.732150][ T9736] can0: slcan on pty26. [ 69.809722][ T9731] can0 (unregistered): slcan off pty26. [ 69.921626][ T9757] loop5: detected capacity change from 0 to 256 [ 69.990247][ T9764] loop5: detected capacity change from 0 to 512 [ 69.992077][ T9764] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.998896][ T9764] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2129: Invalid block bitmap block 0 in block_group 0 [ 69.998931][ T9764] loop5: lost filesystem error report for type 5 error -117 [ 70.001143][ T9764] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 70.001158][ T9764] loop5: lost filesystem error report for type 5 error -117 [ 70.001280][ T9764] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.2129: attempt to clear invalid blocks 983261 len 1 [ 70.001295][ T9764] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.001411][ T9764] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2129: Invalid inode table block 0 in block_group 0 [ 70.001423][ T9764] loop5: lost filesystem error report for type 5 error -117 [ 70.018307][ C0] EXT4-fs (loop5): error count since last fsck: 4 [ 70.018350][ C0] EXT4-fs (loop5): initial error at time 325: ext4_read_block_bitmap_nowait:483 [ 70.018386][ C0] EXT4-fs (loop5): last error at time 325: __ext4_get_inode_loc:4886 [ 70.024079][ T9764] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 70.024110][ T9764] loop5: lost filesystem error report for type 5 error -117 [ 70.029336][ T9764] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 70.029371][ T9764] loop5: lost filesystem error report for type 5 error -117 [ 70.032446][ T9764] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2129: Invalid inode table block 0 in block_group 0 [ 70.032485][ T9764] loop5: lost filesystem error report for type 5 error -117 [ 70.036296][ T9764] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 70.036320][ T9764] loop5: lost filesystem error report for type 5 error -117 [ 70.039641][ T9764] EXT4-fs error (device loop5): ext4_truncate:4691: inode #11: comm syz.5.2129: mark_inode_dirty error [ 70.039667][ T9764] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.043120][ T9764] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 70.043150][ T9764] loop5: lost filesystem error report for type 5 error -117 [ 70.046334][ T9764] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2129: Invalid inode table block 0 in block_group 0 [ 70.046361][ T9764] loop5: lost filesystem error report for type 5 error -117 [ 70.050207][ T9764] EXT4-fs (loop5): 1 truncate cleaned up [ 70.050696][ T9764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.091250][ T9764] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 70.091689][ T9764] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (36455!=32276) [ 70.129020][ T9774] __nla_validate_parse: 1 callbacks suppressed [ 70.129063][ T9774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2133'. [ 70.155300][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.187318][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'. [ 70.279852][ T9789] loop5: detected capacity change from 0 to 256 [ 70.366874][ T9794] bond0: entered promiscuous mode [ 70.383523][ T9794] bond_slave_0: entered promiscuous mode [ 70.383662][ T9794] bond_slave_1: entered promiscuous mode [ 70.401630][ T9794] batadv0: entered promiscuous mode [ 70.405693][ T9794] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 70.408381][ T9794] bond0: left promiscuous mode [ 70.408414][ T9794] bond_slave_0: left promiscuous mode [ 70.410374][ T9794] bond_slave_1: left promiscuous mode [ 70.412618][ T9794] batadv0: left promiscuous mode [ 70.420286][ T9802] loop6: detected capacity change from 0 to 1024 [ 70.420668][ T9802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.436184][ T9804] netlink: 'syz.2.2147': attribute type 14 has an invalid length. [ 70.450161][ T9802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.527243][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.554313][ T9818] loop6: detected capacity change from 0 to 128 [ 70.569785][ T9818] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.643222][ T9827] loop5: detected capacity change from 0 to 1024 [ 70.652045][ T9827] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.654912][ T9827] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 70.655063][ T9827] EXT4-fs (loop5): orphan cleanup on readonly fs [ 70.655466][ T9827] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.2157: Invalid inode table block 0 in block_group 0 [ 70.655480][ T9827] loop5: lost filesystem error report for type 5 error -117 [ 70.655576][ T9827] EXT4-fs (loop5): Remounting filesystem read-only [ 70.655642][ T9827] EXT4-fs (loop5): 1 truncate cleaned up [ 70.667581][ T9827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.689932][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.706673][ T8704] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.755961][ T10] IPVS: starting estimator thread 0... [ 70.781270][ T9844] loop5: detected capacity change from 0 to 512 [ 70.790047][ T9844] EXT4-fs: Ignoring removed orlov option [ 70.790080][ T9844] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.800936][ T9844] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.2164: corrupted in-inode xattr: e_value size too large [ 70.800972][ T9844] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.801133][ T9844] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2164: couldn't read orphan inode 15 (err -117) [ 70.801804][ T9844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.820506][ T9842] loop0: detected capacity change from 0 to 8192 [ 70.826417][ T9848] loop6: detected capacity change from 0 to 512 [ 70.829088][ T9848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 70.829138][ T9848] System zones: 1-12 [ 70.829367][ T9848] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.2165: missing EA_INODE flag [ 70.829379][ T9848] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.829606][ T9848] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2165: error while reading EA inode 12 err=-117 [ 70.829717][ T9848] EXT4-fs (loop6): 1 orphan inode deleted [ 70.830160][ T9848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.836732][ T9848] fscrypt (loop6, inode 15): Mutually exclusive encryption flags (0x1c) [ 70.845653][ T9842] loop0: p1 p2 p4[EZD] [ 70.849443][ T9841] IPVS: using max 59 ests per chain, 141600 per kthread [ 70.850829][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.853082][ T9842] loop0: p4 start 201326592 is beyond EOD, truncated [ 70.867953][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.934024][ T9857] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2169'. [ 70.983547][ T9855] zswap: compressor z not available [ 71.024068][ T7136] udevd[7136]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 71.029211][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 71.164857][ T9893] xt_hashlimit: max too large, truncated to 1048576 [ 71.169173][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 71.206829][ T9897] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.212752][ T9897] FAT-fs (loop6): error, invalid access to FAT (entry 0x0ffffff6) [ 71.259826][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'. [ 71.261473][ T9908] netlink: 'syz.5.2194': attribute type 25 has an invalid length. [ 71.262837][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2194'. [ 71.272675][ T9906] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.290708][ T9910] netlink: 'syz.6.2193': attribute type 2 has an invalid length. [ 71.300706][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2195'. [ 71.317379][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.396795][ T9921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.419742][ T9921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.509693][ T4710] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 71.536455][ T9947] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2211'. [ 71.536641][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.586783][ T9952] netlink: 'syz.5.2214': attribute type 10 has an invalid length. [ 71.592858][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.602058][ T9957] EXT4-fs: Ignoring removed i_version option [ 71.602104][ T9957] EXT4-fs: Ignoring removed bh option [ 71.603363][ T9957] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.2212: inode #13: comm syz.0.2212: iget: illegal inode # [ 71.603774][ T9957] EXT4-fs (loop0): Remounting filesystem read-only [ 71.604242][ T9957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.621135][ T9957] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.733226][ T9972] blkio.reset_stats is deprecated [ 71.859398][ T867] kernel read not supported for file /video9 (pid: 867 comm: kworker/1:2) [ 71.886501][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2233'. [ 71.986332][T10008] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.993401][T10008] fscrypt (loop5, inode 12): Unsupported encryption flags (0x08) [ 72.018631][ T7039] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.126536][T10023] Injecting memory failure for pfn 0x1389a0 at process virtual address 0x20000000 [ 72.136594][T10023] Memory failure: 0x1389a0: Sending SIGBUS to syz.5.2244:10023 due to hardware memory corruption [ 72.136650][T10023] Memory failure: 0x1389a0: recovery action for dirty LRU page: Recovered [ 72.136671][T10023] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 72.136860][T10023] Memory failure: 0x219070: Sending SIGBUS to syz.5.2244:10023 due to hardware memory corruption [ 72.136885][T10023] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 72.176058][T10027] pimreg0: tun_chr_ioctl cmd 1074025675 [ 72.176093][T10027] pimreg0: persist disabled [ 72.294509][T10044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.321379][T10044] EXT4-fs (loop5): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 72.373107][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.700129][T10102] gretap1: entered allmulticast mode [ 72.757878][T10106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.832859][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.882286][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2292'. [ 72.922802][T10131] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.165494][ T4710] block nbd1: Receive control failed (result -32) [ 73.397592][T10196] binder: 10195:10196 ioctl c018620b 0 returned -14 [ 73.886604][T10244] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 73.891667][T10244] EXT4-fs (loop6): 1 truncate cleaned up [ 73.897108][T10244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.906026][T10244] EXT4-fs (loop6): shut down requested (2) [ 73.943995][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.203303][T10258] psci: CPU1 killed (polled 0 ms) [ 74.741546][T10303] input: syz1 as /devices/virtual/input/input9 [ 75.006665][T10327] set_capacity_and_notify: 9 callbacks suppressed [ 75.021374][T10327] loop6: detected capacity change from 0 to 512 [ 75.034128][T10327] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.2387: corrupted in-inode xattr: invalid ea_ino [ 75.034158][T10327] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.036868][T10327] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2387: couldn't read orphan inode 15 (err -117) [ 75.036902][T10327] fserror_report: 3 callbacks suppressed [ 75.036918][T10327] loop6: lost filesystem error report for type 5 error -117 [ 75.039042][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 75.039057][ C0] EXT4-fs (loop6): initial error at time 332: ext4_iget_extra_inode:5180: inode 15 [ 75.039078][ C0] EXT4-fs (loop6): last error at time 332: ext4_orphan_get:1404 [ 75.055360][T10327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.105631][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.140022][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.215922][T10345] loop6: detected capacity change from 0 to 512 [ 75.234780][T10345] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 75.239531][T10345] EXT4-fs (loop6): invalid journal inode [ 75.239599][T10345] EXT4-fs (loop6): can't get journal size [ 75.252612][T10345] EXT4-fs (loop6): 1 truncate cleaned up [ 75.253083][T10345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.353488][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.567102][T10363] loop3: detected capacity change from 0 to 8192 [ 75.831088][T10382] ima: policy update failed [ 75.832299][ T30] kauditd_printk_skb: 549 callbacks suppressed [ 75.832326][ T30] audit: type=1802 audit(332.806:612): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.2411" res=0 errno=0 [ 76.084074][ T7210] Bluetooth: hci5: Frame reassembly failed (-84) [ 76.210799][T10406] loop3: detected capacity change from 0 to 4096 [ 76.216771][T10406] EXT4-fs (loop3): Test dummy encryption mode enabled [ 76.224473][T10406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.281101][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.301418][T10413] loop0: detected capacity change from 0 to 256 [ 76.423592][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.583307][T10429] ubi31: attaching mtd0 [ 76.588822][T10429] ubi31: scanning is finished [ 76.596672][T10429] ubi31: empty MTD device detected [ 76.841382][T10429] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 76.841418][T10429] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 76.841441][T10429] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 76.841455][T10429] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 76.841467][T10429] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 76.841478][T10429] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 76.841489][T10429] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 381266710 [ 76.841501][T10429] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 76.852058][T10440] ubi31: background thread "ubi_bgt31d" started, PID 10440 [ 77.237622][T10460] __nla_validate_parse: 6 callbacks suppressed [ 77.241890][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 77.825107][T10491] loop3: detected capacity change from 0 to 1024 [ 77.844868][T10491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.876417][T10491] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2458: bg 0: block 112: padding at end of block bitmap is not set [ 77.880917][T10491] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 35 with max blocks 1 with error 28 [ 77.880950][T10491] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.880950][T10491] [ 77.880965][T10491] EXT4-fs (loop3): Total free blocks count 0 [ 77.880979][T10491] EXT4-fs (loop3): Free/Dirty block details [ 77.881007][T10491] EXT4-fs (loop3): free_blocks=0 [ 77.881030][T10491] EXT4-fs (loop3): dirty_blocks=16 [ 77.881042][T10491] EXT4-fs (loop3): Block reservation details [ 77.881052][T10491] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 77.952554][ T4708] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 77.953376][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.039943][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2463'. [ 78.039976][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2463'. [ 78.091399][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 78.171447][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2467'. [ 78.189440][T10512] vlan3: entered allmulticast mode [ 78.189470][T10512] macsec0: entered allmulticast mode [ 78.189489][T10512] veth1_macvtap: entered allmulticast mode [ 78.189936][T10512] batman_adv: batadv0: Adding interface: vlan3 [ 78.189950][T10512] batman_adv: batadv0: The MTU of interface vlan3 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.189971][T10512] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 78.562073][T10543] loop3: detected capacity change from 0 to 512 [ 78.578446][T10543] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2482: inode has both inline data and extents flags [ 78.581002][T10543] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.581325][T10543] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2482: couldn't read orphan inode 15 (err -117) [ 78.586652][T10543] loop3: lost filesystem error report for type 5 error -117 [ 78.587274][T10543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.611120][T10547] loop0: detected capacity change from 0 to 512 [ 78.614169][T10547] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2484: bad orphan inode 15 [ 78.614195][T10547] loop0: lost filesystem error report for type 5 error -117 [ 78.616569][T10547] ext4_test_bit(bit=14, block=5) = 0 [ 78.617060][T10547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.637316][T10547] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 78.654812][T10543] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 880048229 > max in inode 18 [ 78.707481][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.710662][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.143594][T10577] loop3: detected capacity change from 0 to 1024 [ 79.162860][T10577] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 79.162909][T10577] System zones: 0-1, 3-12 [ 79.163507][T10577] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.444430][T10583] input: syz1 as /devices/virtual/input/input10 [ 79.669169][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 79.915002][T10604] loop6: detected capacity change from 0 to 128 [ 79.923991][T10604] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.934402][T10604] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.998186][T10604] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 80.007860][T10604] FAT-fs (loop6): Filesystem has been set read-only [ 80.059153][ T8704] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.060426][T10613] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2513'. [ 80.246677][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 80.248610][T10626] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2519'. [ 80.368702][T10632] bridge0: port 4(syz_tun) entered blocking state [ 80.370883][T10632] bridge0: port 4(syz_tun) entered disabled state [ 80.372452][T10632] syz_tun: entered allmulticast mode [ 80.374213][T10632] syz_tun: entered promiscuous mode [ 80.375499][T10632] bridge0: port 4(syz_tun) entered blocking state [ 80.375538][T10632] bridge0: port 4(syz_tun) entered forwarding state [ 80.795815][T10661] binder: 10661 RLIMIT_NICE not set [ 80.984829][T10678] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2543'. [ 81.082940][T10686] netlink: 'syz.2.2547': attribute type 39 has an invalid length. [ 81.143048][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 82.030407][T10702] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 82.469501][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2558'. [ 82.478086][T10708] Injecting memory failure for pfn 0x13512d at process virtual address 0x20001000 [ 82.551803][T10708] Memory failure: 0x13512d: recovery action for clean LRU page: Recovered [ 82.556444][T10708] Injecting memory failure for pfn 0x138c2a at process virtual address 0x20002000 [ 82.562844][T10708] Memory failure: 0x138c2a: recovery action for clean LRU page: Recovered [ 82.572415][T10708] Injecting memory failure for pfn 0x219070 at process virtual address 0x20003000 [ 82.574323][T10708] Memory failure: 0x219070: Sending SIGBUS to syz.3.2559:10708 due to hardware memory corruption [ 82.577658][T10708] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 83.158923][T10721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2564'. [ 83.456427][T10726] loop6: detected capacity change from 0 to 4096 [ 83.527261][T10726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.925931][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.608486][T10747] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 85.557369][T10768] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2583'. [ 85.893641][ T30] audit: type=1326 audit(342.866:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10774 comm="syz.0.2587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97d792a8 code=0x0 [ 87.412120][T10799] loop3: detected capacity change from 0 to 512 [ 87.551863][T10799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.997856][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.965677][T10828] loop5: detected capacity change from 0 to 512 [ 89.570639][T10839] loop6: detected capacity change from 0 to 512 [ 89.616876][T10839] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2615: inode has both inline data and extents flags [ 89.616936][T10839] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.619964][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 89.619983][ C0] EXT4-fs (loop6): initial error at time 346: ext4_orphan_get:1399: inode 15 [ 89.620014][ C0] EXT4-fs (loop6): last error at time 346: ext4_orphan_get:1399: inode 15 [ 89.643676][T10839] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2615: couldn't read orphan inode 15 (err -117) [ 89.643739][T10839] loop6: lost filesystem error report for type 5 error -117 [ 92.499212][T10887] »»»»»»: renamed from vlan0 (while UP) [ 92.965154][T10894] loop5: detected capacity change from 0 to 1024 [ 93.076133][T10898] loop6: detected capacity change from 0 to 512 [ 93.121923][T10898] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 93.153989][T10898] EXT4-fs (loop6): 1 truncate cleaned up [ 93.377369][T10898] EXT4-fs error (device loop6): ext4_empty_dir:3125: inode #2: block 13: comm syz.6.2641: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 93.390005][T10898] EXT4-fs (loop6): Remounting filesystem read-only [ 94.059234][T10918] bridge0: port 3(syz_tun) entered blocking state [ 94.059350][T10918] bridge0: port 3(syz_tun) entered disabled state [ 94.059681][T10918] syz_tun: entered allmulticast mode [ 94.189784][T10918] syz_tun: entered promiscuous mode [ 94.191719][T10918] bridge0: port 3(syz_tun) entered blocking state [ 94.191821][T10918] bridge0: port 3(syz_tun) entered forwarding state [ 94.559289][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2652'. [ 94.830584][T10933] loop3: detected capacity change from 0 to 1024 [ 94.931255][T10933] EXT4-fs mount: 8 callbacks suppressed [ 94.948622][T10933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.034675][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.038883][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.246642][T10933] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 95.307127][T10933] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 95.316169][T10933] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.316169][T10933] [ 95.319278][T10933] EXT4-fs (loop3): Total free blocks count 0 [ 95.320818][T10933] EXT4-fs (loop3): Free/Dirty block details [ 95.322356][T10933] EXT4-fs (loop3): free_blocks=20480 [ 95.323887][T10933] EXT4-fs (loop3): dirty_blocks=48 [ 95.325237][T10933] EXT4-fs (loop3): Block reservation details [ 95.326977][T10933] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 95.443648][T10946] ima: Unable to open file: /e (-2) [ 95.453145][T10945] ima: policy update failed [ 95.458083][ T30] audit: type=1802 audit(608.428:614): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.6.2659" res=0 errno=0 [ 95.752487][ T4708] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 95.757918][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.843346][T10953] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 96.590706][T10951] fido_id[10951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.625105][T10969] loop5: detected capacity change from 0 to 128 [ 96.642510][T10968] loop3: detected capacity change from 0 to 512 [ 96.731397][T10968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.277776][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.489608][T10983] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 97.633778][T10987] netlink: 'syz.3.2677': attribute type 11 has an invalid length. [ 97.635304][T10987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2677'. [ 97.637738][T10987] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 98.123345][T10996] netlink: 'syz.6.2682': attribute type 14 has an invalid length. [ 98.202039][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2683'. [ 99.528144][ T868] hid-generic 0000:FFFFFFFE:0800.0004: unknown main item tag 0x0 [ 99.531728][ T868] hid-generic 0000:FFFFFFFE:0800.0004: unknown main item tag 0x0 [ 99.566804][ T868] hid-generic 0000:FFFFFFFE:0800.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 100.439276][T11033] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 100.498982][T11033] loop6: detected capacity change from 0 to 128 [ 100.694119][T11028] fido_id[11028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.881372][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2709'. [ 101.990239][T11057] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 102.096775][T11062] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 104.096385][T11098] netlink: 888 bytes leftover after parsing attributes in process `syz.3.2727'. [ 104.149978][T11101] loop5: detected capacity change from 0 to 256 [ 104.925520][T11114] loop6: detected capacity change from 0 to 512 [ 104.984512][T11114] EXT4-fs (loop6): 1 orphan inode deleted [ 104.986773][T11114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.018662][ T40] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 105.018767][ T40] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 105.876903][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.252459][T11153] 9p: Bad value for 'rfdno' [ 109.119142][T11185] ip_tables: iptables: counters copy to user failed while replacing table [ 109.497865][T11192] vxcan1: tx address claim with dest, not broadcast [ 109.621467][T11194] 9p: Bad value for 'rfdno' [ 109.724942][T11198] loop5: detected capacity change from 0 to 512 [ 109.730774][T11198] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.780028][T11198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.211264][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.032525][T11209] loop6: detected capacity change from 0 to 4096 [ 111.523294][T11209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.978928][T11228] pimreg: tun_chr_ioctl cmd 2147767520 [ 112.541675][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.216368][T11252] loop3: detected capacity change from 0 to 512 [ 113.269669][T11252] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2796: bad orphan inode 17 [ 113.269734][T11252] loop3: lost filesystem error report for type 5 error -117 [ 113.272557][T11252] ext4_test_bit(bit=16, block=4) = 1 [ 113.272613][T11252] is_bad_inode(inode)=0 [ 113.279038][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 113.279055][ C0] EXT4-fs (loop3): initial error at time 626: ext4_orphan_get:1425 [ 113.279079][ C0] EXT4-fs (loop3): last error at time 626: ext4_orphan_get:1425 [ 113.283316][T11252] NEXT_ORPHAN(inode)=0 [ 113.283382][T11252] max_ino=32 [ 113.283405][T11252] i_nlink=1 [ 113.476311][T11252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.856836][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.203587][T11289] loop3: detected capacity change from 0 to 512 [ 115.250116][T11289] EXT4-fs: Ignoring removed oldalloc option [ 115.264431][T11289] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.298037][T11289] EXT4-fs (loop3): 1 orphan inode deleted [ 115.300106][T11289] EXT4-fs (loop3): 1 truncate cleaned up [ 115.305549][T11289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.531915][T11289] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 115.581139][T11293] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 115.583996][T11289] EXT4-fs (loop3): Remounting filesystem read-only [ 115.584290][T11289] overlayfs: failed to verify upper root origin [ 115.585120][T11293] overlayfs: cleanup of 'bus/work' failed (-30) [ 115.585174][T11293] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 116.788147][ T4956] bridge0: port 3(syz_tun) entered disabled state [ 116.996256][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.003518][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.255271][ T4956] syz_tun (unregistering): left allmulticast mode [ 117.258010][ T4956] syz_tun (unregistering): left promiscuous mode [ 117.261578][ T4956] bridge0: port 3(syz_tun) entered disabled state [ 117.344615][ T4956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.821246][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'. [ 117.823120][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 117.824868][T11320] netlink: 'syz.2.2827': attribute type 15 has an invalid length. [ 117.826321][T11320] netlink: 'syz.2.2827': attribute type 18 has an invalid length. [ 117.829827][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'. [ 118.780137][T11331] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2831'. [ 119.406387][ T4710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.410862][ T4710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.412881][ T4710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.415850][ T4710] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.429863][ T4710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.719020][T11366] fuse: Bad value for 'fd' [ 121.321540][T11372] Injecting memory failure for pfn 0x219070 at process virtual address 0x20289000 [ 121.321687][T11372] Memory failure: 0x219070: Sending SIGBUS to syz.2.2848:11372 due to hardware memory corruption [ 121.321770][T11372] Memory failure: 0x219070: recovery action for already poisoned page: Failed [ 121.451289][ T4710] Bluetooth: hci0: command tx timeout [ 122.878250][T11402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2857'. [ 122.881553][T11401] loop5: detected capacity change from 0 to 512 [ 122.882496][T11401] EXT4-fs: Ignoring removed bh option [ 122.907957][T11401] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 122.913768][T11401] EXT4-fs (loop5): 1 truncate cleaned up [ 122.939191][T11401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.997406][T11340] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.007426][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.010879][T11340] bridge_slave_0: entered allmulticast mode [ 123.035901][T11340] bridge_slave_0: entered promiscuous mode [ 123.071489][T11340] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.071574][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.071833][T11340] bridge_slave_1: entered allmulticast mode [ 123.073927][T11340] bridge_slave_1: entered promiscuous mode [ 123.230762][T11401] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2858: bg 0: block 465: padding at end of block bitmap is not set [ 123.269891][T11401] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 123.269958][T11401] EXT4-fs (loop5): This should not happen!! Data will be lost [ 123.269958][T11401] [ 123.270005][T11401] EXT4-fs (loop5): Total free blocks count 0 [ 123.270033][T11401] EXT4-fs (loop5): Free/Dirty block details [ 123.270063][T11401] EXT4-fs (loop5): free_blocks=0 [ 123.270093][T11401] EXT4-fs (loop5): dirty_blocks=34 [ 123.270118][T11401] EXT4-fs (loop5): Block reservation details [ 123.270142][T11401] EXT4-fs (loop5): i_reserved_data_blocks=34 [ 123.404763][T11340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.486150][T11340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.535327][ T4710] Bluetooth: hci0: command tx timeout [ 123.577269][ T7039] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 123.596193][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.773621][T11340] team0: Port device team_slave_0 added [ 123.814773][T11340] team0: Port device team_slave_1 added [ 123.944753][T11414] loop5: detected capacity change from 0 to 512 [ 123.967794][T11414] EXT4-fs: Ignoring removed i_version option [ 123.972947][T11414] EXT4-fs: Ignoring removed bh option [ 124.029970][T11414] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.2861: inode #13: comm syz.5.2861: iget: illegal inode # [ 124.032677][T11414] loop5: lost filesystem error report for type 5 error -117 [ 124.033620][T11414] EXT4-fs (loop5): Remounting filesystem read-only [ 124.050016][T11414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.083219][T11340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.084683][T11340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.094265][T11340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.136700][T11340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.136755][T11340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.136799][T11340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.199523][T11414] EXT4-fs (loop5): shut down requested (2) [ 124.344497][T11417] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.466189][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.508237][T11340] hsr_slave_0: entered promiscuous mode [ 124.529981][T11340] hsr_slave_1: entered promiscuous mode [ 124.544213][T11340] debugfs: 'hsr0' already exists in 'hsr' [ 124.544317][T11340] Cannot create hsr debugfs directory [ 124.905599][T11426] loop6: detected capacity change from 0 to 512 [ 124.956243][T11426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.099243][T11426] Bluetooth: MGMT ver 1.23 [ 125.307680][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.509029][T11435] netlink: 'syz.2.2871': attribute type 2 has an invalid length. [ 125.609899][ T4710] Bluetooth: hci0: command tx timeout [ 125.895822][T11437] loop6: detected capacity change from 0 to 4096 [ 125.942936][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.944277][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.997915][T11437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.223229][T11437] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 126.319367][T11445] netlink: 'syz.0.2875': attribute type 2 has an invalid length. [ 126.358918][T11340] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 126.415613][T11340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.441127][T11340] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 126.452399][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.502879][T11340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.506827][T11340] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 126.604635][T11340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.664242][T11340] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 126.704467][T11450] netlink: 'syz.5.2876': attribute type 6 has an invalid length. [ 126.727581][T11340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.535730][T11340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.595815][T11340] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.625068][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.625153][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.716981][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.717073][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.434661][T11469] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.292532][T11505] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 130.422602][T11340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.980333][T11519] Set syz1 is full, maxelem 65536 reached [ 131.914510][T11340] veth0_vlan: entered promiscuous mode [ 131.953829][T11340] veth1_vlan: entered promiscuous mode [ 132.080972][T11538] loop0: detected capacity change from 0 to 256 [ 132.165246][T11340] veth0_macvtap: entered promiscuous mode [ 132.227435][T11340] veth1_macvtap: entered promiscuous mode [ 132.325992][T11538] binder: Bad value for 'max' [ 132.368616][T11340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.372387][T11340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.459552][ T1409] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.461002][ T1409] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.480651][ T1409] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.480782][ T1409] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.252239][ T1409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.252300][ T1409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.642728][ T1409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.642787][ T1409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.869295][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2918'. [ 134.436712][T11565] tun0: tun_chr_ioctl cmd 1074025677 [ 134.437012][T11565] tun0: linktype set to 270 [ 134.473476][T11570] fuse: Bad value for 'fd' [ 135.070504][T11577] loop0: detected capacity change from 0 to 512 [ 135.167080][T11577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.751899][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.857617][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2930'. [ 135.857684][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2930'. [ 135.857737][T11594] netlink: 'syz.7.2930': attribute type 18 has an invalid length. [ 135.961313][T11596] loop6: detected capacity change from 0 to 1024 [ 136.124414][T11596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.336197][T11596] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2931: corrupted xattr block 84: invalid header [ 136.379560][T11596] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2931: corrupted xattr block 84: invalid header [ 136.409137][T11596] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2931: corrupted xattr block 84: invalid header [ 136.446997][T11605] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.2931: corrupted xattr block 84: invalid header [ 136.795009][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.200062][T11639] sctp: [Deprecated]: syz.5.2949 (pid 11639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.200062][T11639] Use struct sctp_sack_info instead [ 139.688134][T11647] Injecting memory failure for pfn 0x11d8e8 at process virtual address 0x20945000 [ 139.734609][T11647] Memory failure: 0x11d8e8: recovery action for clean LRU page: Recovered [ 139.734681][T11647] Injecting memory failure for pfn 0x11f556 at process virtual address 0x20946000 [ 139.779993][T11647] Memory failure: 0x11f556: recovery action for clean LRU page: Recovered [ 139.780064][T11647] Injecting memory failure for pfn 0x11d876 at process virtual address 0x20947000 [ 139.829611][T11647] Memory failure: 0x11d876: recovery action for clean LRU page: Recovered [ 139.829684][T11647] Injecting memory failure for pfn 0x11d87a at process virtual address 0x20948000 [ 139.889774][T11647] Memory failure: 0x11d87a: recovery action for clean LRU page: Recovered [ 140.657226][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2957'. [ 142.233882][T11675] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 142.382196][T11677] loop0: detected capacity change from 0 to 128 [ 142.844011][T11679] loop7: detected capacity change from 0 to 4096 [ 142.932003][T11679] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.079902][T11679] EXT4-fs (loop7): shut down requested (0) [ 143.677255][T11340] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.582084][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2980'. [ 148.147526][T11766] macvlan2: entered promiscuous mode [ 148.149612][T11766] bridge0: entered promiscuous mode [ 149.178932][T11785] Bluetooth: hci5: Frame reassembly failed (-84) [ 149.759409][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3020'. [ 149.761414][T11797] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3020'. [ 150.919757][ T4724] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 151.128836][ T4710] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 151.804296][T11833] loop6: detected capacity change from 0 to 512 [ 151.810288][T11833] EXT4-fs: inline encryption not supported [ 151.820894][T11833] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 151.848218][T11833] EXT4-fs (loop6): 1 truncate cleaned up [ 151.905284][T11833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.480902][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.970738][ T4724] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.195983][T11850] geneve2: entered promiscuous mode [ 153.258889][T11850] geneve2: entered allmulticast mode [ 153.952017][T11860] loop0: detected capacity change from 0 to 128 [ 154.167044][T11860] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.383773][T11860] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop0' because it doesn't have stable inode numbers [ 154.622407][T11871] tipc: Enabling of bearer rejected, already enabled [ 154.689502][ T4712] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.497828][T11903] loop5: detected capacity change from 0 to 512 [ 156.511001][T11903] EXT4-fs: Ignoring removed i_version option [ 156.512305][T11903] EXT4-fs: Ignoring removed bh option [ 156.540498][T11903] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.3067: inode #13: comm syz.5.3067: iget: illegal inode # [ 156.542968][T11903] loop5: lost filesystem error report for type 5 error -117 [ 156.548351][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 156.548398][ C0] EXT4-fs (loop5): initial error at time 669: ext4_orphan_get:1399 [ 156.548448][ C0] EXT4-fs (loop5): last error at time 669: ext4_orphan_get:1399 [ 156.555469][T11903] EXT4-fs (loop5): Remounting filesystem read-only [ 156.584508][T11903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.752924][T11903] EXT4-fs (loop5): shut down requested (1) [ 156.956934][ T7039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.195647][T11915] veth0: entered promiscuous mode [ 157.197431][T11914] veth0: left promiscuous mode [ 157.656851][T11924] loop6: detected capacity change from 0 to 8 [ 157.827550][T11923] loop0: detected capacity change from 0 to 4096 [ 157.963575][T11923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.496708][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.774819][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3080'. [ 158.946278][T11942] tap0: tun_chr_ioctl cmd 1074025677 [ 158.947724][T11942] tap0: linktype set to 769 [ 159.911906][T11957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3088'. [ 160.746927][T11966] loop5: detected capacity change from 0 to 2048 [ 160.856823][T11966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.215002][T11966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.524362][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 167.580121][T12064] batman_adv: batadv0: Adding interface: netdevsim0 [ 167.581859][T12064] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.581935][T12064] batman_adv: batadv0: Interface activated: netdevsim0 [ 168.457292][T12078] 9p: Bad value for 'rfdno' [ 168.969970][ T4710] Bluetooth: hci3: command 0x0406 tx timeout [ 170.018978][T12108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3157'. [ 170.058238][T12111] loop5: detected capacity change from 0 to 256 [ 170.940450][T12124] loop0: detected capacity change from 0 to 1024 [ 170.955293][T12124] EXT4-fs: Ignoring removed bh option [ 170.959638][T12124] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 171.065151][T12124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.963550][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.349408][T12149] netlink: 'syz.0.3173': attribute type 4 has an invalid length. [ 174.112026][T12178] loop0: detected capacity change from 0 to 128 [ 177.051587][T12223] batman_adv: batadv0: Adding interface: dummy0 [ 177.052899][T12223] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.057930][T12223] batman_adv: batadv0: Interface activated: dummy0 [ 178.128768][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 178.548203][T12247] bond0: invalid ARP target specified [ 178.623086][T12250] loop0: detected capacity change from 0 to 512 [ 178.640587][T12250] EXT4-fs: Ignoring removed bh option [ 178.668239][T12250] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 178.738656][T12250] EXT4-fs (loop0): 1 truncate cleaned up [ 178.741093][T12250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.283397][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.308187][T12260] loop7: detected capacity change from 0 to 4096 [ 179.351988][T12260] EXT4-fs: inline encryption not supported [ 179.362932][T12260] EXT4-fs (loop7): Test dummy encryption mode enabled [ 179.420019][T12260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.717454][T12271] netlink: 'syz.5.3229': attribute type 5 has an invalid length. [ 180.431207][T11340] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.724767][T12295] loop6: detected capacity change from 0 to 512 [ 181.791178][T12295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.402712][T12309] loop5: detected capacity change from 0 to 128 [ 182.457739][T12309] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.532407][ T8704] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.795743][ T7039] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.903991][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3246'. [ 185.083391][ T39] Bluetooth: hci5: Frame reassembly failed (-84) [ 185.122823][T12347] Bluetooth: hci5: Frame reassembly failed (-84) [ 185.689753][T12357] loop7: detected capacity change from 0 to 512 [ 185.703048][T12357] EXT4-fs: inline encryption not supported [ 185.707140][T12357] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 185.732092][T12357] EXT4-fs (loop7): 1 truncate cleaned up [ 185.735721][T12357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.110816][T11340] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.450984][T12369] tmpfs: Invalid uid '0x00000000ffffffff' [ 187.133482][ T4724] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 187.331626][T12382] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3277'. [ 187.397473][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.397573][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.570949][T12385] dlm: non-version read from control device 4096 [ 189.328896][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3288'. [ 189.328967][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3288'. [ 189.329014][T12408] netlink: 592 bytes leftover after parsing attributes in process `syz.7.3288'. [ 189.455927][ T4724] Bluetooth: hci1: command 0x0406 tx timeout [ 189.713590][T12416] loop5: detected capacity change from 0 to 256 [ 189.763000][T12416] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.605437][T12480] Bluetooth: MGMT ver 1.23 [ 194.762985][T12499] bond0: invalid ARP target specified [ 195.043278][ T9] hid-generic 0005:04F3:05DF.0005: unknown main item tag 0x0 [ 195.045021][ T9] hid-generic 0005:04F3:05DF.0005: unknown main item tag 0x0 [ 195.052673][ T9] hid-generic 0005:04F3:05DF.0005: unknown main item tag 0x0 [ 195.110310][ T9] hid-generic 0005:04F3:05DF.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 195.489756][T12512] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 195.494490][T12512] rtrs_client L2098: : Failed to resolve address, err: -ENODEV [ 195.531717][T12512] rtrs_client L2641: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 195.534232][T12512] ================================================================== [ 195.534248][T12512] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 195.534277][T12512] Read of size 255 at addr 0000000000000000 by task syz.0.3337/12512 [ 195.534287][T12512] [ 195.534299][T12512] CPU: 0 UID: 0 PID: 12512 Comm: syz.0.3337 Tainted: G L syzkaller #0 PREEMPT [ 195.534314][T12512] Tainted: [L]=SOFTLOCKUP [ 195.534319][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 195.534327][T12512] Call trace: [ 195.534332][T12512] show_stack+0x2c/0x3c (C) [ 195.534351][T12512] __dump_stack+0x30/0x40 [ 195.534367][T12512] dump_stack_lvl+0xd8/0x12c [ 195.534383][T12512] print_report+0x58/0x84 [ 195.534396][T12512] kasan_report+0x8c/0xc4 [ 195.534412][T12512] kasan_check_range+0x17c/0x1ac [ 195.534427][T12512] __asan_memcpy+0x3c/0x84 [ 195.534443][T12512] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 195.534458][T12512] __traceiter_rtrs_clt_close_conns+0x74/0xc8 [ 195.534471][T12512] rtrs_clt_close_conns+0x2f0/0x40c [ 195.534488][T12512] rtrs_clt_open+0xa6c/0xd54 [ 195.534503][T12512] rnbd_clt_map_device+0xcb8/0x1f64 [ 195.534520][T12512] rnbd_clt_map_device_store+0x900/0xad8 [ 195.534537][T12512] dev_attr_store+0x6c/0x90 [ 195.534551][T12512] sysfs_kf_write+0xe0/0x108 [ 195.534571][T12512] kernfs_fop_write_iter+0x260/0x3b8 [ 195.534586][T12512] vfs_write+0x51c/0xa0c [ 195.534599][T12512] ksys_write+0x12c/0x228 [ 195.534612][T12512] __arm64_sys_write+0x84/0x98 [ 195.534624][T12512] invoke_syscall+0x98/0x244 [ 195.534640][T12512] el0_svc_common+0x19c/0x23c [ 195.534657][T12512] do_el0_svc+0x4c/0x5c [ 195.534672][T12512] el0_svc+0x64/0x260 [ 195.534688][T12512] el0t_64_sync_handler+0x44/0x104 [ 195.534702][T12512] el0t_64_sync+0x198/0x19c [ 195.534715][T12512] ================================================================== [ 195.534752][T12512] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 197.205421][ T8634] bridge0: port 3(syz_tun) entered disabled state [ 197.382025][ T8634] syz_tun (unregistering): left allmulticast mode [ 197.386136][ T8634] syz_tun (unregistering): left promiscuous mode [ 197.387888][ T8634] bridge0: port 3(syz_tun) entered disabled state [ 197.521377][ T8704] bridge0: port 4(syz_tun) entered disabled state [ 197.525761][ T8704] syz_tun (unregistering): left allmulticast mode [ 197.538779][ T8704] syz_tun (unregistering): left promiscuous mode [ 197.540406][ T8704] bridge0: port 4(syz_tun) entered disabled state [ 197.735847][ T4866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.051165][ T4866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.677026][ T4866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.798270][ T4866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.030417][ T4866] bridge_slave_1: left promiscuous mode [ 199.031754][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.035856][ T4866] bridge_slave_0: left allmulticast mode [ 199.037034][ T4866] bridge_slave_0: left promiscuous mode [ 199.040245][ T4866] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.563075][ T4866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.570202][ T4866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.578977][ T4866] bond0 (unregistering): Released all slaves [ 199.966604][ T4866] hsr_slave_0: left promiscuous mode [ 199.971210][ T4866] hsr_slave_1: left promiscuous mode [ 199.972955][ T4866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.974674][ T4866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.977255][ T4866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.980201][ T4866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.012874][ T4866] veth1_macvtap: left promiscuous mode [ 200.012962][ T4866] veth0_macvtap: left promiscuous mode [ 200.013161][ T4866] veth1_vlan: left promiscuous mode [ 200.013263][ T4866] veth0_vlan: left promiscuous mode [ 200.751109][ T4866] team0 (unregistering): Port device team_slave_1 removed [ 200.774479][ T4866] team0 (unregistering): Port device team_slave_0 removed [ 200.993549][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 201.186797][ T4866] IPVS: stop unused estimator thread 0... [ 201.263235][ T4866] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.310184][ T4866] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.348134][ T4866] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.396445][ T4866] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.576065][ T4866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.651836][ T4866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.694616][ T4866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.744775][ T4866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.916823][ T4866] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.991983][ T4866] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.043449][ T4866] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.081779][ T4866] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.106123][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 202.234410][ T4866] bridge_slave_1: left allmulticast mode [ 202.234462][ T4866] bridge_slave_1: left promiscuous mode [ 202.234631][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.270438][ T4866] bridge_slave_0: left allmulticast mode [ 202.271652][ T4866] bridge_slave_0: left promiscuous mode [ 202.272910][ T4866] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.309614][ T4866] bridge_slave_1: left allmulticast mode [ 202.310810][ T4866] bridge_slave_1: left promiscuous mode [ 202.312445][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.316427][ T4866] bridge_slave_0: left allmulticast mode [ 202.318258][ T4866] bridge_slave_0: left promiscuous mode [ 202.320220][ T4866] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.339997][ T4866] bridge_slave_1: left allmulticast mode [ 202.341054][ T4866] bridge_slave_1: left promiscuous mode [ 202.342785][ T4866] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.346943][ T4866] bridge_slave_0: left allmulticast mode [ 202.348013][ T4866] bridge_slave_0: left promiscuous mode [ 202.364913][ T4866] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.667217][ T4866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.676506][ T4866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.685844][ T4866] bond0 (unregistering): Released all slaves [ 202.911788][ T4866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.919906][ T4866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.925182][ T4866] bond0 (unregistering): (slave bond1): Releasing backup interface [ 202.927584][ T4866] bond0 (unregistering): Released all slaves [ 202.938175][ T4866] bond1 (unregistering): Released all slaves [ 203.114654][ T4866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.123857][ T4866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.127895][ T4866] bond0 (unregistering): Released all slaves [ 203.141716][ T4866] bond1 (unregistering): Released all slaves [ 203.272497][ T4866] tipc: Left network mode [ 203.286165][ T4866] IPVS: stopping backup sync thread 7548 ... [ 203.819768][ T4866] hsr_slave_0: left promiscuous mode [ 203.828822][ T4866] hsr_slave_1: left promiscuous mode [ 203.830302][ T4866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.830337][ T4866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.835765][ T4866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.837264][ T4866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.857668][ T4866] hsr_slave_0: left promiscuous mode [ 203.860665][ T4866] hsr_slave_1: left promiscuous mode [ 203.864742][ T4866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.866604][ T4866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.869733][ T4866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.871443][ T4866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.873847][ T4866] batman_adv: batadv0: Removing interface: vlan3 [ 203.882851][ T4866] hsr_slave_0: left promiscuous mode [ 203.887719][ T4866] hsr_slave_1: left promiscuous mode [ 203.888908][ T4866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.888941][ T4866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.895781][ T4866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.898180][ T4866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.964717][ T4866] veth1_macvtap: left promiscuous mode [ 203.969155][ T4866] veth0_macvtap: left promiscuous mode [ 203.969332][ T4866] veth1_vlan: left promiscuous mode [ 203.969449][ T4866] veth0_vlan: left promiscuous mode [ 203.976647][ T4866] veth1_macvtap: left allmulticast mode [ 203.976691][ T4866] veth1_macvtap: left promiscuous mode [ 203.976758][ T4866] veth0_macvtap: left promiscuous mode [ 203.976885][ T4866] veth1_vlan: left promiscuous mode [ 203.977008][ T4866] veth0_vlan: left promiscuous mode [ 203.990007][ T4866] veth1_macvtap: left promiscuous mode [ 204.646342][ T4866] team0 (unregistering): Port device team_slave_1 removed [ 204.667312][ T4866] team0 (unregistering): Port device team_slave_0 removed [ 205.126909][ T4866] team0 (unregistering): Port device team_slave_1 removed [ 205.148264][ T4866] team0 (unregistering): Port device team_slave_0 removed [ 205.518240][ T4866] team0 (unregistering): Port device team_slave_1 removed