last executing test programs: 20.877147123s ago: executing program 0 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x3c}}, 0x4) 20.778572841s ago: executing program 0 (id=304): syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d3942, 0x9) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) 20.653383128s ago: executing program 0 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20.594473548s ago: executing program 0 (id=314): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$rds(0x15, 0x5, 0x0) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 18.526228169s ago: executing program 0 (id=370): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 18.517623319s ago: executing program 32 (id=370): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 16.053648197s ago: executing program 5 (id=451): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dedbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {0xc}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) 15.95937513s ago: executing program 5 (id=457): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4, 0x1}, 'syz1\x00', 0x35}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x39, {0x9, 0x0, 0x2000000, 0x2, 0x101, 0x12}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 15.853152122s ago: executing program 5 (id=462): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 15.772358748s ago: executing program 5 (id=465): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000080), 0xff, 0x249, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x43}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) 15.56080504s ago: executing program 5 (id=479): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a00, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000000)={0x20, 0x0, 0x0}) 14.517707756s ago: executing program 5 (id=520): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c14, &(0x7f0000001300)=ANY=[@ANYBLOB='uni_xlate=1,shortname=win95,shortname=winnt,codepage=936,iocharset=cp932,shortname=mixed,utf8=1,utf8=0,nonumtail=0,shortname=winnt,utf8=0,rodir,shortname=lower,\x00'], 0x81, 0x29b, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r0, 0x3) 14.482947832s ago: executing program 33 (id=520): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c14, &(0x7f0000001300)=ANY=[@ANYBLOB='uni_xlate=1,shortname=win95,shortname=winnt,codepage=936,iocharset=cp932,shortname=mixed,utf8=1,utf8=0,nonumtail=0,shortname=winnt,utf8=0,rodir,shortname=lower,\x00'], 0x81, 0x29b, &(0x7f00000015c0)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r0, 0x3) 11.968806927s ago: executing program 3 (id=606): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) 11.957446811s ago: executing program 3 (id=607): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) 11.92900442s ago: executing program 3 (id=608): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x49, 0x4) 11.882615878s ago: executing program 3 (id=610): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x103495, 0x0) chroot(&(0x7f0000000100)='./file0\x00') getcwd(&(0x7f0000000140)=""/157, 0x9d) 11.799875258s ago: executing program 3 (id=611): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa980000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 11.166642623s ago: executing program 3 (id=630): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x40, 0x0, 0x80}, 0x0) 11.026273217s ago: executing program 34 (id=630): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x40, 0x0, 0x80}, 0x0) 10.896725394s ago: executing program 6 (id=635): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000b711016000000000095000000000080"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 10.824033882s ago: executing program 6 (id=637): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000003c0)=0x5, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x20, 0x0, 0x1a) 10.735414373s ago: executing program 6 (id=642): r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x18, 0x29, 0x37, {0x2b}}}], 0x18}, 0x40c0) 10.648546262s ago: executing program 6 (id=643): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000000), 0x82, 0x492, &(0x7f0000000840)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x1, 0x7, 0x0, 0x0, 0x10000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 10.646221114s ago: executing program 6 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x5000011, 0x11, r0, 0xfffff000) 9.595758012s ago: executing program 6 (id=671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1}, 0x6, {0x2, 0x0, @rand_addr=0x64010102}, 'syz_tun\x00'}) 9.535079895s ago: executing program 35 (id=671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000240)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1}, 0x6, {0x2, 0x0, @rand_addr=0x64010102}, 'syz_tun\x00'}) 8.01784698s ago: executing program 2 (id=704): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee01) keyctl$setperm(0x5, r0, 0x14210927) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xc0) 7.972093829s ago: executing program 2 (id=705): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x21) close(r0) socket(0x1e, 0x4, 0x0) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.971571254s ago: executing program 2 (id=706): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x4, @mcast2, 0x400}}, 0x0, 0x0, 0x46, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d01000000a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 7.113039686s ago: executing program 2 (id=729): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 6.932476889s ago: executing program 2 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) lseek(r0, 0x4d, 0x2) getdents64(r0, 0x0, 0x0) 6.461938877s ago: executing program 2 (id=749): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(r0, 0xffffffffffffffff, 0x0) 6.382032965s ago: executing program 36 (id=749): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(r0, 0xffffffffffffffff, 0x0) 3.09234248s ago: executing program 8 (id=843): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xfffff9bd, 0xfe00, 0x2, 0x8, 0x15, 0x6, 0x1a}, &(0x7f0000000000)=0x9c) 3.091882773s ago: executing program 8 (id=844): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1ab) truncate(&(0x7f0000000040)='./file1\x00', 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3.015687095s ago: executing program 8 (id=845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f3000/0x1000)=nil, 0x1000, 0x9, 0x12, r0, 0xd9de2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 2.967887681s ago: executing program 7 (id=846): timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) timer_gettime(r0, &(0x7f0000000280)) 2.946962835s ago: executing program 8 (id=847): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.929168418s ago: executing program 8 (id=848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000740)={0x3a, 0xf, '\x00', [@generic={0x7f, 0x6e, "460659f101e89996191e03b3beacc223c86c66efc687fd82a80497aa39422fbca667be44273b32fd79c37e4c6cbaee53880e8cca1334ac0df288f0cef8f0a0c23652ef09f1483f40d62dd1f8f906e4568a08c46957021911242d6feae18b5c78a099b0d9a0f0413843db87182ea4"}, @jumbo={0xc2, 0x4, 0x9d}, @generic={0x80}]}, 0x80) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x8, 0xc2, 0xffff, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3}]}}}}}}}}, 0x0) 2.608823558s ago: executing program 8 (id=850): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) 2.605525166s ago: executing program 37 (id=850): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) 2.108569985s ago: executing program 7 (id=862): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) read$qrtrtun(r2, &(0x7f0000000000)=""/18, 0x12) 1.890396851s ago: executing program 4 (id=866): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc0000}, {@local}]}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.788424378s ago: executing program 9 (id=868): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, 0x0) 1.761459581s ago: executing program 9 (id=869): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000037a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000033a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.693659312s ago: executing program 9 (id=871): r0 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x10, 0xfffffffc, 0x87}) eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x3a, 0x0, 0x1, 0x7}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0xffffffffffffffff}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 1.243318399s ago: executing program 7 (id=875): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000005c0)='a :z', 0x4}], 0x2}}], 0x1, 0x4080) 1.193087709s ago: executing program 7 (id=876): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, r1, 0x0, 0x0, 0x800000000000}]) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.001246991s ago: executing program 4 (id=877): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) 997.866692ms ago: executing program 4 (id=878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340), 0x3b, 0x40800, &(0x7f00000002c0)={0x11, 0x19, r2, 0x1, 0xea, 0x6, @random="4189f1ee00"}, 0x14) 926.093044ms ago: executing program 4 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "40a2569ab7"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) 898.663763ms ago: executing program 4 (id=880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 831.819378ms ago: executing program 9 (id=881): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x108) 749.729519ms ago: executing program 9 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 748.963364ms ago: executing program 7 (id=883): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 684.134368ms ago: executing program 9 (id=884): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$hidraw(r0, &(0x7f0000000180)=""/215, 0xd7) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 680.567967ms ago: executing program 7 (id=885): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0x5, 0x1ff]) 400.691141ms ago: executing program 1 (id=888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x54) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0742021d0c14c3d40000000057ef5602993bac00000000ff", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x14, 0x117, 0x2, 0x10, "c6e073c6325eb0a5da8e1db4c71227d3"}], 0x40, 0x4004000}], 0x1, 0x10) 387.939654ms ago: executing program 1 (id=889): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/36, 0x93}, {0x0, 0x24}, {&(0x7f0000000380)=""/75, 0x4b}], 0x3}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) 290.852727ms ago: executing program 1 (id=890): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x2) openat(r1, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) 276.202363ms ago: executing program 0 (id=851): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x89) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x400, 0x19c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143040, 0x0) 219.884533ms ago: executing program 1 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x19) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000ec0)={0x2020}, 0x2020) 177.571651ms ago: executing program 1 (id=892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b) 12.388551ms ago: executing program 1 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8000) 0s ago: executing program 4 (id=894): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x4, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) kernel console output (not intermixed with test programs): 33.475883][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.578797][ T4884] loop4: detected capacity change from 0 to 4096 [ 33.610686][ T4884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.629456][ T4671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.701404][ T4898] loop1: detected capacity change from 0 to 4096 [ 33.709668][ T4898] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.731133][ T4901] loop0: detected capacity change from 0 to 512 [ 33.731548][ T4898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.766827][ T4898] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 33.796865][ T4901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.809828][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.837071][ T4901] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 33.840433][ T4901] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 33.842761][ T4901] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.842761][ T4901] [ 33.844484][ T4901] EXT4-fs (loop0): Total free blocks count 0 [ 33.844565][ T4911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.25'. [ 33.844582][ T4911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25'. [ 33.851020][ T4901] EXT4-fs (loop0): Free/Dirty block details [ 33.852095][ T4901] EXT4-fs (loop0): free_blocks=65280 [ 33.853099][ T4901] EXT4-fs (loop0): dirty_blocks=16 [ 33.853948][ T4901] EXT4-fs (loop0): Block reservation details [ 33.854955][ T4901] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 33.876948][ T4915] loop7: detected capacity change from 0 to 7 [ 33.877969][ T4915] Dev loop7: unable to read RDB block 7 [ 33.877986][ T4915] loop7: unable to read partition table [ 33.878043][ T4915] loop7: partition table beyond EOD, truncated [ 33.878052][ T4915] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 33.898949][ T4917] loop4: detected capacity change from 0 to 512 [ 33.909109][ T4917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.930991][ T4917] EXT4-fs (loop4): shut down requested (2) [ 33.932326][ T4675] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 33.940455][ T4675] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.948949][ T4671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.045903][ T4928] loop4: detected capacity change from 0 to 256 [ 34.057453][ T4930] loop0: detected capacity change from 0 to 1024 [ 34.059299][ T4930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.075095][ T4930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.099056][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 34.117495][ T4675] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.732650][ T4951] loop3: detected capacity change from 0 to 512 [ 34.740507][ T4951] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.40: inode has both inline data and extents flags [ 34.740576][ T4951] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.743623][ T4951] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.40: couldn't read orphan inode 15 (err -117) [ 34.745301][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 34.745316][ C1] EXT4-fs (loop3): initial error at time 34: ext4_orphan_get:1397: inode 15 [ 34.745335][ C1] EXT4-fs (loop3): last error at time 34: ext4_orphan_get:1397: inode 15 [ 34.755799][ T4951] loop3: lost filesystem error report for type 5 error -117 [ 34.761913][ T4951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.768442][ T4956] input: syz0 as /devices/virtual/input/input2 [ 34.789929][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.043948][ T4965] syzkaller1: entered promiscuous mode [ 35.043975][ T4965] syzkaller1: entered allmulticast mode [ 35.355528][ T4672] Bluetooth: hci4: command tx timeout [ 35.355566][ T4672] Bluetooth: hci1: command tx timeout [ 35.355643][ T50] Bluetooth: hci2: command tx timeout [ 35.435341][ T4678] Bluetooth: hci0: command tx timeout [ 35.436450][ T50] Bluetooth: hci3: command tx timeout [ 35.487930][ T4980] EXT4-fs: Ignoring removed orlov option [ 35.493697][ T4980] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 35.789745][ T5005] Illegal XDP return value 78 on prog (id 4) dev syz_tun, expect packet loss! [ 35.804877][ T5007] ======================================================= [ 35.804877][ T5007] WARNING: The mand mount option has been deprecated and [ 35.804877][ T5007] and is ignored by this kernel. Remove the mand [ 35.804877][ T5007] option from the mount to silence this warning. [ 35.804877][ T5007] ======================================================= [ 35.822149][ T5007] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.870852][ T5018] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.878138][ T5018] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.903362][ T4679] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.964578][ T4758] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.967054][ T5025] ext4: Bad value for 'resgid' [ 35.967082][ T5025] ext4: Bad value for 'resgid' [ 35.969547][ T4758] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.010964][ T5029] fido_id[5029]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.028641][ T5032] input: syz0 as /devices/virtual/input/input3 [ 36.030375][ T5033] Injecting memory failure for pfn 0x136c40 at process virtual address 0x20000000 [ 36.038617][ T5033] Memory failure: 0x136c40: recovery action for clean LRU page: Recovered [ 36.038785][ T5033] Injecting memory failure for pfn 0x136c50 at process virtual address 0x20010000 [ 36.038863][ T5033] Memory failure: 0x136c50: recovery action for clean LRU page: Recovered [ 36.039024][ T5033] Injecting memory failure for pfn 0x11be60 at process virtual address 0x20020000 [ 36.039071][ T5033] Memory failure: 0x11be60: recovery action for clean LRU page: Recovered [ 36.039092][ T5033] Injecting memory failure for pfn 0x133960 at process virtual address 0x20030000 [ 36.039136][ T5033] Memory failure: 0x133960: recovery action for clean LRU page: Recovered [ 36.039258][ T5033] Injecting memory failure for pfn 0x133800 at process virtual address 0x20040000 [ 36.039315][ T5033] Memory failure: 0x133800: recovery action for clean LRU page: Recovered [ 36.039335][ T5033] Injecting memory failure for pfn 0x1337f0 at process virtual address 0x20050000 [ 36.039378][ T5033] Memory failure: 0x1337f0: recovery action for clean LRU page: Recovered [ 36.039486][ T5033] Injecting memory failure for pfn 0x133290 at process virtual address 0x20060000 [ 36.039531][ T5033] Memory failure: 0x133290: recovery action for clean LRU page: Recovered [ 36.039550][ T5033] Injecting memory failure for pfn 0x132ac0 at process virtual address 0x20070000 [ 36.039593][ T5033] Memory failure: 0x132ac0: recovery action for clean LRU page: Recovered [ 36.039699][ T5033] Injecting memory failure for pfn 0x10a4e0 at process virtual address 0x20080000 [ 36.039743][ T5033] Memory failure: 0x10a4e0: recovery action for clean LRU page: Recovered [ 36.039762][ T5033] Injecting memory failure for pfn 0x11e3f0 at process virtual address 0x20090000 [ 36.040024][ T5033] Memory failure: 0x11e3f0: recovery action for clean LRU page: Recovered [ 36.040164][ T5033] Injecting memory failure for pfn 0x1132e0 at process virtual address 0x200a0000 [ 36.040216][ T5033] Memory failure: 0x1132e0: recovery action for clean LRU page: Recovered [ 36.040236][ T5033] Injecting memory failure for pfn 0x133fb0 at process virtual address 0x200b0000 [ 36.040289][ T5033] Memory failure: 0x133fb0: recovery action for clean LRU page: Recovered [ 36.040408][ T5033] Injecting memory failure for pfn 0x133fc0 at process virtual address 0x200c0000 [ 36.040452][ T5033] Memory failure: 0x133fc0: recovery action for clean LRU page: Recovered [ 36.040471][ T5033] Injecting memory failure for pfn 0x11a150 at process virtual address 0x200d0000 [ 36.040514][ T5033] Memory failure: 0x11a150: recovery action for clean LRU page: Recovered [ 36.040625][ T5033] Injecting memory failure for pfn 0x11c440 at process virtual address 0x200e0000 [ 36.040674][ T5033] Memory failure: 0x11c440: recovery action for clean LRU page: Recovered [ 36.040693][ T5033] Injecting memory failure for pfn 0x11c760 at process virtual address 0x200f0000 [ 36.040735][ T5033] Memory failure: 0x11c760: recovery action for clean LRU page: Recovered [ 36.040841][ T5033] Injecting memory failure for pfn 0x11cc90 at process virtual address 0x20100000 [ 36.040888][ T5033] Memory failure: 0x11cc90: recovery action for clean LRU page: Recovered [ 36.040907][ T5033] Injecting memory failure for pfn 0x11c7c0 at process virtual address 0x20110000 [ 36.040949][ T5033] Memory failure: 0x11c7c0: recovery action for clean LRU page: Recovered [ 36.041254][ T5033] Injecting memory failure for pfn 0x11c7f0 at process virtual address 0x20120000 [ 36.041327][ T5033] Memory failure: 0x11c7f0: recovery action for clean LRU page: Recovered [ 36.041350][ T5033] Injecting memory failure for pfn 0x11b1e0 at process virtual address 0x20130000 [ 36.041490][ T5033] Memory failure: 0x11b1e0: recovery action for clean LRU page: Recovered [ 36.041627][ T5033] Injecting memory failure for pfn 0x11be30 at process virtual address 0x20140000 [ 36.041677][ T5033] Memory failure: 0x11be30: recovery action for clean LRU page: Recovered [ 36.041697][ T5033] Injecting memory failure for pfn 0x11b1c0 at process virtual address 0x20150000 [ 36.041738][ T5033] Memory failure: 0x11b1c0: recovery action for clean LRU page: Recovered [ 36.041843][ T5033] Injecting memory failure for pfn 0x118170 at process virtual address 0x20160000 [ 36.041885][ T5033] Memory failure: 0x118170: recovery action for clean LRU page: Recovered [ 36.041903][ T5033] Injecting memory failure for pfn 0x11bf20 at process virtual address 0x20170000 [ 36.041943][ T5033] Memory failure: 0x11bf20: recovery action for clean LRU page: Recovered [ 36.042051][ T5033] Injecting memory failure for pfn 0x118000 at process virtual address 0x20180000 [ 36.042092][ T5033] Memory failure: 0x118000: recovery action for clean LRU page: Recovered [ 36.042110][ T5033] Injecting memory failure for pfn 0x119970 at process virtual address 0x20190000 [ 36.042150][ T5033] Memory failure: 0x119970: recovery action for clean LRU page: Recovered [ 36.042376][ T5033] Injecting memory failure for pfn 0x1199f0 at process virtual address 0x201a0000 [ 36.042432][ T5033] Memory failure: 0x1199f0: recovery action for clean LRU page: Recovered [ 36.042455][ T5033] Injecting memory failure for pfn 0x118180 at process virtual address 0x201b0000 [ 36.042496][ T5033] Memory failure: 0x118180: recovery action for clean LRU page: Recovered [ 36.042617][ T5033] Injecting memory failure for pfn 0x117110 at process virtual address 0x201c0000 [ 36.042658][ T5033] Memory failure: 0x117110: recovery action for clean LRU page: Recovered [ 36.042677][ T5033] Injecting memory failure for pfn 0x116e10 at process virtual address 0x201d0000 [ 36.042717][ T5033] Memory failure: 0x116e10: recovery action for clean LRU page: Recovered [ 36.042819][ T5033] Injecting memory failure for pfn 0x1038b0 at process virtual address 0x201e0000 [ 36.042860][ T5033] Memory failure: 0x1038b0: recovery action for clean LRU page: Recovered [ 36.042878][ T5033] Injecting memory failure for pfn 0x136ad0 at process virtual address 0x201f0000 [ 36.042918][ T5033] Memory failure: 0x136ad0: recovery action for clean LRU page: Recovered [ 36.043059][ T5033] Injecting memory failure for pfn 0x111b40 at process virtual address 0x20200000 [ 36.043116][ T5033] Memory failure: 0x111b40: recovery action for clean LRU page: Recovered [ 36.043134][ T5033] Injecting memory failure for pfn 0x133710 at process virtual address 0x20210000 [ 36.043174][ T5033] Memory failure: 0x133710: recovery action for clean LRU page: Recovered [ 36.043280][ T5033] Injecting memory failure for pfn 0x136bf0 at process virtual address 0x20220000 [ 36.043325][ T5033] Memory failure: 0x136bf0: recovery action for clean LRU page: Recovered [ 36.043343][ T5033] Injecting memory failure for pfn 0x133000 at process virtual address 0x20230000 [ 36.043446][ T5033] Memory failure: 0x133000: recovery action for clean LRU page: Recovered [ 36.043565][ T5033] Injecting memory failure for pfn 0x10f570 at process virtual address 0x20240000 [ 36.043607][ T5033] Memory failure: 0x10f570: recovery action for clean LRU page: Recovered [ 36.043624][ T5033] Injecting memory failure for pfn 0x10c110 at process virtual address 0x20250000 [ 36.043665][ T5033] Memory failure: 0x10c110: recovery action for clean LRU page: Recovered [ 36.043767][ T5033] Injecting memory failure for pfn 0x133d20 at process virtual address 0x20260000 [ 36.043808][ T5033] Memory failure: 0x133d20: recovery action for clean LRU page: Recovered [ 36.043826][ T5033] Injecting memory failure for pfn 0x135f70 at process virtual address 0x20270000 [ 36.043866][ T5033] Memory failure: 0x135f70: recovery action for clean LRU page: Recovered [ 36.044039][ T5033] Injecting memory failure for pfn 0x136c10 at process virtual address 0x20280000 [ 36.044081][ T5033] Memory failure: 0x136c10: recovery action for clean LRU page: Recovered [ 36.044100][ T5033] Injecting memory failure for pfn 0x136c20 at process virtual address 0x20290000 [ 36.044140][ T5033] Memory failure: 0x136c20: recovery action for clean LRU page: Recovered [ 36.044246][ T5033] Injecting memory failure for pfn 0x136c30 at process virtual address 0x202a0000 [ 36.044296][ T5033] Memory failure: 0x136c30: recovery action for clean LRU page: Recovered [ 36.044318][ T5033] Injecting memory failure for pfn 0x11cc20 at process virtual address 0x202b0000 [ 36.044358][ T5033] Memory failure: 0x11cc20: recovery action for clean LRU page: Recovered [ 36.044463][ T5033] Injecting memory failure for pfn 0x11cc30 at process virtual address 0x202c0000 [ 36.044568][ T5033] Memory failure: 0x11cc30: recovery action for clean LRU page: Recovered [ 36.044590][ T5033] Injecting memory failure for pfn 0x11c780 at process virtual address 0x202d0000 [ 36.044631][ T5033] Memory failure: 0x11c780: recovery action for clean LRU page: Recovered [ 36.044761][ T5033] Injecting memory failure for pfn 0x11c790 at process virtual address 0x202e0000 [ 36.044802][ T5033] Memory failure: 0x11c790: recovery action for clean LRU page: Recovered [ 36.044821][ T5033] Injecting memory failure for pfn 0x1178c0 at process virtual address 0x202f0000 [ 36.044861][ T5033] Memory failure: 0x1178c0: recovery action for clean LRU page: Recovered [ 36.044968][ T5033] Injecting memory failure for pfn 0x1178d0 at process virtual address 0x20300000 [ 36.045009][ T5033] Memory failure: 0x1178d0: recovery action for clean LRU page: Recovered [ 36.045027][ T5033] Injecting memory failure for pfn 0x117aa0 at process virtual address 0x20310000 [ 36.045067][ T5033] Memory failure: 0x117aa0: recovery action for clean LRU page: Recovered [ 36.045167][ T5033] Injecting memory failure for pfn 0x117ab0 at process virtual address 0x20320000 [ 36.045208][ T5033] Memory failure: 0x117ab0: recovery action for clean LRU page: Recovered [ 36.045226][ T5033] Injecting memory failure for pfn 0x116f80 at process virtual address 0x20330000 [ 36.045773][ T5033] Memory failure: 0x116f80: recovery action for clean LRU page: Recovered [ 36.045899][ T5033] Injecting memory failure for pfn 0x116f90 at process virtual address 0x20340000 [ 36.045947][ T5033] Memory failure: 0x116f90: recovery action for clean LRU page: Recovered [ 36.045966][ T5033] Injecting memory failure for pfn 0x135f80 at process virtual address 0x20350000 [ 36.046009][ T5033] Memory failure: 0x135f80: recovery action for clean LRU page: Recovered [ 36.046114][ T5033] Injecting memory failure for pfn 0x135f90 at process virtual address 0x20360000 [ 36.046157][ T5033] Memory failure: 0x135f90: recovery action for clean LRU page: Recovered [ 36.046176][ T5033] Injecting memory failure for pfn 0x136c60 at process virtual address 0x20370000 [ 36.046217][ T5033] Memory failure: 0x136c60: recovery action for clean LRU page: Recovered [ 36.046332][ T5033] Injecting memory failure for pfn 0x136c70 at process virtual address 0x20380000 [ 36.047215][ T5033] Memory failure: 0x136c70: recovery action for clean LRU page: Recovered [ 36.047255][ T5033] Injecting memory failure for pfn 0x136c80 at process virtual address 0x20390000 [ 36.047333][ T5033] Memory failure: 0x136c80: recovery action for clean LRU page: Recovered [ 36.047464][ T5033] Injecting memory failure for pfn 0x136c90 at process virtual address 0x203a0000 [ 36.047511][ T5033] Memory failure: 0x136c90: recovery action for clean LRU page: Recovered [ 36.047532][ T5033] Injecting memory failure for pfn 0x136ca0 at process virtual address 0x203b0000 [ 36.047575][ T5033] Memory failure: 0x136ca0: recovery action for clean LRU page: Recovered [ 36.047682][ T5033] Injecting memory failure for pfn 0x136cb0 at process virtual address 0x203c0000 [ 36.047725][ T5033] Memory failure: 0x136cb0: recovery action for clean LRU page: Recovered [ 36.047744][ T5033] Injecting memory failure for pfn 0x136cc0 at process virtual address 0x203d0000 [ 36.047785][ T5033] Memory failure: 0x136cc0: recovery action for clean LRU page: Recovered [ 36.047886][ T5033] Injecting memory failure for pfn 0x136cd0 at process virtual address 0x203e0000 [ 36.047928][ T5033] Memory failure: 0x136cd0: recovery action for clean LRU page: Recovered [ 36.047946][ T5033] Injecting memory failure for pfn 0x136ce0 at process virtual address 0x203f0000 [ 36.047987][ T5033] Memory failure: 0x136ce0: recovery action for clean LRU page: Recovered [ 36.048387][ T5033] Injecting memory failure for pfn 0x136cf0 at process virtual address 0x20400000 [ 36.048464][ T5033] Memory failure: 0x136cf0: recovery action for clean LRU page: Recovered [ 36.048484][ T5033] Injecting memory failure for pfn 0x136d00 at process virtual address 0x20410000 [ 36.048526][ T5033] Memory failure: 0x136d00: recovery action for clean LRU page: Recovered [ 36.048709][ T5033] Injecting memory failure for pfn 0x136d10 at process virtual address 0x20420000 [ 36.048752][ T5033] Memory failure: 0x136d10: recovery action for clean LRU page: Recovered [ 36.048771][ T5033] Injecting memory failure for pfn 0x136d20 at process virtual address 0x20430000 [ 36.048812][ T5033] Memory failure: 0x136d20: recovery action for clean LRU page: Recovered [ 36.049094][ T5033] Injecting memory failure for pfn 0x136d30 at process virtual address 0x20440000 [ 36.049148][ T5033] Memory failure: 0x136d30: recovery action for clean LRU page: Recovered [ 36.049167][ T5033] Injecting memory failure for pfn 0x136d40 at process virtual address 0x20450000 [ 36.049207][ T5033] Memory failure: 0x136d40: recovery action for clean LRU page: Recovered [ 36.049332][ T5033] Injecting memory failure for pfn 0x136d50 at process virtual address 0x20460000 [ 36.049444][ T5033] Memory failure: 0x136d50: recovery action for clean LRU page: Recovered [ 36.049463][ T5033] Injecting memory failure for pfn 0x136d60 at process virtual address 0x20470000 [ 36.049505][ T5033] Memory failure: 0x136d60: recovery action for clean LRU page: Recovered [ 36.049641][ T5033] Injecting memory failure for pfn 0x136d70 at process virtual address 0x20480000 [ 36.049689][ T5033] Memory failure: 0x136d70: recovery action for clean LRU page: Recovered [ 36.049707][ T5033] Injecting memory failure for pfn 0x136d80 at process virtual address 0x20490000 [ 36.049747][ T5033] Memory failure: 0x136d80: recovery action for clean LRU page: Recovered [ 36.049850][ T5033] Injecting memory failure for pfn 0x136d90 at process virtual address 0x204a0000 [ 36.049890][ T5033] Memory failure: 0x136d90: recovery action for clean LRU page: Recovered [ 36.049908][ T5033] Injecting memory failure for pfn 0x136da0 at process virtual address 0x204b0000 [ 36.049948][ T5033] Memory failure: 0x136da0: recovery action for clean LRU page: Recovered [ 36.050256][ T5033] Injecting memory failure for pfn 0x136db0 at process virtual address 0x204c0000 [ 36.050311][ T5033] Memory failure: 0x136db0: recovery action for clean LRU page: Recovered [ 36.050334][ T5033] Injecting memory failure for pfn 0x136dc0 at process virtual address 0x204d0000 [ 36.050374][ T5033] Memory failure: 0x136dc0: recovery action for clean LRU page: Recovered [ 36.050559][ T5033] Injecting memory failure for pfn 0x136dd0 at process virtual address 0x204e0000 [ 36.050601][ T5033] Memory failure: 0x136dd0: recovery action for clean LRU page: Recovered [ 36.050619][ T5033] Injecting memory failure for pfn 0x136de0 at process virtual address 0x204f0000 [ 36.050660][ T5033] Memory failure: 0x136de0: recovery action for clean LRU page: Recovered [ 36.050766][ T5033] Injecting memory failure for pfn 0x136df0 at process virtual address 0x20500000 [ 36.050807][ T5033] Memory failure: 0x136df0: recovery action for clean LRU page: Recovered [ 36.050825][ T5033] Injecting memory failure for pfn 0x10fa00 at process virtual address 0x20510000 [ 36.050865][ T5033] Memory failure: 0x10fa00: recovery action for clean LRU page: Recovered [ 36.050966][ T5033] Injecting memory failure for pfn 0x10fa10 at process virtual address 0x20520000 [ 36.051007][ T5033] Memory failure: 0x10fa10: recovery action for clean LRU page: Recovered [ 36.051025][ T5033] Injecting memory failure for pfn 0x10fa20 at process virtual address 0x20530000 [ 36.051065][ T5033] Memory failure: 0x10fa20: recovery action for clean LRU page: Recovered [ 36.051179][ T5033] Injecting memory failure for pfn 0x10fa30 at process virtual address 0x20540000 [ 36.051235][ T5033] Memory failure: 0x10fa30: recovery action for clean LRU page: Recovered [ 36.051252][ T5033] Injecting memory failure for pfn 0x10fa40 at process virtual address 0x20550000 [ 36.051308][ T5033] Memory failure: 0x10fa40: recovery action for clean LRU page: Recovered [ 36.051407][ T5033] Injecting memory failure for pfn 0x10fa50 at process virtual address 0x20560000 [ 36.051448][ T5033] Memory failure: 0x10fa50: recovery action for clean LRU page: Recovered [ 36.051465][ T5033] Injecting memory failure for pfn 0x10fa60 at process virtual address 0x20570000 [ 36.051661][ T5033] Memory failure: 0x10fa60: recovery action for clean LRU page: Recovered [ 36.051809][ T5033] Injecting memory failure for pfn 0x10fa70 at process virtual address 0x20580000 [ 36.051883][ T5033] Memory failure: 0x10fa70: recovery action for clean LRU page: Recovered [ 36.051902][ T5033] Injecting memory failure for pfn 0x10fa80 at process virtual address 0x20590000 [ 36.052362][ T5033] Memory failure: 0x10fa80: recovery action for clean LRU page: Recovered [ 36.052549][ T5033] Injecting memory failure for pfn 0x10fa90 at process virtual address 0x205a0000 [ 36.052602][ T5033] Memory failure: 0x10fa90: recovery action for clean LRU page: Recovered [ 36.052621][ T5033] Injecting memory failure for pfn 0x10faa0 at process virtual address 0x205b0000 [ 36.052723][ T5033] Memory failure: 0x10faa0: recovery action for clean LRU page: Recovered [ 36.052829][ T5033] Injecting memory failure for pfn 0x10fab0 at process virtual address 0x205c0000 [ 36.052871][ T5033] Memory failure: 0x10fab0: recovery action for clean LRU page: Recovered [ 36.052889][ T5033] Injecting memory failure for pfn 0x10fac0 at process virtual address 0x205d0000 [ 36.052930][ T5033] Memory failure: 0x10fac0: recovery action for clean LRU page: Recovered [ 36.053031][ T5033] Injecting memory failure for pfn 0x10fad0 at process virtual address 0x205e0000 [ 36.053072][ T5033] Memory failure: 0x10fad0: recovery action for clean LRU page: Recovered [ 36.053090][ T5033] Injecting memory failure for pfn 0x10fae0 at process virtual address 0x205f0000 [ 36.053130][ T5033] Memory failure: 0x10fae0: recovery action for clean LRU page: Recovered [ 36.053294][ T5033] Injecting memory failure for pfn 0x10faf0 at process virtual address 0x20600000 [ 36.053407][ T5033] Memory failure: 0x10faf0: recovery action for clean LRU page: Recovered [ 36.053426][ T5033] Injecting memory failure for pfn 0x10fb00 at process virtual address 0x20610000 [ 36.053465][ T5033] Memory failure: 0x10fb00: recovery action for clean LRU page: Recovered [ 36.053564][ T5033] Injecting memory failure for pfn 0x10fb10 at process virtual address 0x20620000 [ 36.053605][ T5033] Memory failure: 0x10fb10: recovery action for clean LRU page: Recovered [ 36.053623][ T5033] Injecting memory failure for pfn 0x10fb20 at process virtual address 0x20630000 [ 36.053663][ T5033] Memory failure: 0x10fb20: recovery action for clean LRU page: Recovered [ 36.053844][ T5033] Injecting memory failure for pfn 0x10fb30 at process virtual address 0x20640000 [ 36.053891][ T5033] Memory failure: 0x10fb30: recovery action for clean LRU page: Recovered [ 36.053910][ T5033] Injecting memory failure for pfn 0x10fb40 at process virtual address 0x20650000 [ 36.053951][ T5033] Memory failure: 0x10fb40: recovery action for clean LRU page: Recovered [ 36.054135][ T5033] Injecting memory failure for pfn 0x10fb50 at process virtual address 0x20660000 [ 36.054179][ T5033] Memory failure: 0x10fb50: recovery action for clean LRU page: Recovered [ 36.054199][ T5033] Injecting memory failure for pfn 0x10fb60 at process virtual address 0x20670000 [ 36.054239][ T5033] Memory failure: 0x10fb60: recovery action for clean LRU page: Recovered [ 36.054354][ T5033] Injecting memory failure for pfn 0x10fb70 at process virtual address 0x20680000 [ 36.054395][ T5033] Memory failure: 0x10fb70: recovery action for clean LRU page: Recovered [ 36.054414][ T5033] Injecting memory failure for pfn 0x10fb80 at process virtual address 0x20690000 [ 36.054454][ T5033] Memory failure: 0x10fb80: recovery action for clean LRU page: Recovered [ 36.054565][ T5033] Injecting memory failure for pfn 0x10fb90 at process virtual address 0x206a0000 [ 36.054606][ T5033] Memory failure: 0x10fb90: recovery action for clean LRU page: Recovered [ 36.054624][ T5033] Injecting memory failure for pfn 0x10fba0 at process virtual address 0x206b0000 [ 36.054664][ T5033] Memory failure: 0x10fba0: recovery action for clean LRU page: Recovered [ 36.054764][ T5033] Injecting memory failure for pfn 0x10fbb0 at process virtual address 0x206c0000 [ 36.054805][ T5033] Memory failure: 0x10fbb0: recovery action for clean LRU page: Recovered [ 36.054822][ T5033] Injecting memory failure for pfn 0x10fbc0 at process virtual address 0x206d0000 [ 36.054924][ T5033] Memory failure: 0x10fbc0: recovery action for clean LRU page: Recovered [ 36.055036][ T5033] Injecting memory failure for pfn 0x10fbd0 at process virtual address 0x206e0000 [ 36.055077][ T5033] Memory failure: 0x10fbd0: recovery action for clean LRU page: Recovered [ 36.055096][ T5033] Injecting memory failure for pfn 0x10fbe0 at process virtual address 0x206f0000 [ 36.055136][ T5033] Memory failure: 0x10fbe0: recovery action for clean LRU page: Recovered [ 36.055699][ T5033] Injecting memory failure for pfn 0x10fbf0 at process virtual address 0x20700000 [ 36.055754][ T5033] Memory failure: 0x10fbf0: recovery action for clean LRU page: Recovered [ 36.055778][ T5033] Injecting memory failure for pfn 0x136e00 at process virtual address 0x20710000 [ 36.055819][ T5033] Memory failure: 0x136e00: recovery action for clean LRU page: Recovered [ 36.055925][ T5033] Injecting memory failure for pfn 0x136e10 at process virtual address 0x20720000 [ 36.056024][ T5033] Memory failure: 0x136e10: recovery action for clean LRU page: Recovered [ 36.056049][ T5033] Injecting memory failure for pfn 0x136e20 at process virtual address 0x20730000 [ 36.056090][ T5033] Memory failure: 0x136e20: recovery action for clean LRU page: Recovered [ 36.056196][ T5033] Injecting memory failure for pfn 0x136e30 at process virtual address 0x20740000 [ 36.056237][ T5033] Memory failure: 0x136e30: recovery action for clean LRU page: Recovered [ 36.056255][ T5033] Injecting memory failure for pfn 0x136e40 at process virtual address 0x20750000 [ 36.056304][ T5033] Memory failure: 0x136e40: recovery action for clean LRU page: Recovered [ 36.056404][ T5033] Injecting memory failure for pfn 0x136e50 at process virtual address 0x20760000 [ 36.056445][ T5033] Memory failure: 0x136e50: recovery action for clean LRU page: Recovered [ 36.056463][ T5033] Injecting memory failure for pfn 0x136e60 at process virtual address 0x20770000 [ 36.056502][ T5033] Memory failure: 0x136e60: recovery action for clean LRU page: Recovered [ 36.056606][ T5033] Injecting memory failure for pfn 0x136e70 at process virtual address 0x20780000 [ 36.056647][ T5033] Memory failure: 0x136e70: recovery action for clean LRU page: Recovered [ 36.056665][ T5033] Injecting memory failure for pfn 0x136e80 at process virtual address 0x20790000 [ 36.056705][ T5033] Memory failure: 0x136e80: recovery action for clean LRU page: Recovered [ 36.056802][ T5033] Injecting memory failure for pfn 0x136e90 at process virtual address 0x207a0000 [ 36.056843][ T5033] Memory failure: 0x136e90: recovery action for clean LRU page: Recovered [ 36.056861][ T5033] Injecting memory failure for pfn 0x136ea0 at process virtual address 0x207b0000 [ 36.059055][ T5033] Memory failure: 0x136ea0: recovery action for clean LRU page: Recovered [ 36.059179][ T5033] Injecting memory failure for pfn 0x136eb0 at process virtual address 0x207c0000 [ 36.059227][ T5033] Memory failure: 0x136eb0: recovery action for clean LRU page: Recovered [ 36.059247][ T5033] Injecting memory failure for pfn 0x136ec0 at process virtual address 0x207d0000 [ 36.059301][ T5033] Memory failure: 0x136ec0: recovery action for clean LRU page: Recovered [ 36.059415][ T5033] Injecting memory failure for pfn 0x136ed0 at process virtual address 0x207e0000 [ 36.059458][ T5033] Memory failure: 0x136ed0: recovery action for clean LRU page: Recovered [ 36.059477][ T5033] Injecting memory failure for pfn 0x136ee0 at process virtual address 0x207f0000 [ 36.059519][ T5033] Memory failure: 0x136ee0: recovery action for clean LRU page: Recovered [ 36.059654][ T5033] Injecting memory failure for pfn 0x136ef0 at process virtual address 0x20800000 [ 36.059726][ T5033] Memory failure: 0x136ef0: recovery action for clean LRU page: Recovered [ 36.059745][ T5033] Injecting memory failure for pfn 0x136f00 at process virtual address 0x20810000 [ 36.059845][ T5033] Memory failure: 0x136f00: recovery action for clean LRU page: Recovered [ 36.059958][ T5033] Injecting memory failure for pfn 0x136f10 at process virtual address 0x20820000 [ 36.060206][ T5033] Memory failure: 0x136f10: recovery action for clean LRU page: Recovered [ 36.060229][ T5033] Injecting memory failure for pfn 0x136f20 at process virtual address 0x20830000 [ 36.060270][ T5033] Memory failure: 0x136f20: recovery action for clean LRU page: Recovered [ 36.060401][ T5033] Injecting memory failure for pfn 0x136f30 at process virtual address 0x20840000 [ 36.060442][ T5033] Memory failure: 0x136f30: recovery action for clean LRU page: Recovered [ 36.060461][ T5033] Injecting memory failure for pfn 0x136f40 at process virtual address 0x20850000 [ 36.060501][ T5033] Memory failure: 0x136f40: recovery action for clean LRU page: Recovered [ 36.060600][ T5033] Injecting memory failure for pfn 0x136f50 at process virtual address 0x20860000 [ 36.060642][ T5033] Memory failure: 0x136f50: recovery action for clean LRU page: Recovered [ 36.060660][ T5033] Injecting memory failure for pfn 0x136f60 at process virtual address 0x20870000 [ 36.060700][ T5033] Memory failure: 0x136f60: recovery action for clean LRU page: Recovered [ 36.060798][ T5033] Injecting memory failure for pfn 0x136f70 at process virtual address 0x20880000 [ 36.060839][ T5033] Memory failure: 0x136f70: recovery action for clean LRU page: Recovered [ 36.060915][ T5033] Injecting memory failure for pfn 0x136f80 at process virtual address 0x20890000 [ 36.060965][ T5033] Memory failure: 0x136f80: recovery action for clean LRU page: Recovered [ 36.061073][ T5033] Injecting memory failure for pfn 0x136f90 at process virtual address 0x208a0000 [ 36.061115][ T5033] Memory failure: 0x136f90: recovery action for clean LRU page: Recovered [ 36.061134][ T5033] Injecting memory failure for pfn 0x136fa0 at process virtual address 0x208b0000 [ 36.061174][ T5033] Memory failure: 0x136fa0: recovery action for clean LRU page: Recovered [ 36.061308][ T5033] Injecting memory failure for pfn 0x136fb0 at process virtual address 0x208c0000 [ 36.061380][ T5033] Memory failure: 0x136fb0: recovery action for clean LRU page: Recovered [ 36.061398][ T5033] Injecting memory failure for pfn 0x136fc0 at process virtual address 0x208d0000 [ 36.061438][ T5033] Memory failure: 0x136fc0: recovery action for clean LRU page: Recovered [ 36.061538][ T5033] Injecting memory failure for pfn 0x136fd0 at process virtual address 0x208e0000 [ 36.061579][ T5033] Memory failure: 0x136fd0: recovery action for clean LRU page: Recovered [ 36.061597][ T5033] Injecting memory failure for pfn 0x136fe0 at process virtual address 0x208f0000 [ 36.061637][ T5033] Memory failure: 0x136fe0: recovery action for clean LRU page: Recovered [ 36.061781][ T5033] Injecting memory failure for pfn 0x136ff0 at process virtual address 0x20900000 [ 36.061886][ T5033] Memory failure: 0x136ff0: recovery action for clean LRU page: Recovered [ 36.061904][ T5033] Injecting memory failure for pfn 0x124800 at process virtual address 0x20910000 [ 36.061944][ T5033] Memory failure: 0x124800: recovery action for clean LRU page: Recovered [ 36.062132][ T5033] Injecting memory failure for pfn 0x124810 at process virtual address 0x20920000 [ 36.062174][ T5033] Memory failure: 0x124810: recovery action for clean LRU page: Recovered [ 36.062193][ T5033] Injecting memory failure for pfn 0x124820 at process virtual address 0x20930000 [ 36.062233][ T5033] Memory failure: 0x124820: recovery action for clean LRU page: Recovered [ 36.062346][ T5033] Injecting memory failure for pfn 0x124830 at process virtual address 0x20940000 [ 36.062387][ T5033] Memory failure: 0x124830: recovery action for clean LRU page: Recovered [ 36.062406][ T5033] Injecting memory failure for pfn 0x124840 at process virtual address 0x20950000 [ 36.062446][ T5033] Memory failure: 0x124840: recovery action for clean LRU page: Recovered [ 36.062627][ T5033] Injecting memory failure for pfn 0x124850 at process virtual address 0x20960000 [ 36.062669][ T5033] Memory failure: 0x124850: recovery action for clean LRU page: Recovered [ 36.062688][ T5033] Injecting memory failure for pfn 0x124860 at process virtual address 0x20970000 [ 36.062728][ T5033] Memory failure: 0x124860: recovery action for clean LRU page: Recovered [ 36.062835][ T5033] Injecting memory failure for pfn 0x124870 at process virtual address 0x20980000 [ 36.062876][ T5033] Memory failure: 0x124870: recovery action for clean LRU page: Recovered [ 36.062894][ T5033] Injecting memory failure for pfn 0x124880 at process virtual address 0x20990000 [ 36.062934][ T5033] Memory failure: 0x124880: recovery action for clean LRU page: Recovered [ 36.063034][ T5033] Injecting memory failure for pfn 0x124890 at process virtual address 0x209a0000 [ 36.063136][ T5033] Memory failure: 0x124890: recovery action for clean LRU page: Recovered [ 36.063158][ T5033] Injecting memory failure for pfn 0x1248a0 at process virtual address 0x209b0000 [ 36.063198][ T5033] Memory failure: 0x1248a0: recovery action for clean LRU page: Recovered [ 36.063312][ T5033] Injecting memory failure for pfn 0x1248b0 at process virtual address 0x209c0000 [ 36.063353][ T5033] Memory failure: 0x1248b0: recovery action for clean LRU page: Recovered [ 36.063370][ T5033] Injecting memory failure for pfn 0x1248c0 at process virtual address 0x209d0000 [ 36.063410][ T5033] Memory failure: 0x1248c0: recovery action for clean LRU page: Recovered [ 36.063513][ T5033] Injecting memory failure for pfn 0x1248d0 at process virtual address 0x209e0000 [ 36.063553][ T5033] Memory failure: 0x1248d0: recovery action for clean LRU page: Recovered [ 36.063571][ T5033] Injecting memory failure for pfn 0x1248e0 at process virtual address 0x209f0000 [ 36.063611][ T5033] Memory failure: 0x1248e0: recovery action for clean LRU page: Recovered [ 36.063780][ T5033] Injecting memory failure for pfn 0x1248f0 at process virtual address 0x20a00000 [ 36.063941][ T5033] Memory failure: 0x1248f0: recovery action for clean LRU page: Recovered [ 36.063959][ T5033] Injecting memory failure for pfn 0x124900 at process virtual address 0x20a10000 [ 36.063999][ T5033] Memory failure: 0x124900: recovery action for clean LRU page: Recovered [ 36.064105][ T5033] Injecting memory failure for pfn 0x124910 at process virtual address 0x20a20000 [ 36.064146][ T5033] Memory failure: 0x124910: recovery action for clean LRU page: Recovered [ 36.064285][ T5033] Injecting memory failure for pfn 0x124920 at process virtual address 0x20a30000 [ 36.064333][ T5033] Memory failure: 0x124920: recovery action for clean LRU page: Recovered [ 36.064445][ T5033] Injecting memory failure for pfn 0x124930 at process virtual address 0x20a40000 [ 36.064487][ T5033] Memory failure: 0x124930: recovery action for clean LRU page: Recovered [ 36.064505][ T5033] Injecting memory failure for pfn 0x124940 at process virtual address 0x20a50000 [ 36.064546][ T5033] Memory failure: 0x124940: recovery action for clean LRU page: Recovered [ 36.064648][ T5033] Injecting memory failure for pfn 0x124950 at process virtual address 0x20a60000 [ 36.064689][ T5033] Memory failure: 0x124950: recovery action for clean LRU page: Recovered [ 36.064707][ T5033] Injecting memory failure for pfn 0x124960 at process virtual address 0x20a70000 [ 36.064747][ T5033] Memory failure: 0x124960: recovery action for clean LRU page: Recovered [ 36.064858][ T5033] Injecting memory failure for pfn 0x124970 at process virtual address 0x20a80000 [ 36.064905][ T5033] Memory failure: 0x124970: recovery action for clean LRU page: Recovered [ 36.064923][ T5033] Injecting memory failure for pfn 0x124980 at process virtual address 0x20a90000 [ 36.064962][ T5033] Memory failure: 0x124980: recovery action for clean LRU page: Recovered [ 36.065061][ T5033] Injecting memory failure for pfn 0x124990 at process virtual address 0x20aa0000 [ 36.065102][ T5033] Memory failure: 0x124990: recovery action for clean LRU page: Recovered [ 36.065120][ T5033] Injecting memory failure for pfn 0x1249a0 at process virtual address 0x20ab0000 [ 36.065160][ T5033] Memory failure: 0x1249a0: recovery action for clean LRU page: Recovered [ 36.065387][ T5033] Injecting memory failure for pfn 0x1249b0 at process virtual address 0x20ac0000 [ 36.065434][ T5033] Memory failure: 0x1249b0: recovery action for clean LRU page: Recovered [ 36.065454][ T5033] Injecting memory failure for pfn 0x1249c0 at process virtual address 0x20ad0000 [ 36.065494][ T5033] Memory failure: 0x1249c0: recovery action for clean LRU page: Recovered [ 36.065602][ T5033] Injecting memory failure for pfn 0x1249d0 at process virtual address 0x20ae0000 [ 36.065644][ T5033] Memory failure: 0x1249d0: recovery action for clean LRU page: Recovered [ 36.065662][ T5033] Injecting memory failure for pfn 0x1249e0 at process virtual address 0x20af0000 [ 36.065702][ T5033] Memory failure: 0x1249e0: recovery action for clean LRU page: Recovered [ 36.065819][ T5033] Injecting memory failure for pfn 0x1249f0 at process virtual address 0x20b00000 [ 36.065866][ T5033] Memory failure: 0x1249f0: recovery action for clean LRU page: Recovered [ 36.065884][ T5033] Injecting memory failure for pfn 0x124a00 at process virtual address 0x20b10000 [ 36.065924][ T5033] Memory failure: 0x124a00: recovery action for clean LRU page: Recovered [ 36.066020][ T5033] Injecting memory failure for pfn 0x124a10 at process virtual address 0x20b20000 [ 36.066075][ T5033] Memory failure: 0x124a10: recovery action for clean LRU page: Recovered [ 36.066094][ T5033] Injecting memory failure for pfn 0x11d128 at process virtual address 0x20b30000 [ 36.066121][ T5033] Memory failure: 0x11d128: recovery action for clean LRU page: Recovered [ 36.066129][ T5033] Injecting memory failure for pfn 0x11a916 at process virtual address 0x20b34000 [ 36.066153][ T5033] Memory failure: 0x11a916: recovery action for clean LRU page: Recovered [ 36.066166][ T5033] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20b36000 [ 36.066204][ T5033] Memory failure: 0x21d09f: unhandlable page. [ 36.066210][ T5033] Memory failure: 0x21d09f: recovery action for get hwpoison page: Ignored [ 36.182032][ T5038] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 36.191596][ T5040] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.200278][ T5040] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.203431][ T5040] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 36.570950][ T5056] EXT4-fs: Ignoring removed bh option [ 36.570971][ T5056] EXT4-fs: Ignoring removed oldalloc option [ 36.571693][ T5056] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.571704][ T5056] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.578344][ T5056] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.579909][ T5056] EXT4-fs (loop3): 1 truncate cleaned up [ 36.581578][ T5056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.616527][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.676716][ T5063] FAT-fs (loop4): Directory bread(block 64) failed [ 36.676749][ T5063] FAT-fs (loop4): Directory bread(block 65) failed [ 36.676777][ T5063] FAT-fs (loop4): Directory bread(block 66) failed [ 36.676788][ T5063] FAT-fs (loop4): Directory bread(block 67) failed [ 36.676813][ T5063] FAT-fs (loop4): Directory bread(block 68) failed [ 36.676824][ T5063] FAT-fs (loop4): Directory bread(block 69) failed [ 36.676846][ T5063] FAT-fs (loop4): Directory bread(block 70) failed [ 36.676857][ T5063] FAT-fs (loop4): Directory bread(block 71) failed [ 36.676879][ T5063] FAT-fs (loop4): Directory bread(block 72) failed [ 36.676889][ T5063] FAT-fs (loop4): Directory bread(block 73) failed [ 36.696722][ T4777] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.846355][ T4777] usb 1-1: Using ep0 maxpacket: 32 [ 36.848985][ T4777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.848997][ T4777] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 36.850515][ T4777] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.850532][ T4777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.850544][ T4777] usb 1-1: Product: syz [ 36.850551][ T4777] usb 1-1: Manufacturer: syz [ 36.850559][ T4777] usb 1-1: SerialNumber: syz [ 36.861776][ T4777] usb 1-1: config 0 descriptor?? [ 36.912089][ T5084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.955061][ T5090] netlink: 'syz.4.98': attribute type 11 has an invalid length. [ 36.955094][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 36.957920][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.089079][ T24] usb 1-1: USB disconnect, device number 2 [ 37.157701][ T5111] Zero length message leads to an empty skb [ 37.319357][ T5128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.329976][ T5128] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz.3.115: invalid size [ 37.345717][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.435589][ T50] Bluetooth: hci2: command tx timeout [ 37.435624][ T50] Bluetooth: hci1: command tx timeout [ 37.435996][ T50] Bluetooth: hci4: command tx timeout [ 37.516234][ T50] Bluetooth: hci3: command tx timeout [ 37.516270][ T50] Bluetooth: hci0: command tx timeout [ 37.599138][ T5158] EXT4-fs: Ignoring removed i_version option [ 37.600828][ T5158] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.604080][ T5158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.646888][ T5158] EXT4-fs error (device loop1): __ext4_remount:6837: comm syz.1.126: Abort forced by user [ 37.648936][ T5158] EXT4-fs (loop1): Remounting filesystem read-only [ 37.648973][ T5158] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.747955][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.795064][ T5175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.819616][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.957562][ T5196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.979638][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 38.159670][ T5214] pimreg: entered allmulticast mode [ 38.208987][ T5216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.257898][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.350233][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 38.351913][ T5238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.158'. [ 38.351996][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 38.352004][ T5238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.158'. [ 38.361147][ T5240] fuse: fd is not a fuse device [ 38.404228][ T5246] 9pnet_fd: p9_fd_create_tcp (5246): problem connecting socket to 127.0.0.1 [ 38.958170][ T5325] sctp: [Deprecated]: syz.0.197 (pid 5325) Use of int in max_burst socket option deprecated. [ 38.958170][ T5325] Use struct sctp_assoc_value instead [ 38.971469][ T5327] set_capacity_and_notify: 16 callbacks suppressed [ 38.972712][ T5327] loop1: detected capacity change from 0 to 512 [ 38.975239][ T5327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.986565][ T5327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 38.986612][ T5327] System zones: 1-2, 4-12, 8-8 [ 38.986944][ T5327] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.199: iget: bad i_size value: 38620345925642 [ 38.986969][ T5327] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.987300][ T5327] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.199: couldn't read orphan inode 15 (err -117) [ 38.988350][ T5327] loop1: lost filesystem error report for type 5 error -117 [ 38.989902][ T5327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.002433][ T5333] loop0: detected capacity change from 0 to 512 [ 39.002757][ T5333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.008684][ T5333] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 39.008736][ T5333] System zones: 1-12 [ 39.011458][ T5333] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.201: invalid indirect mapped block 8 (level 2) [ 39.011489][ T5333] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.015266][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 39.015296][ C1] EXT4-fs (loop0): initial error at time 39: ext4_free_branches:1023: inode 11 [ 39.015332][ C1] EXT4-fs (loop0): last error at time 39: ext4_free_branches:1023: inode 11 [ 39.027954][ T5333] EXT4-fs (loop0): 1 truncate cleaned up [ 39.031024][ T5327] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.199: bg 0: block 5: invalid block bitmap [ 39.033857][ T5327] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 39.033891][ T5327] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.033891][ T5327] [ 39.033906][ T5327] EXT4-fs (loop1): Total free blocks count 0 [ 39.033920][ T5327] EXT4-fs (loop1): Free/Dirty block details [ 39.033936][ T5327] EXT4-fs (loop1): free_blocks=0 [ 39.033950][ T5327] EXT4-fs (loop1): dirty_blocks=2 [ 39.033961][ T5327] EXT4-fs (loop1): Block reservation details [ 39.033971][ T5327] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 39.036936][ T5333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.044412][ T5330] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 39.079396][ T4675] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.079976][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.189704][ T5339] loop2: detected capacity change from 0 to 8192 [ 39.252826][ T5350] loop0: detected capacity change from 0 to 256 [ 39.287119][ T5350] FAT-fs (loop0): Directory bread(block 64) failed [ 39.287150][ T5350] FAT-fs (loop0): Directory bread(block 65) failed [ 39.287173][ T5350] FAT-fs (loop0): Directory bread(block 66) failed [ 39.287184][ T5350] FAT-fs (loop0): Directory bread(block 67) failed [ 39.287207][ T5350] FAT-fs (loop0): Directory bread(block 68) failed [ 39.287217][ T5350] FAT-fs (loop0): Directory bread(block 69) failed [ 39.287248][ T5350] FAT-fs (loop0): Directory bread(block 70) failed [ 39.287261][ T5350] FAT-fs (loop0): Directory bread(block 71) failed [ 39.287284][ T5350] FAT-fs (loop0): Directory bread(block 72) failed [ 39.287295][ T5350] FAT-fs (loop0): Directory bread(block 73) failed [ 39.349249][ T5358] overlayfs: failed to resolve './cgroup': -2 [ 39.503642][ T30] audit: type=1326 audit(39.490:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.4.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95777a28 code=0x7ffc0000 [ 39.503684][ T30] audit: type=1326 audit(39.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.4.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95777a28 code=0x7ffc0000 [ 39.511989][ T30] audit: type=1326 audit(39.500:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.4.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff95777a28 code=0x7ffc0000 [ 39.513366][ T5380] 9p: Bad value for 'wfdno' [ 39.516267][ T4672] Bluetooth: hci1: command tx timeout [ 39.516288][ T4672] Bluetooth: hci2: command tx timeout [ 39.516303][ T4672] Bluetooth: hci4: command tx timeout [ 39.519668][ T30] audit: type=1326 audit(39.500:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.4.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95777a28 code=0x7ffc0000 [ 39.519710][ T30] audit: type=1326 audit(39.500:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.4.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95777a28 code=0x7ffc0000 [ 39.519736][ T30] audit: type=1326 audit(39.500:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.4.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff95777a28 code=0x7ffc0000 [ 39.519760][ T30] audit: type=1326 audit(39.500:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.4.222" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95777a28 code=0x7ffc0000 [ 39.591763][ T5388] team0 (unregistering): Port device team_slave_0 removed [ 39.594976][ T5388] team0 (unregistering): Port device team_slave_1 removed [ 39.596362][ T4672] Bluetooth: hci3: command tx timeout [ 39.596404][ T50] Bluetooth: hci0: command tx timeout [ 39.689831][ T5397] loop2: detected capacity change from 0 to 1024 [ 39.718794][ T5397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.750534][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.921338][ T5419] hsr0: entered promiscuous mode [ 39.922807][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 39.926111][ T5419] hsr_slave_0: left promiscuous mode [ 39.927491][ T5419] hsr_slave_1: left promiscuous mode [ 39.952943][ T5419] hsr0 (unregistering): left promiscuous mode [ 40.140925][ T5440] loop2: detected capacity change from 0 to 256 [ 40.243203][ T5456] input: syz1 as /devices/virtual/input/input4 [ 40.268876][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 40.377094][ T5469] loop1: detected capacity change from 0 to 1024 [ 40.378633][ T5469] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.378645][ T5469] EXT4-fs: inline encryption not supported [ 40.383310][ T5469] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.412418][ T5469] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.262: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.412449][ T5469] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.415274][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 40.415290][ C1] EXT4-fs (loop1): initial error at time 40: ext4_map_blocks:791: inode 3: block 2 [ 40.415314][ C1] EXT4-fs (loop1): last error at time 40: ext4_map_blocks:791: inode 3: block 2 [ 40.430102][ T5469] EXT4-fs (loop1): Remounting filesystem read-only [ 40.430134][ T5469] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 40.430186][ T5469] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 40.431039][ T5469] EXT4-fs (loop1): 1 orphan inode deleted [ 40.431603][ T5469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.443874][ T5469] EXT4-fs (loop1): shut down requested (1) [ 40.495738][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.546742][ T5486] loop1: detected capacity change from 0 to 1024 [ 40.548668][ T5486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.571399][ T5486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.601564][ T5486] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.271: bg 0: block 112: padding at end of block bitmap is not set [ 40.604740][ T5486] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 40.604778][ T5486] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.604778][ T5486] [ 40.604787][ T5486] EXT4-fs (loop1): Total free blocks count 0 [ 40.604795][ T5486] EXT4-fs (loop1): Free/Dirty block details [ 40.604804][ T5486] EXT4-fs (loop1): free_blocks=0 [ 40.604813][ T5486] EXT4-fs (loop1): dirty_blocks=0 [ 40.604819][ T5486] EXT4-fs (loop1): Block reservation details [ 40.604826][ T5486] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 40.627853][ T4670] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.628609][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.657331][ T5501] netlink: 64 bytes leftover after parsing attributes in process `syz.4.278'. [ 40.683394][ T5504] warning: `syz.1.277' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 40.767647][ T5512] loop1: detected capacity change from 0 to 512 [ 40.770945][ T5512] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.787518][ T5512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 40.787592][ T5512] System zones: 1-12 [ 40.787933][ T5512] EXT4-fs (loop1): 1 truncate cleaned up [ 40.788393][ T5512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.845524][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.096560][ T5529] Injecting memory failure for pfn 0x1230f7 at process virtual address 0x20f0f000 [ 41.108818][ T5529] Memory failure: 0x1230f7: recovery action for clean LRU page: Recovered [ 41.110401][ T5529] Injecting memory failure for pfn 0x1230f8 at process virtual address 0x20f10000 [ 41.112419][ T5529] Memory failure: 0x1230f8: recovery action for clean LRU page: Recovered [ 41.148384][ T5563] loop0: detected capacity change from 0 to 2048 [ 41.181352][ T5563] GPT:first_usable_lbas don't match. [ 41.181373][ T5563] GPT:34 != 290 [ 41.181395][ T5563] GPT: Use GNU Parted to correct GPT errors. [ 41.181438][ T5563] loop0: p1 p2 p3 [ 41.261751][ T5572] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.308: inode has both inline data and extents flags [ 41.261794][ T5572] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.261924][ T5572] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.308: couldn't read orphan inode 15 (err -117) [ 41.261944][ T5572] loop3: lost filesystem error report for type 5 error -117 [ 41.313383][ T5572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.414066][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.448235][ T4662] udevd[4662]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 41.452401][ T5570] udevd[5570]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 41.455821][ T4660] udevd[4660]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.872879][ T5611] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.896780][ T5611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.946364][ T5611] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 41.958837][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.020607][ T5621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 42.373731][ T5634] vhci_hcd vhci_hcd.2: default hub control req: 010b v0000 i0000 l0 [ 42.567462][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 42.771000][ T5659] trusted_key: syz.2.346 sent an empty control message without MSG_MORE. [ 42.871752][ T5669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.890140][ T5669] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.351: corrupted inode contents [ 42.890639][ T5669] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.351: mark_inode_dirty error [ 42.891159][ T5669] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.351: corrupted inode contents [ 42.891350][ T5669] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.351: mark_inode_dirty error [ 42.891488][ T5669] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.351: corrupted inode contents [ 42.891618][ T5669] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.351: mark_inode_dirty error [ 42.891765][ T5669] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.351: corrupted inode contents [ 42.893505][ T5669] EXT4-fs error (device loop1): ext4_truncate:4690: inode #15: comm syz.1.351: mark_inode_dirty error [ 42.893658][ T5669] EXT4-fs error (device loop1) in ext4_setattr:6120: Corrupt filesystem [ 42.929761][ T5669] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.351: corrupted inode contents [ 42.983180][ T4670] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.983955][ T4670] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.984108][ T4670] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 42.987142][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.035863][ T4672] Bluetooth: hci2: command 0x2016 tx timeout [ 43.133297][ T5693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 43.133331][ T5693] block nbd0: Unsupported socket: should be TCP or UNIX. [ 43.222758][ T5698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.240922][ T5702] fuse: fd is not a fuse device [ 43.242367][ T5702] overlayfs: failed to resolve './file0/file1': -2 [ 43.252030][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.376158][ T3503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.413733][ T3503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.451129][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 43.473810][ T4672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.475824][ T4672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.484895][ T4672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.490813][ T4672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.492624][ T4672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.496117][ T3503] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.510730][ T5721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.552902][ T5721] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.373: bg 0: block 234: padding at end of block bitmap is not set [ 43.557868][ T5721] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 43.559956][ T3503] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.563534][ T5721] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.563534][ T5721] [ 43.567889][ T5727] overlayfs: failed to clone upperpath [ 43.568507][ T5721] EXT4-fs (loop1): Total free blocks count 0 [ 43.568520][ T5721] EXT4-fs (loop1): Free/Dirty block details [ 43.568533][ T5721] EXT4-fs (loop1): free_blocks=0 [ 43.568544][ T5721] EXT4-fs (loop1): dirty_blocks=16 [ 43.568551][ T5721] EXT4-fs (loop1): Block reservation details [ 43.568557][ T5721] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 43.605515][ T4670] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 43.606360][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.649844][ T5733] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.377: corrupted in-inode xattr: invalid ea_ino [ 43.649879][ T5733] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.650034][ T5733] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.377: couldn't read orphan inode 15 (err -117) [ 43.650050][ T5733] loop3: lost filesystem error report for type 5 error -117 [ 43.650606][ T5733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.702901][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.738400][ T5750] use of bytesused == 0 is deprecated and will be removed in the future, [ 43.740929][ T5750] use the actual size instead. [ 43.797497][ T3503] bridge_slave_1: left allmulticast mode [ 43.797549][ T3503] bridge_slave_1: left promiscuous mode [ 43.797814][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.801744][ T3503] bridge_slave_0: left allmulticast mode [ 43.801766][ T3503] bridge_slave_0: left promiscuous mode [ 43.802182][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.972654][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.999084][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.006672][ T3503] bond0 (unregistering): Released all slaves [ 44.012089][ T5761] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 44.012131][ T5761] netlink: 1 bytes leftover after parsing attributes in process `syz.3.386'. [ 44.121788][ T5782] Injecting memory failure for pfn 0x11fc37 at process virtual address 0x20000000 [ 44.134556][ T5782] Memory failure: 0x11fc37: Sending SIGBUS to syz.4.392:5782 due to hardware memory corruption [ 44.134620][ T5782] Memory failure: 0x11fc37: recovery action for dirty LRU page: Recovered [ 44.134632][ T5782] Injecting memory failure for pfn 0x121ac4 at process virtual address 0x20001000 [ 44.134940][ T5782] Memory failure: 0x121ac4: Sending SIGBUS to syz.4.392:5782 due to hardware memory corruption [ 44.134966][ T5782] Memory failure: 0x121ac4: recovery action for dirty LRU page: Recovered [ 44.134987][ T5782] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20002000 [ 44.135032][ T5782] Memory failure: 0x21d09f: Sending SIGBUS to syz.4.392:5782 due to hardware memory corruption [ 44.135048][ T5782] Memory failure: 0x21d09f: recovery action for already poisoned page: Failed [ 44.252797][ T5802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 44.298542][ T5802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.397'. [ 44.319337][ T4360] 8021q: adding VLAN 0 to HW filter on device eth0 [ 44.370467][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.375804][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.376164][ T5718] bridge_slave_0: entered allmulticast mode [ 44.376807][ T5718] bridge_slave_0: entered promiscuous mode [ 44.382387][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.382443][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.382504][ T5718] bridge_slave_1: entered allmulticast mode [ 44.382938][ T5718] bridge_slave_1: entered promiscuous mode [ 44.428522][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.428564][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.437531][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.438841][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.463665][ T3503] veth1_macvtap: left promiscuous mode [ 44.463711][ T3503] veth0_macvtap: left promiscuous mode [ 44.463764][ T3503] veth1_vlan: left promiscuous mode [ 44.463799][ T3503] veth0_vlan: left promiscuous mode [ 44.660450][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 44.673437][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 44.724394][ T5718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.730568][ T5718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.734815][ T4360] 8021q: adding VLAN 0 to HW filter on device eth1 [ 44.777025][ T5718] team0: Port device team_slave_0 added [ 44.779013][ T5718] team0: Port device team_slave_1 added [ 44.792140][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.795423][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.795510][ T5718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.796191][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.796207][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.796230][ T5718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.816318][ T5868] set_capacity_and_notify: 7 callbacks suppressed [ 44.817480][ T5868] loop1: detected capacity change from 0 to 1024 [ 44.832430][ T5868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.861902][ T5718] hsr_slave_0: entered promiscuous mode [ 44.862580][ T5718] hsr_slave_1: entered promiscuous mode [ 44.862803][ T5718] debugfs: 'hsr0' already exists in 'hsr' [ 44.862814][ T5718] Cannot create hsr debugfs directory [ 44.893135][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.924980][ T5884] loop3: detected capacity change from 0 to 1024 [ 44.927547][ T5884] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 44.929309][ T5884] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.932304][ T5884] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 44.932436][ T5884] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.939646][ T5884] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.422: Inode bitmap for bg 0 marked uninitialized [ 44.939679][ T5884] loop3: lost filesystem error report for type 5 error -117 [ 44.939820][ T5884] EXT4-fs (loop3): Remounting filesystem read-only [ 44.940396][ T5884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.958284][ T5884] EXT4-fs (loop3): shut down requested (1) [ 44.991781][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.014854][ T5902] loop2: detected capacity change from 0 to 256 [ 45.075098][ T5718] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.084334][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.088414][ T5718] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.093202][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.094236][ T5718] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.099727][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.100350][ T5718] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.105113][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.131335][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.131380][ T5718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.131464][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.131519][ T5718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.161565][ T4360] 8021q: adding VLAN 0 to HW filter on device eth2 [ 45.174622][ T5718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.188483][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.188915][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.205615][ T5718] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.211017][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.211059][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.214074][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.214112][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.285218][ T5934] __nla_validate_parse: 1 callbacks suppressed [ 45.285464][ T5934] netlink: 84 bytes leftover after parsing attributes in process `syz.2.433'. [ 45.459071][ T4360] 8021q: adding VLAN 0 to HW filter on device eth3 [ 45.469064][ T5718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.515486][ T4672] Bluetooth: hci2: command tx timeout [ 45.589113][ T5718] veth0_vlan: entered promiscuous mode [ 45.591295][ T5718] veth1_vlan: entered promiscuous mode [ 45.605157][ T5718] veth0_macvtap: entered promiscuous mode [ 45.607918][ T5718] veth1_macvtap: entered promiscuous mode [ 45.612266][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.628316][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.630956][ T3914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.631008][ T3914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.631025][ T3914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.631040][ T3914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.659435][ T5990] capability: warning: `syz.4.444' uses deprecated v2 capabilities in a way that may be insecure [ 45.662464][ T5988] netlink: 'syz.2.443': attribute type 10 has an invalid length. [ 45.689009][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.689036][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.704222][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.704249][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.882841][ T6005] loop2: detected capacity change from 0 to 1024 [ 45.885971][ T6005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.897116][ T6005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 45.897164][ T6005] System zones: 0-1, 3-12 [ 45.901004][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.941674][ T6005] EXT4-fs error (device loop2): __ext4_remount:6837: comm syz.2.449: Abort forced by user [ 45.941837][ T6005] EXT4-fs (loop2): Remounting filesystem read-only [ 45.941845][ T6005] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 45.959102][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.024355][ T6018] input: syz1 as /devices/virtual/input/input5 [ 46.034968][ T6020] netlink: 'syz.1.458': attribute type 2 has an invalid length. [ 46.034998][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 46.137845][ T6033] loop1: detected capacity change from 0 to 4096 [ 46.152378][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.181028][ T6042] loop5: detected capacity change from 0 to 128 [ 46.202812][ T6044] fuse: fd is not a fuse device [ 46.222286][ T6042] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.223568][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.326331][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 46.384022][ T5718] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 46.384057][ T5718] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory block failed checksum [ 46.485080][ T6077] loop3: detected capacity change from 0 to 4096 [ 46.492915][ T6082] syzkaller1: entered promiscuous mode [ 46.492947][ T6082] syzkaller1: entered allmulticast mode [ 46.508838][ T6077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.508861][ T6077] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.510302][ T6077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.535220][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.602068][ T6089] Bluetooth: MGMT ver 1.23 [ 46.739639][ T6104] loop3: detected capacity change from 0 to 512 [ 46.740411][ T6104] EXT4-fs: Ignoring removed i_version option [ 46.740422][ T6104] EXT4-fs: Ignoring removed nobh option [ 46.743178][ T6104] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.746319][ T6104] EXT4-fs (loop3): 1 truncate cleaned up [ 46.746789][ T6104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.791696][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.872059][ T6113] loop2: detected capacity change from 0 to 512 [ 46.878433][ T6113] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.498: inode has both inline data and extents flags [ 46.878463][ T6113] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.878556][ T6113] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.498: couldn't read orphan inode 15 (err -117) [ 46.878568][ T6113] loop2: lost filesystem error report for type 5 error -117 [ 46.879084][ T6113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.901723][ T4679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.016230][ T6124] loop2: detected capacity change from 0 to 8192 [ 47.020812][ T6128] overlayfs: failed to clone upperpath [ 47.063357][ T6130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 47.078802][ T6130] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.506: bg 0: block 32: padding at end of block bitmap is not set [ 47.102107][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 47.113846][ T6135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.507'. [ 47.163429][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.510'. [ 47.258446][ T6148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.268887][ T6124] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 47.268912][ T6124] FAT-fs (loop2): Filesystem has been set read-only [ 47.278830][ T6148] EXT4-fs (loop3): shut down requested (1) [ 47.303594][ T4682] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.389440][ T6064] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.415012][ T3693] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.546828][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.548628][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.550450][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.551083][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.551297][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.725679][ T6168] mmap: syz.3.524 (6168) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.828869][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.839611][ T6206] EXT4-fs (loop1): shut down requested (1) [ 47.869021][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.889743][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.889784][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.889882][ T6175] bridge_slave_0: entered allmulticast mode [ 47.890462][ T6175] bridge_slave_0: entered promiscuous mode [ 47.892742][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.892794][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.892845][ T6175] bridge_slave_1: entered allmulticast mode [ 47.894583][ T6175] bridge_slave_1: entered promiscuous mode [ 47.913226][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.915017][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.922820][ T6175] team0: Port device team_slave_0 added [ 47.924413][ T6175] team0: Port device team_slave_1 added [ 47.953082][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.954591][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.960246][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.964093][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.966061][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.970777][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.998037][ T6175] hsr_slave_0: entered promiscuous mode [ 47.999456][ T6175] hsr_slave_1: entered promiscuous mode [ 48.000698][ T6175] debugfs: 'hsr0' already exists in 'hsr' [ 48.001944][ T6175] Cannot create hsr debugfs directory [ 48.097151][ T6175] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.100387][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.101177][ T6175] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.105237][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.108737][ T6175] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.117522][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.118240][ T6175] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.127372][ T6175] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.151055][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.151095][ T6175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.151184][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.151217][ T6175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.181514][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.187701][ T3371] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.189270][ T3371] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.198733][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.201958][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.202001][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.209869][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.209913][ T3219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.263583][ T6245] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.275726][ T6245] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.544: invalid indirect mapped block 4294967295 (level 0) [ 48.278688][ T6245] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.284396][ T6245] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.544: invalid indirect mapped block 4294967295 (level 1) [ 48.286257][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 48.286273][ C0] EXT4-fs (loop1): initial error at time 48: ext4_free_branches:1023: inode 16 [ 48.286294][ C0] EXT4-fs (loop1): last error at time 48: ext4_free_branches:1023: inode 16 [ 48.291657][ T6245] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.292958][ T6245] EXT4-fs (loop1): 1 orphan inode deleted [ 48.292972][ T6245] EXT4-fs (loop1): 1 truncate cleaned up [ 48.399685][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.500473][ T6175] veth0_vlan: entered promiscuous mode [ 48.504276][ T6175] veth1_vlan: entered promiscuous mode [ 48.513519][ T6175] veth0_macvtap: entered promiscuous mode [ 48.521709][ T6175] veth1_macvtap: entered promiscuous mode [ 48.529960][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.531451][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.542739][ T3219] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.542777][ T3219] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.542794][ T3219] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.542811][ T3219] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.592857][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.592885][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.599692][ T6284] netlink: 428 bytes leftover after parsing attributes in process `syz.4.552'. [ 48.603970][ T3914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.604003][ T3914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.624391][ T6286] Injecting memory failure for pfn 0x120e01 at process virtual address 0x20001000 [ 48.629217][ T6286] Memory failure: 0x120e01: Sending SIGBUS to syz.3.553:6286 due to hardware memory corruption [ 48.629278][ T6286] Memory failure: 0x120e01: recovery action for unsplit thp: Failed [ 48.658653][ T3693] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.700028][ T6296] netlink: 'syz.3.557': attribute type 29 has an invalid length. [ 48.706307][ T6296] netlink: 'syz.3.557': attribute type 29 has an invalid length. [ 48.707086][ T6296] netlink: 500 bytes leftover after parsing attributes in process `syz.3.557'. [ 48.861451][ T6319] sctp: [Deprecated]: syz.2.565 (pid 6319) Use of int in max_burst socket option deprecated. [ 48.861451][ T6319] Use struct sctp_assoc_value instead [ 48.866928][ T3693] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.957581][ T3693] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.117280][ T6357] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 49.255434][ T3693] bridge_slave_1: left allmulticast mode [ 49.255464][ T3693] bridge_slave_1: left promiscuous mode [ 49.255558][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.261409][ T3693] bridge_slave_0: left allmulticast mode [ 49.262520][ T3693] bridge_slave_0: left promiscuous mode [ 49.263585][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.303706][ T6378] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 49.303706][ T6378] The task syz.6.588 (6378) triggered the difference, watch for misbehavior. [ 49.398484][ T3693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.416719][ T3693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.456848][ T3693] bond0 (unregistering): Released all slaves [ 49.600101][ T50] Bluetooth: hci2: command tx timeout [ 49.772592][ T4360] 8021q: adding VLAN 0 to HW filter on device eth4 [ 49.814024][ T6421] netlink: 'syz.3.602': attribute type 4 has an invalid length. [ 49.839322][ T3693] hsr_slave_0: left promiscuous mode [ 49.840873][ T3693] hsr_slave_1: left promiscuous mode [ 49.841675][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.841689][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.848135][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.848167][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.860493][ T3693] veth1_macvtap: left promiscuous mode [ 49.860529][ T3693] veth0_macvtap: left promiscuous mode [ 49.860596][ T3693] veth1_vlan: left promiscuous mode [ 49.860627][ T3693] veth0_vlan: left promiscuous mode [ 50.094875][ T6437] set_capacity_and_notify: 4 callbacks suppressed [ 50.095492][ T6437] loop3: detected capacity change from 0 to 128 [ 50.114308][ T3693] team0 (unregistering): Port device team_slave_1 removed [ 50.125461][ T3693] team0 (unregistering): Port device team_slave_0 removed [ 50.149513][ T4682] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /131/file1/lost+found: directory fails checksum at offset 1024 [ 50.155107][ T4682] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /131/file1/lost+found: directory fails checksum at offset 8192 [ 50.159387][ T4682] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 50.162990][ T4682] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /131/file1/lost+found: directory fails checksum at offset 1024 [ 50.168071][ T4682] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /131/file1/lost+found: directory fails checksum at offset 8192 [ 50.171300][ T4682] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 50.175007][ T4682] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /131/file1/lost+found: directory fails checksum at offset 1024 [ 50.179915][ T4682] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /131/file1/lost+found: directory fails checksum at offset 8192 [ 50.184563][ T4682] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 50.187527][ T4682] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /131/file1/lost+found: directory fails checksum at offset 1024 [ 50.348513][ T6449] loop6: detected capacity change from 0 to 512 [ 50.392336][ T6455] input: syz0 as /devices/virtual/input/input7 [ 50.420244][ T6449] EXT4-fs (loop6): shut down requested (1) [ 50.461334][ T6462] loop1: detected capacity change from 0 to 512 [ 50.556491][ T6475] netlink: 272 bytes leftover after parsing attributes in process `syz.2.621'. [ 50.589806][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.623'. [ 50.602953][ T4360] 8021q: adding VLAN 0 to HW filter on device eth6 [ 50.606740][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.623'. [ 50.702784][ T6490] loop6: detected capacity change from 0 to 4096 [ 50.792997][ T3693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.812561][ T12] tipc: Subscription rejected, illegal request [ 50.893106][ T3693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.949013][ T3693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.953127][ T4360] 8021q: adding VLAN 0 to HW filter on device eth5 [ 50.972629][ T6516] binder: 6514:6516 BC_FREE_BUFFER no match for buffer at offset 0 [ 50.972660][ T6516] binder: 6514:6516 unknown command 0 [ 50.972677][ T6516] binder: 6514:6516 ioctl c0306201 20000380 returned -22 [ 50.993729][ T3693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.058883][ T4672] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.059738][ T4672] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.059988][ T4672] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.060330][ T4672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.060556][ T4672] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.147359][ T6538] loop1: detected capacity change from 0 to 256 [ 51.273558][ T6560] loop6: detected capacity change from 0 to 512 [ 51.279758][ T6560] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.643: corrupted in-inode xattr: bad e_name length [ 51.279803][ T6560] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.280223][ T6560] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.643: couldn't read orphan inode 15 (err -117) [ 51.280243][ T6560] loop6: lost filesystem error report for type 5 error -117 [ 51.297481][ T6175] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 51.305782][ T6175] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 51.309115][ T6175] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 51.327414][ T3693] bridge_slave_1: left allmulticast mode [ 51.327443][ T3693] bridge_slave_1: left promiscuous mode [ 51.327539][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.334471][ T3693] bridge_slave_0: left allmulticast mode [ 51.337976][ T3693] bridge_slave_0: left promiscuous mode [ 51.338087][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.438383][ T3693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.476450][ T3693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.486527][ T3693] bond0 (unregistering): Released all slaves [ 51.489919][ T4360] 8021q: adding VLAN 0 to HW filter on device eth7 [ 51.546326][ T6574] loop1: detected capacity change from 0 to 128 [ 51.662724][ T6588] Bluetooth: MGMT ver 1.23 [ 51.943890][ T3693] hsr_slave_0: left promiscuous mode [ 51.945122][ T3693] hsr_slave_1: left promiscuous mode [ 51.945905][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.945916][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.946400][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.946409][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.954258][ T3693] veth1_macvtap: left promiscuous mode [ 51.954305][ T3693] veth0_macvtap: left promiscuous mode [ 51.954341][ T3693] veth1_vlan: left promiscuous mode [ 51.954364][ T3693] veth0_vlan: left promiscuous mode [ 52.044064][ T6627] loop1: detected capacity change from 0 to 256 [ 52.158493][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 52.170772][ T3693] team0 (unregistering): Port device team_slave_1 removed [ 52.179037][ T3693] team0 (unregistering): Port device team_slave_0 removed [ 52.268015][ T4360] 8021q: adding VLAN 0 to HW filter on device eth8 [ 52.313317][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.313402][ T6638] batadv_slave_0: entered promiscuous mode [ 52.317367][ T6638] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 52.412825][ T6640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.670'. [ 52.416108][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.416133][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.416206][ T6522] bridge_slave_0: entered allmulticast mode [ 52.424468][ T6522] bridge_slave_0: entered promiscuous mode [ 52.425195][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.425228][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.439318][ T6522] bridge_slave_1: entered allmulticast mode [ 52.440827][ T6522] bridge_slave_1: entered promiscuous mode [ 52.456512][ T6522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.459586][ T6522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.472148][ T6522] team0: Port device team_slave_0 added [ 52.476562][ T6654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.675'. [ 52.479321][ T6522] team0: Port device team_slave_1 added [ 52.487140][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.488660][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.493644][ T6522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.496502][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.497669][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.502252][ T6522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.516332][ T6522] hsr_slave_0: entered promiscuous mode [ 52.518973][ T6522] hsr_slave_1: entered promiscuous mode [ 52.519204][ T6522] debugfs: 'hsr0' already exists in 'hsr' [ 52.519220][ T6522] Cannot create hsr debugfs directory [ 52.531945][ T6661] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.674'. [ 52.532470][ T6655] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.674'. [ 52.552832][ T4672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.563688][ T4672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.570873][ T4672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.571524][ T4672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.571730][ T4672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.613882][ T4360] 8021q: adding VLAN 0 to HW filter on device eth9 [ 52.664880][ T6522] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 52.673496][ T6522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.673790][ T6522] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 52.680531][ T6522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.682586][ T6522] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 52.692570][ T6522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.692872][ T6522] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 52.697391][ T6522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.797923][ T3693] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.816945][ T6711] loop2: detected capacity change from 0 to 8 [ 52.876074][ T3693] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.902037][ T6718] loop2: detected capacity change from 0 to 4096 [ 52.907183][ T6718] EXT4-fs (loop2): Test dummy encryption mode enabled [ 52.936332][ T3693] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.954083][ T6522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.962769][ T4360] 8021q: adding VLAN 0 to HW filter on device eth10 [ 52.970931][ T6522] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.972611][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.972639][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.986633][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.986675][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.000775][ T3693] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.115604][ T50] Bluetooth: hci3: command tx timeout [ 53.191914][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.192017][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.192504][ T6666] bridge_slave_0: entered allmulticast mode [ 53.194525][ T6666] bridge_slave_0: entered promiscuous mode [ 53.203251][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.203335][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.203403][ T6666] bridge_slave_1: entered allmulticast mode [ 53.204714][ T6666] bridge_slave_1: entered promiscuous mode [ 53.360576][ T3693] bridge_slave_1: left allmulticast mode [ 53.361766][ T3693] bridge_slave_1: left promiscuous mode [ 53.362896][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.366861][ T3693] bridge_slave_0: left allmulticast mode [ 53.367923][ T3693] bridge_slave_0: left promiscuous mode [ 53.369071][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.482251][ T3693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.506626][ T3693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.546296][ T3693] bond0 (unregistering): Released all slaves [ 53.555010][ T6666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.562007][ T4360] 8021q: adding VLAN 0 to HW filter on device eth11 [ 53.567798][ T6666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.574284][ T6666] team0: Port device team_slave_0 added [ 53.578573][ T6666] team0: Port device team_slave_1 added [ 53.588078][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.589379][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.594073][ T6666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.598012][ T6666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.599400][ T6666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.603855][ T6666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.624798][ T6666] hsr_slave_0: entered promiscuous mode [ 53.627107][ T6666] hsr_slave_1: entered promiscuous mode [ 53.628377][ T6666] debugfs: 'hsr0' already exists in 'hsr' [ 53.629432][ T6666] Cannot create hsr debugfs directory [ 53.707348][ T6522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.893505][ T3693] hsr_slave_0: left promiscuous mode [ 53.894934][ T3693] hsr_slave_1: left promiscuous mode [ 53.896235][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.897571][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.899153][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.899179][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.905093][ T3693] veth1_macvtap: left promiscuous mode [ 53.908634][ T3693] veth0_macvtap: left promiscuous mode [ 53.913305][ T3693] veth1_vlan: left promiscuous mode [ 53.913345][ T3693] veth0_vlan: left promiscuous mode [ 54.039747][ T3693] team0 (unregistering): Port device team_slave_1 removed [ 54.045204][ T3693] team0 (unregistering): Port device team_slave_0 removed [ 54.109858][ T4360] 8021q: adding VLAN 0 to HW filter on device eth12 [ 54.133624][ T6522] veth0_vlan: entered promiscuous mode [ 54.143843][ T6522] veth1_vlan: entered promiscuous mode [ 54.150329][ T6666] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 54.156395][ T6666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.158847][ T6666] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 54.162869][ T6666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.163252][ T6666] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 54.168835][ T6666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.171642][ T6666] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 54.174001][ T6666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.183846][ T6522] veth0_macvtap: entered promiscuous mode [ 54.190045][ T6522] veth1_macvtap: entered promiscuous mode [ 54.199008][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.200155][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.209012][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.209056][ T39] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.209074][ T39] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.209090][ T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.254941][ T6666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.268236][ T6666] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.283781][ T3219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.283806][ T3219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.304065][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.304109][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.308866][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.308924][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.331471][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.331498][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.360289][ T4360] 8021q: adding VLAN 0 to HW filter on device eth13 [ 54.388078][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 54.463006][ T6869] process 'syz.4.714' launched './file2' with NULL argv: empty string added [ 54.578759][ T6666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.617167][ T6903] netlink: 64 bytes leftover after parsing attributes in process `syz.4.722'. [ 54.635541][ T50] Bluetooth: hci2: command tx timeout [ 54.724978][ T4360] 8021q: adding VLAN 0 to HW filter on device eth14 [ 54.736456][ T6666] veth0_vlan: entered promiscuous mode [ 54.746317][ T6666] veth1_vlan: entered promiscuous mode [ 54.758906][ T6666] veth0_macvtap: entered promiscuous mode [ 54.767897][ T6666] veth1_macvtap: entered promiscuous mode [ 54.780770][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.789122][ T6666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.794022][ T3219] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.794078][ T3219] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.794098][ T3219] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.794117][ T3219] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.851664][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.851691][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.884499][ T3914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.884525][ T3914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.997814][ T6933] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #12: comm syz.2.729: Directory hole found for htree leaf block 0 [ 55.017602][ T4679] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 55.020291][ T4679] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 55.022829][ T4679] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 55.026347][ T4679] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 55.030804][ T4360] 8021q: adding VLAN 0 to HW filter on device eth15 [ 55.032203][ T4679] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 55.034850][ T4679] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 55.035153][ T4679] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 55.038012][ T4679] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 55.038322][ T4679] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 55.198386][ T50] Bluetooth: hci3: command tx timeout [ 55.210468][ T6975] set_capacity_and_notify: 2 callbacks suppressed [ 55.211490][ T6975] loop8: detected capacity change from 0 to 1024 [ 55.523093][ T7003] loop1: detected capacity change from 0 to 1024 [ 55.553323][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.557953][ T7003] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 55.560641][ T7003] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.560641][ T7003] [ 55.564637][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.568764][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.572629][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.572826][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.576387][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.578960][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.581553][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.586708][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.589295][ T7003] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: comm syz.1.748: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.682441][ T4672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.684614][ T4672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.687215][ T4672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.689296][ T4672] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.691447][ T4672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.214920][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.235149][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.235399][ T7016] bridge_slave_0: entered allmulticast mode [ 56.235845][ T7016] bridge_slave_0: entered promiscuous mode [ 56.236570][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.236590][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.236657][ T7016] bridge_slave_1: entered allmulticast mode [ 56.237071][ T7016] bridge_slave_1: entered promiscuous mode [ 56.281014][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.283720][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.316623][ T7016] team0: Port device team_slave_0 added [ 56.318755][ T7016] team0: Port device team_slave_1 added [ 56.345660][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.346974][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.351496][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.354067][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.355232][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.359758][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.374263][ T4670] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 56.384744][ T7016] hsr_slave_0: entered promiscuous mode [ 56.392795][ T7016] hsr_slave_1: entered promiscuous mode [ 56.396920][ T7016] debugfs: 'hsr0' already exists in 'hsr' [ 56.396958][ T7016] Cannot create hsr debugfs directory [ 56.728155][ T50] Bluetooth: hci2: command tx timeout [ 56.847666][ T7016] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 56.854401][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.856035][ T7016] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 56.861410][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.863073][ T7016] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 56.872434][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.872751][ T7016] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 56.881160][ T7016] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.934524][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.941196][ T7016] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.948608][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.948651][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.001217][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.001266][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.275637][ T50] Bluetooth: hci3: command tx timeout [ 57.321257][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.471940][ T7016] veth0_vlan: entered promiscuous mode [ 57.484518][ T7016] veth1_vlan: entered promiscuous mode [ 57.511426][ T7016] veth0_macvtap: entered promiscuous mode [ 57.513942][ T7016] veth1_macvtap: entered promiscuous mode [ 57.540022][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.541856][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.558811][ T137] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.558864][ T137] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.558891][ T137] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.558909][ T137] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.623410][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.623441][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.648784][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.648812][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.725511][ T7263] loop9: detected capacity change from 0 to 128 [ 57.749541][ T4758] kernel read not supported for file /newroot/26 (pid: 4758 comm: kworker/1:5) [ 57.767689][ T50] Bluetooth: hci4: command tx timeout [ 57.897693][ T7281] netlink: 48 bytes leftover after parsing attributes in process `syz.7.798'. [ 58.186107][ T7314] bridge0: port 3(syz_tun) entered blocking state [ 58.186203][ T7314] bridge0: port 3(syz_tun) entered disabled state [ 58.186377][ T7314] syz_tun: entered allmulticast mode [ 58.187186][ T7314] syz_tun: entered promiscuous mode [ 58.187563][ T7314] bridge0: port 3(syz_tun) entered blocking state [ 58.187599][ T7314] bridge0: port 3(syz_tun) entered forwarding state [ 58.224254][ T7319] batadv_slave_1: entered promiscuous mode [ 58.224877][ T7317] batadv_slave_1: left promiscuous mode [ 58.373851][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.397639][ T7340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.467984][ T7349] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 58.795826][ T50] Bluetooth: hci2: command tx timeout [ 58.809548][ T7381] netlink: 'syz.1.840': attribute type 39 has an invalid length. [ 58.874545][ T7389] loop8: detected capacity change from 0 to 4096 [ 59.298538][ T14] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.359242][ T50] Bluetooth: hci3: command tx timeout [ 59.362167][ T14] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.390627][ T4672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.393156][ T4672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.394934][ T4672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.397989][ T4672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.399731][ T4672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.414099][ T14] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.418710][ T7409] tipc: Started in network mode [ 59.419643][ T7409] tipc: Node identity ac14142f, cluster identity 4711 [ 59.421014][ T7409] tipc: New replicast peer: 0.0.0.0 [ 59.422149][ T7409] tipc: Enabled bearer , priority 10 [ 59.424024][ T7409] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 59.468629][ T14] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.598669][ T7423] Injecting memory failure for pfn 0x121b8f at process virtual address 0x20000000 [ 59.601423][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.603662][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.603746][ T7406] bridge_slave_0: entered allmulticast mode [ 59.604214][ T7406] bridge_slave_0: entered promiscuous mode [ 59.608725][ T7423] Memory failure: 0x121b8f: Sending SIGBUS to syz.4.855:7423 due to hardware memory corruption [ 59.608779][ T7423] Memory failure: 0x121b8f: Sending SIGBUS to syz.4.855:7426 due to hardware memory corruption [ 59.609216][ T7423] Memory failure: 0x121b8f: recovery action for dirty LRU page: Recovered [ 59.609231][ T7423] Injecting memory failure for pfn 0x1230d2 at process virtual address 0x20001000 [ 59.610084][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.610639][ T7423] Memory failure: 0x1230d2: recovery action for clean LRU page: Recovered [ 59.610655][ T7423] Injecting memory failure for pfn 0x1230d1 at process virtual address 0x20002000 [ 59.610709][ T7423] Memory failure: 0x1230d1: recovery action for clean LRU page: Recovered [ 59.611670][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.611775][ T7406] bridge_slave_1: entered allmulticast mode [ 59.612264][ T7406] bridge_slave_1: entered promiscuous mode [ 59.623971][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.625218][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.656909][ T7406] team0: Port device team_slave_0 added [ 59.658469][ T7406] team0: Port device team_slave_1 added [ 59.775830][ T14] bridge_slave_1: left allmulticast mode [ 59.775863][ T14] bridge_slave_1: left promiscuous mode [ 59.775967][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.781625][ T14] bridge_slave_0: left allmulticast mode [ 59.781650][ T14] bridge_slave_0: left promiscuous mode [ 59.781740][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.835913][ T50] Bluetooth: hci4: command tx timeout [ 59.951863][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.976954][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.999542][ T14] bond0 (unregistering): Released all slaves [ 60.014629][ T7448] netlink: 48 bytes leftover after parsing attributes in process `syz.9.863'. [ 60.021688][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.026717][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.026770][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.027926][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.027934][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.027948][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.040497][ T7406] hsr_slave_0: entered promiscuous mode [ 60.040826][ T7406] hsr_slave_1: entered promiscuous mode [ 60.041910][ T7406] debugfs: 'hsr0' already exists in 'hsr' [ 60.041923][ T7406] Cannot create hsr debugfs directory [ 60.152465][ T7463] loop9: detected capacity change from 0 to 4096 [ 60.350440][ T4360] 8021q: adding VLAN 0 to HW filter on device eth16 [ 60.357827][ T14] hsr_slave_0: left promiscuous mode [ 60.359367][ T14] hsr_slave_1: left promiscuous mode [ 60.360775][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.360806][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.371796][ T14] veth1_macvtap: left promiscuous mode [ 60.371831][ T14] veth0_macvtap: left promiscuous mode [ 60.371865][ T14] veth1_vlan: left promiscuous mode [ 60.371922][ T14] veth0_vlan: left promiscuous mode [ 60.526186][ T14] team0 (unregistering): Port device team_slave_1 removed [ 60.531817][ T14] team0 (unregistering): Port device team_slave_0 removed [ 60.591984][ T9] tipc: Node number set to 2886997039 [ 60.769070][ T4360] 8021q: adding VLAN 0 to HW filter on device eth17 [ 60.828925][ T7406] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.832375][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.834035][ T7406] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.845801][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.847478][ T7406] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.851319][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.852982][ T7406] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.855625][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.925490][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.931896][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.938333][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.938377][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.942822][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.942870][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.222928][ T4360] 8021q: adding VLAN 0 to HW filter on device eth18 [ 61.234038][ T7577] netlink: 'syz.7.883': attribute type 29 has an invalid length. [ 61.242686][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.250890][ T7577] netlink: 'syz.7.883': attribute type 29 has an invalid length. [ 61.251774][ T7577] netlink: 500 bytes leftover after parsing attributes in process `syz.7.883'. [ 61.430062][ T7406] veth0_vlan: entered promiscuous mode [ 61.435143][ T7406] veth1_vlan: entered promiscuous mode [ 61.442875][ T7406] veth0_macvtap: entered promiscuous mode [ 61.445656][ T50] Bluetooth: hci2: command tx timeout [ 61.447153][ T7406] veth1_macvtap: entered promiscuous mode [ 61.453850][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.468098][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.471959][ T137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.472045][ T137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.472081][ T137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.472099][ T137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.605028][ T3290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.606685][ T3290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.626551][ T3290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.626582][ T3290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.658298][ T4360] 8021q: adding VLAN 0 to HW filter on device eth19 [ 61.917248][ T50] Bluetooth: hci4: command tx timeout [ 61.964435][ T7648] ------------[ cut here ]------------ [ 61.964473][ T7648] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 61.969327][ T7648] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2832 at mac80211_hwsim_sta_rc_update+0x4e4/0x694, CPU#1: syz.4.894/7648 [ 61.971558][ T7648] Modules linked in: [ 61.972217][ T7648] CPU: 1 UID: 0 PID: 7648 Comm: syz.4.894 Not tainted syzkaller #0 PREEMPT [ 61.973588][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 61.975244][ T7648] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 61.976505][ T7648] pc : mac80211_hwsim_sta_rc_update+0x4e4/0x694 [ 61.977516][ T7648] lr : mac80211_hwsim_sta_rc_update+0x4e4/0x694 [ 61.978579][ T7648] sp : ffff800092e06d00 [ 61.979266][ T7648] x29: ffff800092e06d40 x28: ffff0000f4ca5090 x27: ffff0000c848b260 [ 61.980565][ T7648] x26: ffff0000f4ca5090 x25: dfff800000000000 x24: 0000000000000014 [ 61.981872][ T7648] x23: 0000000000000000 x22: 0000000000000000 x21: ffff800089f04000 [ 61.983246][ T7648] x20: ffff800089f04000 x19: 0000000000000007 x18: 1fffe00035c25820 [ 61.984648][ T7648] x17: ffff8000888db000 x16: ffff80008898cfc0 x15: ffff0001ae12c10c [ 61.986058][ T7648] x14: ffff0001ae12c108 x13: 0000000000000001 x12: 0000000000000000 [ 61.987450][ T7648] x11: ffff80008a343d08 x10: 0000000000000003 x9 : eb0aac1bdcc38a00 [ 61.988833][ T7648] x8 : eb0aac1bdcc38a00 x7 : 0000000000000000 x6 : 0000000000000000 [ 61.990158][ T7648] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080153db0 [ 61.991470][ T7648] x2 : 0000000000000006 x1 : ffff0000d5698000 x0 : 0000000000000001 [ 61.992819][ T7648] Call trace: [ 61.993350][ T7648] mac80211_hwsim_sta_rc_update+0x4e4/0x694 (P) [ 61.994382][ T7648] mac80211_hwsim_sta_add+0xa8/0x270 [ 61.995299][ T7648] drv_sta_state+0x6bc/0x1a24 [ 61.996081][ T7648] sta_info_insert_rcu+0x160c/0x2150 [ 61.997019][ T7648] sta_info_insert+0x20/0xcc [ 61.997808][ T7648] ieee80211_add_station+0x3ec/0x5e4 [ 61.998655][ T7648] rdev_add_station+0x118/0x428 [ 61.999478][ T7648] nl80211_new_station+0x1310/0x17e0 [ 62.000378][ T7648] genl_family_rcv_msg_doit+0x1e4/0x2d8 [ 62.001325][ T7648] genl_rcv_msg+0x444/0x620 [ 62.002102][ T7648] netlink_rcv_skb+0x22c/0x410 [ 62.002906][ T7648] genl_rcv+0x38/0x50 [ 62.003563][ T7648] netlink_unicast+0x610/0x800 [ 62.004382][ T7648] netlink_sendmsg+0x63c/0x920 [ 62.005209][ T7648] __sock_sendmsg+0xc8/0x138 [ 62.005944][ T7648] ____sys_sendmsg+0x418/0x70c [ 62.006737][ T7648] ___sys_sendmsg+0x198/0x224 [ 62.007542][ T7648] __sys_sendmsg+0x160/0x214 [ 62.008353][ T7648] __arm64_sys_sendmsg+0x80/0x94 [ 62.009188][ T7648] invoke_syscall+0x98/0x244 [ 62.009972][ T7648] el0_svc_common+0xe8/0x23c [ 62.010700][ T7648] do_el0_svc+0x48/0x58 [ 62.011357][ T7648] el0_svc+0x60/0x25c [ 62.012034][ T7648] el0t_64_sync_handler+0x48/0x148 [ 62.012869][ T7648] el0t_64_sync+0x198/0x19c [ 62.013629][ T7648] irq event stamp: 674 [ 62.014304][ T7648] hardirqs last enabled at (673): [] finish_lock_switch+0x160/0x204 [ 62.015917][ T7648] hardirqs last disabled at (674): [] el1_brk64+0x20/0x54 [ 62.017354][ T7648] softirqs last enabled at (656): [] rate_control_rate_init+0x354/0x598 [ 62.018971][ T7648] softirqs last disabled at (652): [] rate_control_rate_init+0x2e8/0x598 [ 62.020632][ T7648] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 62.285147][ T4671] bridge0: port 3(syz_tun) entered disabled state [ 62.289785][ T4671] syz_tun (unregistering): left allmulticast mode [ 62.289816][ T4671] syz_tun (unregistering): left promiscuous mode [ 62.289861][ T4671] bridge0: port 3(syz_tun) entered disabled state [ 62.435202][ T3290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.521642][ T3290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.623333][ T3290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.673303][ T3290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.876250][ T3290] bridge_slave_1: left allmulticast mode [ 62.876292][ T3290] bridge_slave_1: left promiscuous mode [ 62.876389][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.888493][ T3290] bridge_slave_0: left allmulticast mode [ 62.888520][ T3290] bridge_slave_0: left promiscuous mode [ 62.888602][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.893182][ T3290] pimreg: left allmulticast mode [ 63.038745][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.066554][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.077594][ T3290] bond0 (unregistering): Released all slaves [ 63.123440][ T3290] tipc: Disabling bearer [ 63.123589][ T3290] tipc: Left network mode [ 63.398162][ T3290] hsr_slave_0: left promiscuous mode [ 63.399208][ T3290] hsr_slave_1: left promiscuous mode [ 63.399579][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.399590][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.400548][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.400557][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.407155][ T3290] veth1_macvtap: left promiscuous mode [ 63.407195][ T3290] veth0_macvtap: left promiscuous mode [ 63.407229][ T3290] veth1_vlan: left promiscuous mode [ 63.407253][ T3290] veth0_vlan: left promiscuous mode [ 63.503605][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 63.516182][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 63.687124][ T4360] 8021q: adding VLAN 0 to HW filter on device eth0 [ 63.848342][ T3290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.916474][ T4360] 8021q: adding VLAN 0 to HW filter on device eth1 [ 64.023907][ T4360] 8021q: adding VLAN 0 to HW filter on device eth2 [ 64.134499][ T4360] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.476941][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.476996][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.489092][ T26] cfg80211: failed to load regulatory.db [ 65.183671][ T3290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.240159][ T3290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.292852][ T3290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.440003][ T3290] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.471414][ T3290] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.536686][ T3290] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.569258][ T3290] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.668906][ T3290] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.672340][ T4360] 8021q: adding VLAN 0 to HW filter on device eth20 [ 65.708416][ T3290] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.753022][ T3290] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.795081][ T3290] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.802058][ T4360] 8021q: adding VLAN 0 to HW filter on device eth21 [ 65.936892][ T3290] bridge_slave_1: left allmulticast mode [ 65.937969][ T3290] bridge_slave_1: left promiscuous mode [ 65.939051][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.941241][ T3290] bridge_slave_0: left allmulticast mode [ 65.941268][ T3290] bridge_slave_0: left promiscuous mode [ 65.941360][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.135412][ T3290] bridge_slave_1: left allmulticast mode [ 66.135445][ T3290] bridge_slave_1: left promiscuous mode [ 66.135533][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.137972][ T3290] bridge_slave_0: left allmulticast mode [ 66.137984][ T3290] bridge_slave_0: left promiscuous mode [ 66.138038][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.355391][ T3290] bridge_slave_1: left allmulticast mode [ 66.355420][ T3290] bridge_slave_1: left promiscuous mode [ 66.355488][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.357723][ T3290] bridge_slave_0: left allmulticast mode [ 66.357734][ T3290] bridge_slave_0: left promiscuous mode [ 66.357783][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.672939][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.706491][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.727778][ T3290] bond0 (unregistering): Released all slaves [ 66.809905][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.836451][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.856233][ T3290] bond0 (unregistering): Released all slaves [ 66.931442][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.967000][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.016754][ T3290] bond0 (unregistering): Released all slaves [ 67.019052][ T4360] 8021q: adding VLAN 0 to HW filter on device eth22 [ 67.950032][ T3290] hsr_slave_0: left promiscuous mode [ 67.951303][ T3290] hsr_slave_1: left promiscuous mode [ 67.951747][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.951758][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.954973][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.959774][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.963701][ T3290] hsr_slave_0: left promiscuous mode [ 67.964654][ T3290] hsr_slave_1: left promiscuous mode [ 67.964879][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.964889][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.965987][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.965998][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.974050][ T3290] hsr_slave_0: left promiscuous mode [ 67.975334][ T3290] hsr_slave_1: left promiscuous mode [ 67.975608][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.975618][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.979071][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.979100][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.992711][ T3290] veth1_macvtap: left promiscuous mode [ 67.992746][ T3290] veth0_macvtap: left promiscuous mode [ 67.992775][ T3290] veth1_vlan: left promiscuous mode [ 67.992797][ T3290] veth0_vlan: left promiscuous mode [ 67.996909][ T3290] veth1_macvtap: left promiscuous mode [ 67.996976][ T3290] veth0_macvtap: left promiscuous mode [ 67.997004][ T3290] veth1_vlan: left promiscuous mode [ 67.997024][ T3290] veth0_vlan: left promiscuous mode [ 68.000945][ T3290] veth1_macvtap: left promiscuous mode [ 68.000967][ T3290] veth0_macvtap: left promiscuous mode [ 68.001003][ T3290] veth1_vlan: left promiscuous mode [ 68.001024][ T3290] veth0_vlan: left promiscuous mode [ 68.174744][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 68.184443][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 68.292766][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 68.299593][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 68.396796][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 68.400537][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 68.572367][ T4360] 8021q: adding VLAN 0 to HW filter on device eth23 [ 68.688851][ T4360] 8021q: adding VLAN 0 to HW filter on device eth24 [ 68.800428][ T4360] 8021q: adding VLAN 0 to HW filter on device eth26 [ 68.923271][ T4360] 8021q: adding VLAN 0 to HW filter on device eth25 [ 69.042678][ T4360] 8021q: adding VLAN 0 to HW filter on device eth27 [ 69.158314][ T4360] 8021q: adding VLAN 0 to HW filter on device eth29 [ 69.272070][ T4360] 8021q: adding VLAN 0 to HW filter on device eth28 [ 69.484808][ T4360] 8021q: adding VLAN 0 to HW filter on device eth30 [ 69.601187][ T4360] 8021q: adding VLAN 0 to HW filter on device eth31