last executing test programs: 4m53.118994948s ago: executing program 4 (id=5): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback, 0x800}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="00851f7737dc4f1e7e2ad34d5e8c25775d62bfd342e116a8eb0c403bce0ec42c940cd1101cba50cf1f3b2334894176ae4f3d7ce443ba38a88d4814bf53e9f7795646433a7422f0367d328ede94a78360b0f304", 0x53, 0x40, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x163002, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x20, 0x0, 0x1, 0x1b, "0062ba00103700000000000000000000000800"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000002300)=""/4098, 0x1002) 4m51.548554384s ago: executing program 4 (id=10): socket$l2tp(0x2, 0x2, 0x73) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036312c6e6f646f74732c00fef7e57e4b88b74f39306f71729ff8b6dad1d347a8049c440504160f5c5eafd60da5e669f00800"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file1\x00', 0xb4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x189800, 0x131) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000680)) 4m49.375455892s ago: executing program 4 (id=19): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x128, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4002090}, 0x8084) 4m34.111870841s ago: executing program 32 (id=19): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x128, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4002090}, 0x8084) 4.179080723s ago: executing program 2 (id=1308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000005080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a300000000009000200"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x400c044) 3.804181349s ago: executing program 2 (id=1310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b73", 0xd7}], 0x3) 3.50421028s ago: executing program 1 (id=1311): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket(0xa, 0x3, 0x87) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) 3.490027043s ago: executing program 2 (id=1312): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xf8, &(0x7f0000000480)=ANY=[], 0x0) 3.315656572s ago: executing program 2 (id=1313): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xffc00001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000a00)=ANY=[], 0x0) 2.749116164s ago: executing program 2 (id=1314): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.696515159s ago: executing program 5 (id=1315): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x46f9, 0xbf9a, 0x3e, 0x0, 0x0) 2.548138066s ago: executing program 1 (id=1316): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x3a, @remote, 0x4e21, 0x3, 'lc\x00', 0x1c, 0x9, 0x6f}, 0x2c) 2.541441082s ago: executing program 5 (id=1317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 2.487690612s ago: executing program 3 (id=1318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.297171213s ago: executing program 3 (id=1320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000005080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a300000000009000200"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x400c044) 2.274649918s ago: executing program 5 (id=1321): r0 = userfaultfd(0x80001) r1 = getpid() r2 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x81}) 2.149644519s ago: executing program 1 (id=1323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xf8, &(0x7f0000000480)=ANY=[], 0x0) 2.023098735s ago: executing program 0 (id=1324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xffc00001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000a00)=ANY=[], 0x0) 2.014436469s ago: executing program 3 (id=1325): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2404877d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="350ed1871726b5ad4f44da88d4e6d6b1f17217c38a3418909a508cec60ec73e2ab286245ded56fd4bb93db8cef041ac8901cf7fa0171bc6c8778368c89776f4a0bb5446d423e805f9626dfd56a936915f5b671523b633ec3be455e31904a4d4bf66fe47a151ac5d3f27e6652cade7078194ce7dcdf18081557b930dcbcd11dddb73025102dca2baef0fb96fc6ce652ec419dbf21c2f339f1565073f97d7839dffd2ab6c5165a0c19268fd0339ea230703346ddf0c71ca2112ecbb107ab6c5fe95fa98a5b8ae8", 0xc6}], 0x1}}], 0x1, 0x20002090) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1.91283419s ago: executing program 1 (id=1326): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket(0xa, 0x3, 0x87) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) 1.779037078s ago: executing program 5 (id=1327): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x46f9, 0xbf9a, 0x3e, 0x0, 0x0) 1.650017701s ago: executing program 5 (id=1328): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000001300)=ANY=[@ANYBLOB="10100000ed03"], 0x1010}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) 1.532450771s ago: executing program 0 (id=1329): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fspick(r0, &(0x7f0000000000)='./file0\x00', 0x1) 1.442206868s ago: executing program 5 (id=1330): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) 1.355059564s ago: executing program 0 (id=1331): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 1.054905607s ago: executing program 2 (id=1332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 1.05407151s ago: executing program 0 (id=1333): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="620427", 0x3}], 0x1}, 0x8045) 476.372921ms ago: executing program 0 (id=1334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b73775033", 0xda}], 0x3) 475.433753ms ago: executing program 1 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000005080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a300000000009000200"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x400c044) 429.016876ms ago: executing program 3 (id=1336): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xf8, &(0x7f0000000480)=ANY=[], 0x0) 323.846049ms ago: executing program 3 (id=1337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200"], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 208.342706ms ago: executing program 0 (id=1338): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x46f9, 0xbf9a, 0x3e, 0x0, 0x0) 116.143077ms ago: executing program 1 (id=1339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xffc00001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000a00)=ANY=[], 0x0) 0s ago: executing program 3 (id=1340): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000098) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000240)={0x44, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x4, 0x7fff7fff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 5b65a09 r/w without journal. Quota mode: none. [ 173.048455][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.070872][ T6543] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.388080][ T5922] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.454129][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.500790][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.501133][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.534546][ T5922] Flush: task=syz-executor[5922] dev=loop0 state=2 [ 173.603460][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.603601][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.649488][ T5922] Teardown: task=syz-executor[5922] dev=loop0 state=2 [ 174.509349][ T6569] Zero length message leads to an empty skb [ 174.547234][ T5251] 8021q: adding VLAN 0 to HW filter on device eth8 [ 176.360101][ T6176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.491212][ T6600] syz.0.148 (6600) used greatest stack depth: 19488 bytes left [ 176.637687][ T4905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.689701][ T4905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.692353][ T4905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.693830][ T4905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.731512][ T4905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.269496][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.401863][ T6176] veth0_vlan: entered promiscuous mode [ 177.604430][ T6176] veth1_vlan: entered promiscuous mode [ 177.851924][ T5251] 8021q: adding VLAN 0 to HW filter on device eth9 [ 177.965337][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.271659][ T6176] veth0_macvtap: entered promiscuous mode [ 178.299766][ T6234] veth0_vlan: entered promiscuous mode [ 178.384973][ T6176] veth1_macvtap: entered promiscuous mode [ 178.592631][ T6234] veth1_vlan: entered promiscuous mode [ 178.751843][ T6643] vxcan0: tx drop: invalid da for name 0x0000008000000000 [ 178.916528][ T4905] Bluetooth: hci4: command tx timeout [ 178.984168][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.172513][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.427450][ T1236] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.481755][ T6258] veth0_vlan: entered promiscuous mode [ 179.500856][ T5251] 8021q: adding VLAN 0 to HW filter on device eth10 [ 179.742273][ T3961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.757465][ T3961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.776542][ T3961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.030593][ T1236] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.104024][ T3961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.152562][ T4905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.195269][ T4905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.205218][ T4905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.218242][ T4905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.243788][ T4905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.277167][ T6258] veth1_vlan: entered promiscuous mode [ 180.442514][ T6234] veth0_macvtap: entered promiscuous mode [ 180.652875][ T1236] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.718727][ T6234] veth1_macvtap: entered promiscuous mode [ 180.995896][ T4905] Bluetooth: hci4: command tx timeout [ 181.042478][ T1236] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.415125][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.614814][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.622763][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.622815][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.716796][ T6258] veth0_macvtap: entered promiscuous mode [ 182.019236][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.020427][ T6258] veth1_macvtap: entered promiscuous mode [ 182.079722][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.082566][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.083001][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.083306][ T6604] bridge_slave_0: entered allmulticast mode [ 182.101268][ T6604] bridge_slave_0: entered promiscuous mode [ 182.139455][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.226363][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.226743][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.227036][ T6604] bridge_slave_1: entered allmulticast mode [ 182.230749][ T6604] bridge_slave_1: entered promiscuous mode [ 182.232032][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.288052][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.288072][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.369302][ T4905] Bluetooth: hci2: command tx timeout [ 182.633509][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.703729][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.016416][ T1236] bridge_slave_1: left allmulticast mode [ 183.016455][ T1236] bridge_slave_1: left promiscuous mode [ 183.016746][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.075875][ T4905] Bluetooth: hci4: command tx timeout [ 183.176968][ T1236] bridge_slave_0: left allmulticast mode [ 183.176992][ T1236] bridge_slave_0: left promiscuous mode [ 183.177214][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.926624][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.986542][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.028351][ T1236] bond0 (unregistering): Released all slaves [ 184.049651][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.083568][ T6604] team0: Port device team_slave_0 added [ 184.413346][ T6604] team0: Port device team_slave_1 added [ 184.435924][ T4905] Bluetooth: hci2: command tx timeout [ 184.959868][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.051863][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.051881][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.051910][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.151728][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.151746][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.151775][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.165414][ T4905] Bluetooth: hci4: command tx timeout [ 185.297931][ T3961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.434505][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 185.608025][ T3961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.892333][ T3961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.939090][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.939110][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.999260][ T3961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.273237][ T1236] hsr_slave_0: left promiscuous mode [ 186.305815][ T1236] hsr_slave_1: left promiscuous mode [ 186.306618][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.306638][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.341611][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.341639][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.456276][ T1236] veth1_macvtap: left promiscuous mode [ 186.456353][ T1236] veth0_macvtap: left promiscuous mode [ 186.456554][ T1236] veth1_vlan: left promiscuous mode [ 186.456697][ T1236] veth0_vlan: left promiscuous mode [ 186.516069][ T4905] Bluetooth: hci2: command tx timeout [ 187.307181][ T1236] team0 (unregistering): Port device team_slave_1 removed [ 187.370725][ T1236] team0 (unregistering): Port device team_slave_0 removed [ 187.628120][ T6604] hsr_slave_0: entered promiscuous mode [ 187.629830][ T6604] hsr_slave_1: entered promiscuous mode [ 188.038800][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.038819][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.597594][ T4905] Bluetooth: hci2: command tx timeout [ 188.779642][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.810258][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.838594][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.842885][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.846115][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.938730][ T3961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.938749][ T3961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.995981][ T4905] Bluetooth: hci0: command tx timeout [ 191.056938][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.057298][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.057582][ T6657] bridge_slave_0: entered allmulticast mode [ 191.065538][ T6657] bridge_slave_0: entered promiscuous mode [ 191.182526][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.182949][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.183276][ T6657] bridge_slave_1: entered allmulticast mode [ 191.235284][ T6657] bridge_slave_1: entered promiscuous mode [ 191.662175][ T6657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.668924][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.668982][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.731466][ T6657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.098715][ T6657] team0: Port device team_slave_0 added [ 192.173338][ T6657] team0: Port device team_slave_1 added [ 192.305024][ T6790] ======================================================= [ 192.305024][ T6790] WARNING: The mand mount option has been deprecated and [ 192.305024][ T6790] and is ignored by this kernel. Remove the mand [ 192.305024][ T6790] option from the mount to silence this warning. [ 192.305024][ T6790] ======================================================= [ 192.622929][ T1236] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.085768][ T4905] Bluetooth: hci0: command tx timeout [ 193.186420][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.186438][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.186480][ T6657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.314324][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.314342][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.314375][ T6657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.529829][ T1236] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.152630][ T1236] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.513263][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.513365][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.166253][ T4905] Bluetooth: hci0: command tx timeout [ 195.419577][ T6657] hsr_slave_0: entered promiscuous mode [ 195.427760][ T6657] hsr_slave_1: entered promiscuous mode [ 195.440115][ T6657] debugfs: 'hsr0' already exists in 'hsr' [ 195.440139][ T6657] Cannot create hsr debugfs directory [ 195.721135][ T1236] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.825399][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.702678][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.727361][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.728471][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.729313][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.237099][ T4905] Bluetooth: hci0: command tx timeout [ 198.997123][ T4905] Bluetooth: hci3: command tx timeout [ 199.054549][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.102700][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.105366][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.131896][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.138881][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.341421][ T6604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.390277][ T6604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.467911][ T6604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.505272][ T6604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.702821][ T6657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.748981][ T6604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.791782][ T6604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.862636][ T6604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.899059][ T6604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.902640][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.903081][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.903371][ T6742] bridge_slave_0: entered allmulticast mode [ 199.934835][ T6742] bridge_slave_0: entered promiscuous mode [ 199.953257][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.953587][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.953784][ T6742] bridge_slave_1: entered allmulticast mode [ 199.958649][ T6742] bridge_slave_1: entered promiscuous mode [ 200.205201][ T6657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.360006][ T6742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.381085][ T6742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.552190][ T6657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.725400][ T6742] team0: Port device team_slave_0 added [ 200.753145][ T6742] team0: Port device team_slave_1 added [ 200.993127][ T6657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.076165][ T4905] Bluetooth: hci3: command tx timeout [ 201.109953][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.109967][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.109988][ T6742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.191881][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.191893][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.191912][ T6742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.317358][ T4905] Bluetooth: hci1: command tx timeout [ 201.726384][ T1236] bridge_slave_1: left allmulticast mode [ 201.726421][ T1236] bridge_slave_1: left promiscuous mode [ 201.726712][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.887667][ T1236] bridge_slave_0: left allmulticast mode [ 201.887703][ T1236] bridge_slave_0: left promiscuous mode [ 201.887973][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.217021][ T1236] bridge_slave_1: left allmulticast mode [ 202.217057][ T1236] bridge_slave_1: left promiscuous mode [ 202.217343][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.377512][ T1236] bridge_slave_0: left allmulticast mode [ 202.377548][ T1236] bridge_slave_0: left promiscuous mode [ 202.377817][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.156778][ T5602] Bluetooth: hci3: command tx timeout [ 203.286608][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.347580][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.389331][ T1236] bond0 (unregistering): Released all slaves [ 203.396258][ T5602] Bluetooth: hci1: command tx timeout [ 203.877549][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.958014][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.983191][ T1236] bond0 (unregistering): Released all slaves [ 204.024575][ T6742] hsr_slave_0: entered promiscuous mode [ 204.032487][ T6742] hsr_slave_1: entered promiscuous mode [ 204.034535][ T6742] debugfs: 'hsr0' already exists in 'hsr' [ 204.034559][ T6742] Cannot create hsr debugfs directory [ 204.923291][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.923717][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.924041][ T6832] bridge_slave_0: entered allmulticast mode [ 204.932630][ T6832] bridge_slave_0: entered promiscuous mode [ 205.008852][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.009178][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.009461][ T6832] bridge_slave_1: entered allmulticast mode [ 205.058181][ T6832] bridge_slave_1: entered promiscuous mode [ 205.100533][ T6657] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.140974][ T6657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.189070][ T6657] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.222524][ T6657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.236233][ T5602] Bluetooth: hci3: command tx timeout [ 205.476418][ T5602] Bluetooth: hci1: command tx timeout [ 205.501682][ T6657] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.541609][ T6657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.555317][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.677046][ T6657] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.755557][ T6657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.780244][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.219193][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 206.380967][ T6832] team0: Port device team_slave_0 added [ 206.460831][ T6832] team0: Port device team_slave_1 added [ 207.070176][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.070560][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.070836][ T6874] bridge_slave_0: entered allmulticast mode [ 207.074228][ T6874] bridge_slave_0: entered promiscuous mode [ 207.118979][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.118994][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.119021][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.130456][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.131429][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.132206][ T6874] bridge_slave_1: entered allmulticast mode [ 207.158201][ T6874] bridge_slave_1: entered promiscuous mode [ 207.201042][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.201058][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.201087][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.403410][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.432314][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.455146][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.555858][ T5602] Bluetooth: hci1: command tx timeout [ 207.576613][ T1236] hsr_slave_0: left promiscuous mode [ 207.615855][ T1236] hsr_slave_1: left promiscuous mode [ 207.616708][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.616726][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.642702][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.642775][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.795966][ T1236] hsr_slave_0: left promiscuous mode [ 207.835828][ T1236] hsr_slave_1: left promiscuous mode [ 207.836720][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.836739][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.862614][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.862692][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.958128][ T1236] veth1_macvtap: left promiscuous mode [ 207.958208][ T1236] veth0_macvtap: left promiscuous mode [ 207.958415][ T1236] veth1_vlan: left promiscuous mode [ 207.958553][ T1236] veth0_vlan: left promiscuous mode [ 208.096106][ T1236] veth1_macvtap: left promiscuous mode [ 208.096179][ T1236] veth0_macvtap: left promiscuous mode [ 208.098239][ T1236] veth1_vlan: left promiscuous mode [ 208.098397][ T1236] veth0_vlan: left promiscuous mode [ 208.926507][ T1236] team0 (unregistering): Port device team_slave_1 removed [ 208.986709][ T1236] team0 (unregistering): Port device team_slave_0 removed [ 209.586431][ T1236] team0 (unregistering): Port device team_slave_1 removed [ 209.646710][ T1236] team0 (unregistering): Port device team_slave_0 removed [ 210.199067][ T6832] hsr_slave_0: entered promiscuous mode [ 210.200748][ T6832] hsr_slave_1: entered promiscuous mode [ 210.202189][ T6832] debugfs: 'hsr0' already exists in 'hsr' [ 210.202214][ T6832] Cannot create hsr debugfs directory [ 210.206381][ T6874] team0: Port device team_slave_0 added [ 210.244171][ T6874] team0: Port device team_slave_1 added [ 210.594367][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.594381][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.594400][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.654313][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.710002][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.710014][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.710032][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.824446][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.824616][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.990893][ T6874] hsr_slave_0: entered promiscuous mode [ 210.992646][ T6874] hsr_slave_1: entered promiscuous mode [ 210.994072][ T6874] debugfs: 'hsr0' already exists in 'hsr' [ 210.994102][ T6874] Cannot create hsr debugfs directory [ 211.028013][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.028213][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.509532][ T6742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.552865][ T6742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.603962][ T6742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.643933][ T6742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.862948][ T6832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.928247][ T6742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.970390][ T6742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.000089][ T6742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.031593][ T6742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.260689][ T6832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.347146][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.523400][ T6657] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.804731][ T6832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.886049][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.886295][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.034884][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.035127][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.250160][ T6832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.575507][ T1236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.012915][ T1236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.112381][ T6742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.421178][ T1236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.494724][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.648200][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.648375][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.865234][ T1236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.004741][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.010487][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.041683][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.176140][ T1236] bridge_slave_1: left allmulticast mode [ 216.176166][ T1236] bridge_slave_1: left promiscuous mode [ 216.176356][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.337037][ T1236] bridge_slave_0: left allmulticast mode [ 216.337064][ T1236] bridge_slave_0: left promiscuous mode [ 216.337317][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.576711][ T1236] bridge_slave_1: left allmulticast mode [ 216.576747][ T1236] bridge_slave_1: left promiscuous mode [ 216.577017][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.687537][ T1236] bridge_slave_0: left allmulticast mode [ 216.687564][ T1236] bridge_slave_0: left promiscuous mode [ 216.687753][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.037574][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.096443][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.138688][ T1236] bond0 (unregistering): Released all slaves [ 218.748211][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.806637][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.848410][ T1236] bond0 (unregistering): Released all slaves [ 218.978343][ T6657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.535445][ T6604] veth0_vlan: entered promiscuous mode [ 219.803751][ T6657] veth0_vlan: entered promiscuous mode [ 220.125031][ T6604] veth1_vlan: entered promiscuous mode [ 220.197323][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.338934][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.342084][ T6657] veth1_vlan: entered promiscuous mode [ 221.362351][ T6604] veth0_macvtap: entered promiscuous mode [ 221.408210][ T6604] veth1_macvtap: entered promiscuous mode [ 221.730575][ T6657] veth0_macvtap: entered promiscuous mode [ 221.930306][ T6657] veth1_macvtap: entered promiscuous mode [ 221.961924][ T6742] veth0_vlan: entered promiscuous mode [ 222.042021][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.245869][ T1236] hsr_slave_0: left promiscuous mode [ 222.287262][ T1236] hsr_slave_1: left promiscuous mode [ 222.288374][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.288399][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.328522][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.328549][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.525884][ T1236] hsr_slave_0: left promiscuous mode [ 222.565861][ T1236] hsr_slave_1: left promiscuous mode [ 222.566730][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.566750][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.606825][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.606845][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.694504][ T1236] veth1_macvtap: left promiscuous mode [ 222.694582][ T1236] veth0_macvtap: left promiscuous mode [ 222.694788][ T1236] veth1_vlan: left promiscuous mode [ 222.694928][ T1236] veth0_vlan: left promiscuous mode [ 222.816262][ T1236] veth1_macvtap: left promiscuous mode [ 222.816337][ T1236] veth0_macvtap: left promiscuous mode [ 222.816545][ T1236] veth1_vlan: left promiscuous mode [ 222.816878][ T1236] veth0_vlan: left promiscuous mode [ 223.667312][ T1236] team0 (unregistering): Port device team_slave_1 removed [ 223.726503][ T1236] team0 (unregistering): Port device team_slave_0 removed [ 224.340092][ T1236] team0 (unregistering): Port device team_slave_1 removed [ 224.386496][ T1236] team0 (unregistering): Port device team_slave_0 removed [ 224.653604][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.669463][ T6742] veth1_vlan: entered promiscuous mode [ 224.773113][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.773231][ T6832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.816253][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.913988][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.914116][ T6832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.952679][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.971175][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.974386][ T6832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.012798][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.014612][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.040123][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.144132][ T6832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.200735][ T6832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.223295][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.460230][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.570028][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.575640][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.621050][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.022553][ T6874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.249055][ T6874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.274198][ T6874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.443917][ T6874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.546583][ T6874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.605221][ T6874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.631663][ T6742] veth0_macvtap: entered promiscuous mode [ 226.649640][ T6874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.694318][ T6874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.813068][ T5853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.813089][ T5853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.817695][ T6742] veth1_macvtap: entered promiscuous mode [ 227.163137][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.163155][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.303728][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.331497][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.331516][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.453254][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.688532][ T5889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.714423][ T5889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.776182][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.776204][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.777989][ T5889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.883942][ T5889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.329649][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.884852][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.020955][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.028330][ T5853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.028347][ T5853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.071268][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.071519][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.212970][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.213135][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.532055][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.559786][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.559806][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.658688][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.658869][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.784963][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.799581][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.974730][ T7242] loop2: detected capacity change from 0 to 512 [ 229.988864][ T7242] EXT4-fs: Ignoring removed nobh option [ 230.012813][ T7242] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.342524][ T7242] EXT4-fs (loop2): 1 truncate cleaned up [ 230.368508][ T7242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.129796][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.271187][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 231.321014][ T7263] loop5: detected capacity change from 0 to 512 [ 231.591271][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 231.853019][ T7263] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.201: bg 0: block 104: invalid block bitmap [ 231.853233][ T7263] loop5: lost filesystem error report for type 5 error -117 [ 231.855759][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 231.855779][ C1] EXT4-fs (loop5): initial error at time 1783519302: ext4_validate_block_bitmap:432 [ 231.855878][ C1] EXT4-fs (loop5): last error at time 1783519302: ext4_validate_block_bitmap:432 [ 232.032584][ T7263] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 232.032608][ T7263] loop5: lost filesystem error report for type 5 error -117 [ 232.049661][ T7263] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.201: invalid indirect mapped block 1 (level 1) [ 232.049873][ T7263] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 232.073124][ T7263] EXT4-fs (loop5): 1 truncate cleaned up [ 232.196477][ T7263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.724245][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.877182][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.987707][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 233.086415][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 233.309241][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.523403][ T6832] veth0_vlan: entered promiscuous mode [ 233.661119][ T6832] veth1_vlan: entered promiscuous mode [ 234.133459][ T6874] veth0_vlan: entered promiscuous mode [ 234.244620][ T6832] veth0_macvtap: entered promiscuous mode [ 234.291718][ T6874] veth1_vlan: entered promiscuous mode [ 234.327701][ T6832] veth1_macvtap: entered promiscuous mode [ 234.491590][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.599755][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.720118][ T6874] veth0_macvtap: entered promiscuous mode [ 234.758816][ T1136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.110502][ T1136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.208963][ T1136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.212983][ T6874] veth1_macvtap: entered promiscuous mode [ 235.824438][ T7358] loop0: detected capacity change from 0 to 512 [ 235.907413][ T7358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.907537][ T7358] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.115447][ T6657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.230937][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 236.336084][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 244.036290][ T1136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.368185][ T7396] loop2: detected capacity change from 0 to 512 [ 244.385164][ T7396] EXT4-fs: Ignoring removed bh option [ 244.385188][ T7396] EXT4-fs: Ignoring removed oldalloc option [ 244.707829][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.862387][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.962694][ T7396] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 244.962716][ T7396] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 244.962728][ T7396] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.232: Corrupt directory, running e2fsck is recommended [ 245.351511][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.362483][ T7396] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 245.362551][ T7396] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.232: bad orphan inode 15 [ 245.362607][ T7396] loop2: lost filesystem error report for type 5 error -117 [ 245.372019][ C0] EXT4-fs (loop2): initial error at time 1783519316: ext4_orphan_get:1425 [ 245.372093][ C0] EXT4-fs (loop2): last error at time 1783519316: ext4_orphan_get:1425 [ 245.443180][ T7396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.467240][ T7418] netlink: 36 bytes leftover after parsing attributes in process `syz.5.237'. [ 245.510484][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.522611][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.572512][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.590336][ T1400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.590355][ T1400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.781264][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.967564][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 246.151927][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 246.215145][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.215166][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.228110][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.228130][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.698193][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.698214][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.478478][ T7483] loop5: detected capacity change from 0 to 512 [ 248.493187][ T7483] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 248.572376][ T7483] EXT4-fs (loop5): 1 truncate cleaned up [ 248.583398][ T7483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.752452][ T7483] EXT4-fs error (device loop5): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.5.254: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 248.980107][ T7483] EXT4-fs error (device loop5) in ext4_delete_entry:2744: Corrupt filesystem [ 253.513443][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.724755][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 253.972494][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 254.642155][ T7533] loop1: detected capacity change from 0 to 512 [ 254.653814][ T7533] EXT4-fs: Ignoring removed bh option [ 254.653837][ T7533] EXT4-fs: Ignoring removed oldalloc option [ 254.724340][ T7533] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 254.724375][ T7533] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 254.724395][ T7533] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.267: Corrupt directory, running e2fsck is recommended [ 254.806081][ T7533] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 254.806110][ T7533] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.267: bad orphan inode 15 [ 254.806143][ T7533] loop1: lost filesystem error report for type 5 error -117 [ 254.815000][ T7533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.014450][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.270'. [ 255.194162][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.303718][ T7553] loop0: detected capacity change from 0 to 256 [ 255.338864][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 255.516898][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 255.729010][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.729083][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.829837][ T7565] netlink: 132 bytes leftover after parsing attributes in process `syz.3.277'. [ 256.134351][ T7553] bio_check_eod: 30 callbacks suppressed [ 256.134373][ T7553] syz.0.273: attempt to access beyond end of device [ 256.134373][ T7553] loop0: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 256.134956][ T7553] syz.0.273: attempt to access beyond end of device [ 256.134956][ T7553] loop0: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 256.230780][ T39] audit: type=1800 audit(1783519326.840:2): pid=7553 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.273" name="file2" dev="loop0" ino=1048659 res=0 errno=0 [ 256.320177][ T7576] loop3: detected capacity change from 0 to 512 [ 256.340131][ T7576] EXT4-fs: Ignoring removed bh option [ 256.340152][ T7576] EXT4-fs: Ignoring removed oldalloc option [ 256.372675][ T7578] loop1: detected capacity change from 0 to 256 [ 256.640807][ T7576] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 256.640838][ T7576] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 256.640856][ T7576] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.281: Corrupt directory, running e2fsck is recommended [ 256.764304][ T7576] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 256.764332][ T7576] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.281: bad orphan inode 15 [ 256.764355][ T7576] loop3: lost filesystem error report for type 5 error -117 [ 256.775687][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 256.775711][ C1] EXT4-fs (loop3): initial error at time 1783519327: ext4_orphan_get:1425 [ 256.775734][ C1] EXT4-fs (loop3): last error at time 1783519327: ext4_orphan_get:1425 [ 256.892022][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 256.915921][ T7576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.097276][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 257.243074][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.384653][ T6832] Flush: task=syz-executor[6832] dev=loop3 state=2 [ 257.496006][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 257.513757][ T6832] Teardown: task=syz-executor[6832] dev=loop3 state=2 [ 257.661847][ T7598] 9pnet_fd: p9_fd_create_tcp (7598): problem connecting socket to 127.0.0.1 [ 258.711398][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 259.446404][ T7609] loop1: detected capacity change from 0 to 2048 [ 260.516712][ T7609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.475753][ T7609] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.289: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 262.524683][ T7609] EXT4-fs (loop1): Remounting filesystem read-only [ 263.363847][ T7649] 9pnet_fd: p9_fd_create_tcp (7649): problem connecting socket to 127.0.0.1 [ 264.364172][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.651249][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 264.729182][ T7660] 9p: Bad value for 'wfdno' [ 264.832943][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 264.912633][ T7669] loop5: detected capacity change from 0 to 512 [ 265.009009][ T7669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.009127][ T7669] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.535448][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.702788][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 265.787661][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 265.865258][ T7691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.318'. [ 266.177139][ T7699] 9pnet_fd: p9_fd_create_tcp (7699): problem connecting socket to 127.0.0.1 [ 267.503874][ T7714] loop1: detected capacity change from 0 to 512 [ 267.654875][ T7714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.654991][ T7714] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.889596][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.329'. [ 267.912449][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.065260][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 268.147633][ T7730] loop2: detected capacity change from 0 to 256 [ 268.178276][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 268.245988][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.246284][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.246323][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.251888][ T39] audit: type=1800 audit(1783519338.910:3): pid=7730 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.330" name="file1" dev="loop2" ino=1048662 res=0 errno=0 [ 268.254629][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.254839][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.254968][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.255104][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.255246][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.255373][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.255496][ T7730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 268.921655][ T7742] loop3: detected capacity change from 0 to 512 [ 269.021301][ T7742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.021427][ T7742] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.181249][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.202111][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 269.306380][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 269.392515][ T6832] Flush: task=syz-executor[6832] dev=loop3 state=2 [ 269.477051][ T6832] Teardown: task=syz-executor[6832] dev=loop3 state=2 [ 269.529870][ T7759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.340'. [ 270.577532][ T7785] loop1: detected capacity change from 0 to 2048 [ 270.577690][ T7793] netlink: 36 bytes leftover after parsing attributes in process `syz.3.353'. [ 270.712596][ T7785] loop1: p1 < > p2 p3 < > p4 < p5 > [ 270.712621][ T7785] loop1: partition table partially beyond EOD, truncated [ 270.712860][ T7785] loop1: p1 start 3405774849 is beyond EOD, truncated [ 270.747559][ T7785] loop1: p3 start 4225 is beyond EOD, truncated [ 270.868444][ T7801] loop2: detected capacity change from 0 to 512 [ 270.909031][ T7801] EXT4-fs (loop2): 1 truncate cleaned up [ 270.928250][ T7801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.479028][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 271.619678][ T39] audit: type=1800 audit(1783519342.280:4): pid=7810 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.356" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 271.738026][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 272.242867][ T7413] udevd[7413]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 272.280381][ T7400] udevd[7400]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 272.287267][ T7832] loop5: detected capacity change from 0 to 512 [ 272.309928][ T7401] udevd[7401]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 272.314692][ T7832] EXT4-fs: Ignoring removed bh option [ 272.452753][ T7832] EXT4-fs (loop5): 1 truncate cleaned up [ 272.467462][ T7832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.582830][ T39] audit: type=1800 audit(1783519343.240:5): pid=7832 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.363" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 273.054427][ T7847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.367'. [ 273.509962][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.592442][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 273.708751][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 274.703747][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 274.808110][ T7889] loop3: detected capacity change from 0 to 512 [ 274.810968][ T7889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 274.840837][ T7889] EXT4-fs (loop3): 1 truncate cleaned up [ 274.875388][ T7889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.109917][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.219160][ T6832] Flush: task=syz-executor[6832] dev=loop3 state=2 [ 275.306067][ T6832] Teardown: task=syz-executor[6832] dev=loop3 state=2 [ 275.875917][ T7807] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 276.186891][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 276.782635][ T7933] loop2: detected capacity change from 0 to 512 [ 276.891910][ T7933] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.394: bg 0: block 104: invalid block bitmap [ 276.891935][ T7933] loop2: lost filesystem error report for type 5 error -117 [ 276.895694][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 276.895717][ C0] EXT4-fs (loop2): initial error at time 1783519347: ext4_validate_block_bitmap:432 [ 276.895741][ C0] EXT4-fs (loop2): last error at time 1783519347: ext4_validate_block_bitmap:432 [ 276.953399][ T7933] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 276.953422][ T7933] loop2: lost filesystem error report for type 5 error -117 [ 276.959228][ T7933] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.394: invalid indirect mapped block 1 (level 1) [ 276.959321][ T7933] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 277.015863][ T7933] EXT4-fs (loop2): 1 truncate cleaned up [ 277.029095][ T7933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.456738][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.485439][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 277.549425][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 277.550328][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 277.678811][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 278.090008][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 280.281540][ T7989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.416'. [ 281.753835][ T8015] loop2: detected capacity change from 0 to 512 [ 281.767512][ T8015] EXT4-fs: Ignoring removed i_version option [ 281.784299][ T8015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.917044][ T8015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.917213][ T8015] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.150742][ T8027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.427'. [ 282.412770][ T39] audit: type=1800 audit(1783519353.070:6): pid=8015 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.2.424" name="e=winnt," dev="loop2" ino=18 res=0 errno=0 [ 282.782700][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.901803][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 282.986719][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 283.171950][ T8048] process 'syz.0.433' launched '/dev/fd/3' with NULL argv: empty string added [ 283.217219][ T8050] loop2: detected capacity change from 0 to 512 [ 283.218373][ T8050] EXT4-fs: Ignoring removed oldalloc option [ 283.286162][ T8050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.286257][ T8050] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.483378][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.818781][ T7400] Flush: task=udevd[7400] dev=loop2 state=2 [ 283.917012][ T7400] Teardown: task=udevd[7400] dev=loop2 state=2 [ 284.221543][ T8065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.440'. [ 285.992332][ T8090] loop2: detected capacity change from 0 to 512 [ 286.048055][ T8090] EXT4-fs: inline encryption not supported [ 286.069684][ T8090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.115977][ T8090] EXT4-fs (loop2): 1 truncate cleaned up [ 286.142407][ T8090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.444252][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.526878][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 286.620932][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 286.669008][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.796923][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 286.978737][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 287.256433][ T8118] loop2: detected capacity change from 0 to 256 [ 287.310577][ T8119] loop0: detected capacity change from 0 to 512 [ 287.351989][ T8119] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.403463][ T8119] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.462: Invalid block bitmap block 0 in block_group 0 [ 287.403500][ T8119] loop0: lost filesystem error report for type 5 error -117 [ 287.405931][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 287.405952][ C0] EXT4-fs (loop0): initial error at time 1783519358: ext4_read_block_bitmap_nowait:483 [ 287.405977][ C0] EXT4-fs (loop0): last error at time 1783519358: ext4_read_block_bitmap_nowait:483 [ 287.417085][ T8119] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 287.417361][ T8119] loop0: lost filesystem error report for type 5 error -117 [ 287.421693][ T8119] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.462: attempt to clear invalid blocks 983261 len 1 [ 287.421727][ T8119] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 287.427942][ T8119] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.462: Invalid inode table block 0 in block_group 0 [ 287.427966][ T8119] loop0: lost filesystem error report for type 5 error -117 [ 287.507385][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 287.507988][ T8119] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 287.508069][ T8119] loop0: lost filesystem error report for type 5 error -117 [ 287.584833][ T8119] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 287.584863][ T8119] loop0: lost filesystem error report for type 5 error -117 [ 287.587574][ T8119] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.462: Invalid inode table block 0 in block_group 0 [ 287.587666][ T8119] loop0: lost filesystem error report for type 5 error -117 [ 287.627733][ T8119] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 287.627761][ T8119] loop0: lost filesystem error report for type 5 error -117 [ 287.645767][ T8119] EXT4-fs error (device loop0): ext4_truncate:4691: inode #11: comm syz.0.462: mark_inode_dirty error [ 287.645800][ T8119] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 287.655825][ T8119] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 287.655905][ T8119] loop0: lost filesystem error report for type 5 error -117 [ 287.692463][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 287.743444][ T8119] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.462: Invalid inode table block 0 in block_group 0 [ 287.743469][ T8119] loop0: lost filesystem error report for type 5 error -117 [ 287.745472][ T8119] EXT4-fs (loop0): 1 truncate cleaned up [ 287.854079][ T8119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.967792][ T8124] loop2: detected capacity change from 0 to 512 [ 287.974454][ T8124] EXT4-fs: inline encryption not supported [ 287.995487][ T8124] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 288.017188][ T8124] EXT4-fs (loop2): 1 truncate cleaned up [ 288.023874][ T8124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.315237][ T6657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.410684][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 288.480576][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.573396][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 288.648852][ T7400] Flush: task=udevd[7400] dev=loop2 state=2 [ 288.747859][ T8137] loop0: detected capacity change from 0 to 512 [ 288.753311][ T8137] EXT4-fs: Ignoring removed bh option [ 288.779354][ T7400] Teardown: task=udevd[7400] dev=loop2 state=2 [ 288.895894][ T8137] EXT4-fs (loop0): 1 truncate cleaned up [ 288.937638][ T8137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.996157][ T8162] loop5: detected capacity change from 0 to 512 [ 290.011367][ T8162] EXT4-fs: inline encryption not supported [ 290.024773][ T8162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 290.058307][ T8162] EXT4-fs (loop5): 1 truncate cleaned up [ 290.122553][ T8162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.357815][ T8095] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 290.482955][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.526323][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 290.605946][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 293.086931][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.5.505'. [ 293.121951][ T8221] loop2: detected capacity change from 0 to 512 [ 293.343257][ T8221] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.504: bg 0: block 104: invalid block bitmap [ 293.343284][ T8221] loop2: lost filesystem error report for type 5 error -117 [ 293.344985][ T8221] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 293.345003][ T8221] loop2: lost filesystem error report for type 5 error -117 [ 293.345725][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 293.345746][ C0] EXT4-fs (loop2): initial error at time 1783519364: ext4_validate_block_bitmap:432 [ 293.345770][ C0] EXT4-fs (loop2): last error at time 1783519364: ext4_mb_clear_bb:6679 [ 293.346222][ T8221] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.504: invalid indirect mapped block 1 (level 1) [ 293.346255][ T8221] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 293.346919][ T8221] EXT4-fs (loop2): 1 truncate cleaned up [ 293.407219][ T8221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.661060][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.767647][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 293.865943][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 294.835908][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.519'. [ 294.865989][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.519'. [ 295.119586][ T8259] loop5: detected capacity change from 0 to 512 [ 295.219106][ T8259] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.520: bg 0: block 104: invalid block bitmap [ 295.219145][ T8259] loop5: lost filesystem error report for type 5 error -117 [ 295.235717][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 295.235757][ C1] EXT4-fs (loop5): initial error at time 1783519365: ext4_validate_block_bitmap:432 [ 295.235782][ C1] EXT4-fs (loop5): last error at time 1783519365: ext4_validate_block_bitmap:432 [ 295.288983][ T8259] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 295.289007][ T8259] loop5: lost filesystem error report for type 5 error -117 [ 295.299721][ T8259] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.520: invalid indirect mapped block 1 (level 1) [ 295.299818][ T8259] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 295.311449][ T8259] EXT4-fs (loop5): 1 truncate cleaned up [ 295.371465][ T8259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.393925][ T8218] syzkaller1: entered promiscuous mode [ 295.393951][ T8218] syzkaller1: entered allmulticast mode [ 295.769764][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.863375][ T7400] Flush: task=udevd[7400] dev=loop5 state=2 [ 295.976078][ T7400] Teardown: task=udevd[7400] dev=loop5 state=2 [ 297.470314][ T8288] loop5: detected capacity change from 0 to 1024 [ 297.473061][ T8288] EXT4-fs: Ignoring removed orlov option [ 297.550677][ T8288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.863647][ T8299] loop2: detected capacity change from 0 to 512 [ 297.937343][ T8299] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.536: bg 0: block 104: invalid block bitmap [ 297.937390][ T8299] loop2: lost filesystem error report for type 5 error -117 [ 297.941948][ T8299] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 297.941974][ T8299] loop2: lost filesystem error report for type 5 error -117 [ 297.946221][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 297.946244][ C1] EXT4-fs (loop2): initial error at time 1783519624: ext4_validate_block_bitmap:432 [ 297.946269][ C1] EXT4-fs (loop2): last error at time 1783519624: ext4_mb_clear_bb:6679 [ 298.045216][ T8299] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.536: invalid indirect mapped block 1 (level 1) [ 298.045253][ T8299] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 298.051454][ T8299] EXT4-fs (loop2): 1 truncate cleaned up [ 298.101955][ T8299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.617081][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.673798][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 298.705832][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.830541][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 298.877442][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 298.978791][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 300.124123][ T8337] loop1: detected capacity change from 0 to 512 [ 300.236670][ T6657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.247761][ T8337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 300.351184][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 300.391924][ T8337] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.550: Unimplemented hash flags: 0x0001 [ 300.391958][ T8337] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.550: Corrupt directory, running e2fsck is recommended [ 300.458790][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 300.687457][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.748940][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 300.869801][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 301.707755][ T8377] loop1: detected capacity change from 0 to 1024 [ 301.847777][ T8377] EXT4-fs: Ignoring removed orlov option [ 301.995390][ T8377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.061039][ T8394] loop2: detected capacity change from 0 to 1024 [ 302.063588][ T8394] EXT4-fs: Ignoring removed orlov option [ 302.108374][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.130195][ T8394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 302.130315][ T8394] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.212589][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 302.276107][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 302.343439][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 302.719200][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 302.833777][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 303.114150][ T8411] loop1: detected capacity change from 0 to 128 [ 303.875992][ T5594] Bluetooth: hci4: command 0x0406 tx timeout [ 303.876276][ T5598] Bluetooth: hci2: command 0x0406 tx timeout [ 304.059345][ T8430] loop5: detected capacity change from 0 to 1024 [ 304.060623][ T8430] EXT4-fs: Ignoring removed orlov option [ 304.084418][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 304.204320][ T8430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 304.204422][ T8430] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.233033][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 304.245104][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'. [ 304.445889][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 304.551172][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 304.645928][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 305.488609][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.603749][ T8462] loop1: detected capacity change from 0 to 2048 [ 305.827585][ T8462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.930366][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.601'. [ 305.931341][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.601'. [ 306.059864][ T8469] loop5: detected capacity change from 0 to 2048 [ 306.131219][ T8457] uprobe: syz.2.598:8457 failed to unregister, leaking uprobe [ 306.149420][ T8457] uprobe: syz.2.598:8457 failed to unregister, leaking uprobe [ 306.168959][ T8472] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 306.263597][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.604'. [ 306.318217][ T8472] EXT4-fs error (device loop1) in ext4_setattr:6172: error 28 [ 306.355142][ T8469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.370750][ T200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.436335][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.539212][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.584814][ T39] audit: type=1800 audit(1783519633.208:7): pid=8462 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.600" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 306.655325][ T7400] Flush: task=udevd[7400] dev=loop5 state=2 [ 306.744831][ T7400] Teardown: task=udevd[7400] dev=loop5 state=2 [ 306.921387][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.943546][ T8484] netlink: 64 bytes leftover after parsing attributes in process `syz.3.606'. [ 307.055883][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 307.094638][ T8487] syzkaller1: entered promiscuous mode [ 307.094675][ T8487] syzkaller1: entered allmulticast mode [ 307.136058][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 307.505509][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.717136][ T8504] loop1: detected capacity change from 0 to 2048 [ 307.852679][ T8504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.910655][ T8512] loop2: detected capacity change from 0 to 2048 [ 308.023663][ T8512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.086260][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.413361][ T7400] Flush: task=udevd[7400] dev=loop1 state=2 [ 308.425382][ T8522] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 308.499066][ T8522] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 308.499099][ T8522] EXT4-fs (loop2): This should not happen!! Data will be lost [ 308.499099][ T8522] [ 308.499116][ T8522] EXT4-fs (loop2): Total free blocks count 0 [ 308.499130][ T8522] EXT4-fs (loop2): Free/Dirty block details [ 308.499172][ T8522] EXT4-fs (loop2): free_blocks=66060288 [ 308.500913][ T8522] EXT4-fs (loop2): dirty_blocks=16 [ 308.501485][ T8522] EXT4-fs (loop2): Block reservation details [ 308.501502][ T8522] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 308.502912][ T8522] EXT4-fs error (device loop2) in ext4_setattr:6172: error 28 [ 308.516106][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.621879][ T7400] Teardown: task=udevd[7400] dev=loop1 state=2 [ 308.708639][ T8528] loop3: detected capacity change from 0 to 1024 [ 308.726254][ T8528] EXT4-fs: Ignoring removed orlov option [ 308.810143][ T8528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.069076][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.078697][ T6742] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 309.171090][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.199712][ T6832] Flush: task=syz-executor[6832] dev=loop3 state=2 [ 309.200056][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 309.305168][ T6832] Teardown: task=syz-executor[6832] dev=loop3 state=2 [ 309.326557][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 309.396798][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.556270][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.663300][ T8540] loop2: detected capacity change from 0 to 8192 [ 309.743774][ T8540] loop2: p1 p2 p3 [ 309.743806][ T8540] loop2: partition table partially beyond EOD, truncated [ 309.771782][ T8540] loop2: p1 start 51379968 is beyond EOD, truncated [ 309.796588][ T8540] loop2: p3 size 100663552 extends beyond EOD, truncated [ 310.185467][ T8551] loop3: detected capacity change from 0 to 512 [ 310.257711][ T7400] Flush: task=udevd[7400] dev=loop2 state=2 [ 310.297333][ T8551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 310.426103][ T7400] Teardown: task=udevd[7400] dev=loop2 state=2 [ 310.478654][ T8557] loop5: detected capacity change from 0 to 1024 [ 310.479897][ T8557] EXT4-fs: Ignoring removed orlov option [ 310.583665][ T8557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.600307][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.683323][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.768776][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.807334][ T7811] Flush: task=udevd[7811] dev=loop3 state=2 [ 310.983249][ T7811] Teardown: task=udevd[7811] dev=loop3 state=2 [ 311.018619][ T8563] loop2: detected capacity change from 0 to 512 [ 311.143005][ T7401] Flush: task=udevd[7401] dev=loop5 state=2 [ 311.162797][ T8563] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.637: bad orphan inode 15 [ 311.162827][ T8563] loop2: lost filesystem error report for type 5 error -117 [ 311.175670][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 311.175695][ C1] EXT4-fs (loop2): initial error at time 1783519637: ext4_orphan_get:1425 [ 311.175721][ C1] EXT4-fs (loop2): last error at time 1783519637: ext4_orphan_get:1425 [ 311.188421][ T8563] ext4_test_bit(bit=14, block=18) = 1 [ 311.188442][ T8563] is_bad_inode(inode)=0 [ 311.188452][ T8563] NEXT_ORPHAN(inode)=1023 [ 311.188461][ T8563] max_ino=32 [ 311.188470][ T8563] i_nlink=0 [ 311.265113][ T8563] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.637: corrupted xattr block 19: invalid header [ 311.265151][ T8563] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.283495][ T8563] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 311.311194][ T8563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 311.325783][ T8563] ext4 filesystem being mounted at /111/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 311.393342][ T8567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.400964][ T7401] Teardown: task=udevd[7401] dev=loop5 state=2 [ 311.451769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.583334][ T8567] syz.3.638 (8567) used greatest stack depth: 19048 bytes left [ 311.646237][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.944535][ T7811] udevd[7811]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 311.955179][ T7400] udevd[7400]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 312.156695][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 312.334236][ T8591] Flush: task=syz.2.648[8591] dev=loop2 state=2 [ 312.475300][ T8591] Teardown: task=syz.2.648[8591] dev=loop2 state=2 [ 312.496044][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.680441][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.751567][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.852561][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.320389][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.397003][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.807506][ T8625] loop3: detected capacity change from 0 to 512 [ 313.836161][ T8627] loop5: detected capacity change from 0 to 1024 [ 313.837329][ T8627] EXT4-fs: Ignoring removed orlov option [ 313.975151][ T8625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 313.997876][ T8627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.115811][ T4905] Bluetooth: hci0: command 0x0406 tx timeout [ 314.302273][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.388617][ T7400] Flush: task=udevd[7400] dev=loop3 state=2 [ 314.468117][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.547329][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 314.549266][ T7400] Teardown: task=udevd[7400] dev=loop3 state=2 [ 314.687728][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 315.796293][ T5708] net_ratelimit: 7 callbacks suppressed [ 315.796314][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.878544][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.372799][ T8672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.523231][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.523820][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.784841][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.796688][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.797332][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.800656][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.800978][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.187957][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.188055][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.335053][ T8691] loop6: detected capacity change from 0 to 1 [ 317.371838][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.692'. [ 317.372753][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.692'. [ 317.442436][ T8691] Dev loop6: unable to read RDB block 1 [ 317.442581][ T8691] loop6: unable to read partition table [ 317.442804][ T8691] loop6: partition table beyond EOD, truncated [ 317.442844][ T8691] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 317.546062][ T7811] Flush: task=udevd[7811] dev=loop6 state=2 [ 317.713624][ T7811] Teardown: task=udevd[7811] dev=loop6 state=2 [ 319.140399][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.704'. [ 319.150733][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.704'. [ 319.235844][ T5602] Bluetooth: hci3: command 0x0406 tx timeout [ 320.467145][ T8755] loop2: detected capacity change from 0 to 1024 [ 320.468373][ T8755] EXT4-fs: Ignoring removed orlov option [ 320.541209][ T8755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.682505][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.719'. [ 320.696860][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.719'. [ 320.812430][ T8751] loop1: detected capacity change from 0 to 8192 [ 321.002982][ T6742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.012834][ T5708] net_ratelimit: 47 callbacks suppressed [ 321.012851][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.120691][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 321.491169][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 321.710062][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 321.722574][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.827535][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 321.933928][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.934658][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.942363][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.992647][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.993574][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.076364][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.107753][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.288572][ T8773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.428224][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.731'. [ 322.430447][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.731'. [ 323.672993][ T8824] 9pnet_fd: p9_fd_create_tcp (8824): problem connecting socket to 127.0.0.1 [ 324.430767][ T4905] Bluetooth: hci1: command 0x0406 tx timeout [ 325.690848][ T8855] 9pnet_fd: p9_fd_create_tcp (8855): problem connecting socket to 127.0.0.1 [ 326.574835][ T5708] net_ratelimit: 24 callbacks suppressed [ 326.574856][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.676224][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.737535][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.737749][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.777505][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.908809][ T8867] loop5: detected capacity change from 0 to 256 [ 326.984801][ T8867] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 327.010826][ T39] audit: type=1800 audit(1783519653.658:8): pid=8867 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.5.763" name="file1" dev="loop5" ino=1048666 res=0 errno=0 [ 327.205248][ T7400] Flush: task=udevd[7400] dev=loop5 state=2 [ 327.299652][ T7400] Teardown: task=udevd[7400] dev=loop5 state=2 [ 327.636509][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.716432][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.916310][ T8892] loop1: detected capacity change from 0 to 512 [ 327.917598][ T8892] EXT4-fs: Ignoring removed bh option [ 328.025952][ T8892] EXT4-fs (loop1): 1 truncate cleaned up [ 328.034973][ T8892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.115286][ T39] audit: type=1800 audit(1783519654.768:9): pid=8892 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.773" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 328.684684][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.770163][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.851556][ T8913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.110770][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.330194][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 329.407229][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 329.824277][ T8940] loop3: detected capacity change from 0 to 512 [ 330.326549][ T7400] Flush: task=udevd[7400] dev=loop3 state=2 [ 330.330215][ T8944] loop0: detected capacity change from 0 to 1024 [ 330.352079][ T8944] EXT4-fs (loop0): unsupported descriptor size 0 [ 330.446287][ T7400] Teardown: task=udevd[7400] dev=loop3 state=2 [ 330.640586][ T7811] Flush: task=udevd[7811] dev=loop0 state=2 [ 330.716921][ T7811] Teardown: task=udevd[7811] dev=loop0 state=2 [ 331.395373][ T8969] loop0: detected capacity change from 0 to 512 [ 331.809013][ T1247] net_ratelimit: 326 callbacks suppressed [ 331.809034][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.888269][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.909928][ T7400] Flush: task=udevd[7400] dev=loop0 state=2 [ 331.997824][ T7400] Teardown: task=udevd[7400] dev=loop0 state=2 [ 332.370426][ T8996] loop3: detected capacity change from 0 to 1024 [ 332.373366][ T8996] EXT4-fs: Ignoring removed orlov option [ 332.434810][ T8996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.537501][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.603979][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.837671][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.838107][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.838260][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.841746][ T7400] Flush: task=udevd[7400] dev=loop3 state=2 [ 332.860383][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.937879][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.939174][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.956929][ T7400] Teardown: task=udevd[7400] dev=loop3 state=2 [ 333.919868][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.002755][ T9038] loop3: detected capacity change from 0 to 512 [ 334.004247][ T9038] EXT4-fs: Ignoring removed bh option [ 334.050433][ T9038] EXT4-fs (loop3): 1 truncate cleaned up [ 334.081388][ T9038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.187394][ T39] audit: type=1800 audit(1783519660.838:10): pid=9041 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.828" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 334.940237][ T9057] loop0: detected capacity change from 0 to 128 [ 334.951044][ T9057] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.008914][ T9057] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 335.241960][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.361896][ T6832] Flush: task=syz-executor[6832] dev=loop3 state=2 [ 335.521187][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 335.547350][ T6832] Teardown: task=syz-executor[6832] dev=loop3 state=2 [ 335.626288][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 335.741550][ T9075] loop3: detected capacity change from 0 to 512 [ 335.791671][ T9075] EXT4-fs (loop3): 1 truncate cleaned up [ 335.819465][ T9075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.891487][ T39] audit: type=1800 audit(1783519662.548:11): pid=9075 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.839" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 335.989601][ T9082] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.839: bg 0: block 465: padding at end of block bitmap is not set [ 336.031182][ T9082] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 336.031218][ T9082] EXT4-fs (loop3): This should not happen!! Data will be lost [ 336.031218][ T9082] [ 336.031235][ T9082] EXT4-fs (loop3): Total free blocks count 0 [ 336.032186][ T9082] EXT4-fs (loop3): Free/Dirty block details [ 336.032220][ T9082] EXT4-fs (loop3): free_blocks=0 [ 336.032248][ T9082] EXT4-fs (loop3): dirty_blocks=2 [ 336.032262][ T9082] EXT4-fs (loop3): Block reservation details [ 336.032277][ T9082] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 336.275548][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 336.285472][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 336.483267][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 336.483302][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 336.721121][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 336.721152][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'. [ 336.783372][ T6832] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 336.810336][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.900501][ T6832] Flush: task=syz-executor[6832] dev=loop3 state=2 [ 337.007552][ T1247] net_ratelimit: 17 callbacks suppressed [ 337.007573][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.017631][ T6832] Teardown: task=syz-executor[6832] dev=loop3 state=2 [ 337.076704][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.077049][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.242781][ T9100] loop1: detected capacity change from 0 to 512 [ 337.250557][ T9100] EXT4-fs: Ignoring removed bh option [ 337.295430][ T9100] EXT4-fs (loop1): 1 truncate cleaned up [ 337.313406][ T9100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.415287][ T39] audit: type=1800 audit(1783519664.068:12): pid=9100 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.849" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 338.036345][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.116683][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.116945][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.314434][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.376107][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 338.506098][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 338.916590][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.916916][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.918669][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.076775][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.218264][ T9140] netlink: 'syz.3.867': attribute type 12 has an invalid length. [ 339.411452][ T9145] loop0: detected capacity change from 0 to 512 [ 339.426912][ T9145] EXT4-fs: Ignoring removed bh option [ 339.443997][ T9145] EXT4-fs (loop0): 1 truncate cleaned up [ 339.451074][ T9145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.585200][ T39] audit: type=1800 audit(1783519666.238:13): pid=9145 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.869" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 340.002114][ T9153] loop5: detected capacity change from 0 to 256 [ 340.498617][ T6657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.586195][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 340.656610][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 340.866803][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 340.949657][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 341.181989][ T9160] dummy0: entered promiscuous mode [ 341.333804][ T9160] dummy0: left promiscuous mode [ 342.156564][ T11] net_ratelimit: 9 callbacks suppressed [ 342.156585][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.206392][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.280052][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.829600][ T9181] loop0: detected capacity change from 0 to 512 [ 342.833938][ T9181] EXT4-fs: Ignoring removed bh option [ 342.927725][ T9181] EXT4-fs (loop0): 1 truncate cleaned up [ 342.953523][ T9181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.077548][ T9188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.080446][ T9188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.082186][ T9188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.083399][ T9188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.124514][ T9188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.191408][ T39] audit: type=1800 audit(1783519669.848:14): pid=9181 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.883" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 343.240507][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.266554][ T9188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.596127][ T6657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.683977][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 343.782140][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 344.472594][ T9198] syzkaller1: entered promiscuous mode [ 344.472621][ T9198] syzkaller1: entered allmulticast mode [ 345.281709][ T9222] loop0: detected capacity change from 0 to 512 [ 345.309424][ T9222] EXT4-fs: Ignoring removed bh option [ 345.346559][ T9224] loop2: detected capacity change from 0 to 512 [ 345.384928][ T9222] EXT4-fs (loop0): 1 truncate cleaned up [ 345.412906][ T9222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.640610][ T39] audit: type=1800 audit(1783519672.298:15): pid=9222 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.898" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 345.724093][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 345.752256][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 345.902594][ T6742] Flush: task=syz-executor[6742] dev=loop2 state=2 [ 345.986507][ T6742] Teardown: task=syz-executor[6742] dev=loop2 state=2 [ 346.274006][ T6657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.372382][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 346.517605][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 347.248220][ T9261] loop0: detected capacity change from 0 to 512 [ 347.361471][ T9264] netlink: 26 bytes leftover after parsing attributes in process `syz.1.915'. [ 347.398405][ T32] net_ratelimit: 50 callbacks suppressed [ 347.398493][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.476062][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.657467][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.749458][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.751185][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.752366][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.753400][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.753859][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.817287][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 347.874108][ T9265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.987843][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 348.037591][ T200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.454702][ T9286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.924'. [ 350.342108][ T9314] loop0: detected capacity change from 0 to 1024 [ 350.454318][ T9314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.660754][ T6657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.783243][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 350.930419][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 351.275028][ T39] audit: type=1326 audit(1783519677.888:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 351.275087][ T39] audit: type=1326 audit(1783519677.928:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 351.275138][ T39] audit: type=1326 audit(1783519677.928:18): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 351.282730][ T39] audit: type=1326 audit(1783519677.938:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 351.282868][ T39] audit: type=1326 audit(1783519677.938:20): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 351.283056][ T39] audit: type=1326 audit(1783519677.938:21): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 351.283181][ T39] audit: type=1326 audit(1783519677.938:22): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 351.283305][ T39] audit: type=1326 audit(1783519677.938:23): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 351.296761][ T39] audit: type=1326 audit(1783519677.958:24): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 351.296819][ T39] audit: type=1326 audit(1783519677.958:25): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9328 comm="syz.0.937" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2d4331de59 code=0x7ffc0000 [ 352.596582][ T5708] net_ratelimit: 56 callbacks suppressed [ 352.596602][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.844815][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.041845][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.073795][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.073836][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.112112][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.114311][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.146725][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.656074][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.769023][ T9388] loop5: detected capacity change from 0 to 512 [ 353.785808][ T9388] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.827170][ T9388] EXT4-fs (loop5): 1 truncate cleaned up [ 353.847673][ T9388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.876183][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.969990][ T9391] loop1: detected capacity change from 0 to 512 [ 354.042034][ T5602] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 354.067755][ T9391] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 354.067898][ T9391] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.964: corrupted in-inode xattr: e_value size too large [ 354.067990][ T9391] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 354.069271][ T9391] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.964: couldn't read orphan inode 15 (err -117) [ 354.069305][ T9391] loop1: lost filesystem error report for type 5 error -117 [ 354.096788][ T9391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.450568][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.487337][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 354.529675][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.580888][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 354.580978][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 354.736580][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 354.817094][ T9399] loop5: detected capacity change from 0 to 512 [ 354.861722][ T9399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.861893][ T9399] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.155077][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.222222][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 355.345997][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 355.947622][ T9422] loop5: detected capacity change from 0 to 512 [ 355.984544][ T9422] EXT4-fs (loop5): 1 truncate cleaned up [ 356.009667][ T9422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.419477][ T9426] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 356.532026][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.638838][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 356.729670][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 357.410272][ T9452] loop5: detected capacity change from 0 to 256 [ 357.503236][ T9452] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 357.606766][ T9455] net_ratelimit: 54 callbacks suppressed [ 357.606785][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.607295][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.607924][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.608456][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.609035][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.609704][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.610397][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.611086][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.611784][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.612292][ T9455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.620612][ T9452] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.006407][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 358.086100][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 358.184091][ T9460] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 359.826119][ T9502] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 360.394317][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 360.394337][ T39] audit: type=1326 audit(1783519687.048:28): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9509 comm="syz.2.1011" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efecd0ede59 code=0x0 [ 361.357823][ T9540] loop1: detected capacity change from 0 to 2048 [ 361.477464][ T9540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.738273][ T9553] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 361.757561][ T9552] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 361.793040][ T9552] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 361.793076][ T9552] EXT4-fs (loop1): This should not happen!! Data will be lost [ 361.793076][ T9552] [ 361.793093][ T9552] EXT4-fs (loop1): Total free blocks count 0 [ 361.793109][ T9552] EXT4-fs (loop1): Free/Dirty block details [ 361.793124][ T9552] EXT4-fs (loop1): free_blocks=66060288 [ 361.793140][ T9552] EXT4-fs (loop1): dirty_blocks=64 [ 361.793154][ T9552] EXT4-fs (loop1): Block reservation details [ 361.793167][ T9552] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 361.878417][ T9552] EXT4-fs error (device loop1) in ext4_setattr:6172: error 28 [ 362.154883][ T8856] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 362.190129][ T6874] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 362.287068][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 362.357289][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 362.622375][ T5770] net_ratelimit: 69 callbacks suppressed [ 362.622397][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.002422][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.262346][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.317762][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.337242][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.346787][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.346820][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.367865][ T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.465294][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.595168][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.711482][ T9587] netlink: 'syz.5.1035': attribute type 10 has an invalid length. [ 363.784286][ T9586] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 363.979237][ T9591] loop1: detected capacity change from 0 to 256 [ 364.067219][ T39] audit: type=1800 audit(1783519690.728:29): pid=9591 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.1038" name="file2" dev="loop1" ino=1048669 res=0 errno=0 [ 364.115828][ T4905] Bluetooth: hci5: command 0x1003 tx timeout [ 364.118445][ T5602] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 364.501336][ T9591] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 364.501518][ T9591] FAT-fs (loop1): Filesystem has been set read-only [ 364.501621][ T9591] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 364.660606][ T9591] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 364.693869][ T9591] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 365.046586][ T6874] Flush: task=syz-executor[6874] dev=loop1 state=2 [ 365.049571][ T9609] netlink: 'syz.3.1044': attribute type 12 has an invalid length. [ 365.256991][ T6874] Teardown: task=syz-executor[6874] dev=loop1 state=2 [ 365.420165][ T9615] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 366.780283][ T9632] syz.5.1053 (9632) used greatest stack depth: 18784 bytes left [ 367.079481][ T9646] netlink: 'syz.5.1060': attribute type 12 has an invalid length. [ 367.261977][ T9649] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 367.835579][ T32] net_ratelimit: 242 callbacks suppressed [ 367.878213][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.199526][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.310752][ T9668] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1068'. [ 368.385192][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.447696][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.468475][ T9664] syzkaller1: entered promiscuous mode [ 368.468501][ T9664] syzkaller1: entered allmulticast mode [ 368.516130][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.237334][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.354824][ T9697] loop5: detected capacity change from 0 to 512 [ 369.366430][ T9697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 369.396833][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.431382][ T9697] EXT4-fs (loop5): 1 truncate cleaned up [ 369.447172][ T9697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.479010][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.557413][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.578317][ T6604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.639896][ T6604] Flush: task=syz-executor[6604] dev=loop5 state=2 [ 369.716076][ T6604] Teardown: task=syz-executor[6604] dev=loop5 state=2 [ 369.796545][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.220693][ T39] audit: type=1326 audit(1783519696.878:30): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9708 comm="syz.0.1085" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d4331de59 code=0x0 [ 370.523028][ T9719] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1088'. [ 372.840047][ T11] net_ratelimit: 7 callbacks suppressed [ 372.840068][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.922566][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.922805][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.073122][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.245373][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.248797][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.249164][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.302135][ T9735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.317323][ T9736] loop0: detected capacity change from 0 to 512 [ 373.330637][ T9736] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 373.398369][ T9736] EXT4-fs (loop0): 1 truncate cleaned up [ 373.404220][ T9736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.695570][ T6657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.747113][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 373.856178][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 374.169481][ T39] audit: type=1326 audit(1783519700.828:31): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9758 comm="syz.3.1100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18c80ede59 code=0x0 [ 374.286042][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.286320][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.391493][ T9764] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1103'. [ 374.794691][ T9771] netlink: 'syz.2.1105': attribute type 10 has an invalid length. [ 374.814292][ T9771] team0: Device bridge0 is up. Set it down before adding it as a team port [ 377.886200][ T9803] net_ratelimit: 13 callbacks suppressed [ 377.886220][ T9803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.887367][ T9803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.893292][ T9803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.962252][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.032403][ T9801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.064020][ T9801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.193358][ T39] audit: type=1326 audit(1783519704.848:32): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9810 comm="syz.5.1121" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85a5e6de59 code=0x0 [ 378.208537][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.209562][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.519839][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.613178][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.613286][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.620725][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.133540][ T9971] net_ratelimit: 22 callbacks suppressed [ 383.133560][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.134097][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.134626][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.185227][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.186599][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.199404][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.203009][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.208632][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.213306][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.378486][ T9971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.604433][T10012] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1202'. [ 384.615347][T10010] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1202'. [ 385.066150][T10019] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1206'. [ 386.688317][T10040] bond0: entered promiscuous mode [ 386.688340][T10040] bond_slave_0: entered promiscuous mode [ 386.688574][T10040] bond_slave_1: entered promiscuous mode [ 386.688774][T10040] bond0: entered allmulticast mode [ 386.688791][T10040] bond_slave_0: entered allmulticast mode [ 386.688814][T10040] bond_slave_1: entered allmulticast mode [ 387.741090][T10086] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 388.198488][ T11] net_ratelimit: 56 callbacks suppressed [ 388.198507][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.199557][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.466828][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.467186][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.468759][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.528397][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.528892][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.532958][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.533341][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.533708][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.701098][T10116] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 388.701139][T10116] syzkaller1: owner set to 0 [ 388.745976][T10116] netlink: 'syz.0.1252': attribute type 4 has an invalid length. [ 388.862640][T10122] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 389.282945][T10131] loop0: detected capacity change from 0 to 512 [ 389.294568][T10131] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 389.344608][T10131] EXT4-fs (loop0): 1 truncate cleaned up [ 389.356936][T10131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.483789][ T6657] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.539413][ T6657] Flush: task=syz-executor[6657] dev=loop0 state=2 [ 389.616245][ T6657] Teardown: task=syz-executor[6657] dev=loop0 state=2 [ 389.893065][T10148] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 390.042265][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'. [ 390.436812][ T5602] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 390.746224][T10173] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 391.197975][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1281'. [ 392.012514][T10205] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 392.376424][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1294'. [ 393.105773][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 393.315883][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 393.381421][ T32] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 393.381454][ T32] usb 1-1: config 0 has no interface number 0 [ 393.403574][ T32] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 393.403614][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.403635][ T32] usb 1-1: Product: syz [ 393.403650][ T32] usb 1-1: Manufacturer: syz [ 393.403665][ T32] usb 1-1: SerialNumber: syz [ 393.549112][ T32] usb 1-1: config 0 descriptor?? [ 393.905427][T10240] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 393.959061][ C0] net_ratelimit: 620 callbacks suppressed [ 393.959081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.980217][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.100898][ T32] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 394.100931][ T32] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 394.148043][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.148375][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.518581][T10250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.736674][T10250] ªªªªªª: renamed from virt_wifi0 [ 394.794194][ T32] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 394.811261][ T32] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 394.931557][ T32] usb 1-1: USB disconnect, device number 2 [ 395.114846][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.290620][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.667236][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.808648][ T5577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.184903][T10275] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 396.361652][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.194267][ T5889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.543821][ T4905] BUG: unable to handle page fault for address: ffffc90004a61010 [ 398.543841][ T4905] #PF: supervisor read access in kernel mode [ 398.543852][ T4905] #PF: error_code(0x0000) - not-present page [ 398.543862][ T4905] PGD 13fed0067 P4D 13fed0067 PUD 1be88067 PMD 25df7067 PTE 0 [ 398.543902][ T4905] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 398.544035][ T4905] CPU: 0 UID: 0 PID: 4905 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.544057][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.544069][ T4905] Workqueue: hci0 hci_rx_work [ 398.544100][ T4905] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 398.544150][ T4905] Code: b3 8d 4c 8b b8 b8 c2 9d 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 18 22 8e 4d 8b 3f 49 81 ff 00 18 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 9b 41 08 03 84 c0 74 0e 49 8b 07 49 [ 398.544196][ T4905] RSP: 0018:ffffc900103e7a98 EFLAGS: 00010287 [ 398.544221][ T4905] RAX: 0000000000000000 RBX: ffff888036538000 RCX: 0000000000000000 [ 398.544236][ T4905] RDX: 000000009a78d6fb RSI: 0000000000000001 RDI: ffffffff8bca6e20 [ 398.544250][ T4905] RBP: 0000000000100000 R08: 0600000000000000 R09: 0000000000000000 [ 398.544264][ T4905] R10: 0000000000000000 R11: ffffffff8e1c3840 R12: 0000000000000002 [ 398.544279][ T4905] R13: 0000000000000001 R14: ffff88802b9d0000 R15: ffffc90004a61000 [ 398.544294][ T4905] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 398.544311][ T4905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.544326][ T4905] CR2: ffffc90004a61010 CR3: 000000005fe1c000 CR4: 00000000003526f0 [ 398.544345][ T4905] Call Trace: [ 398.544375][ T4905] [ 398.544438][ T4905] hci_rx_work+0x10f/0x1020 [ 398.544494][ T4905] ? process_one_work+0x7fd/0x1480 [ 398.544556][ T4905] process_one_work+0xaaf/0x1480 [ 398.544591][ T4905] ? __pfx_process_one_work+0x10/0x10 [ 398.544617][ T4905] ? do_raw_spin_lock+0x12b/0x2f0 [ 398.544640][ T4905] ? assign_work+0x3cf/0x5d0 [ 398.544668][ T4905] worker_thread+0xb05/0x10d0 [ 398.544706][ T4905] kthread+0x388/0x470 [ 398.544725][ T4905] ? __pfx_worker_thread+0x10/0x10 [ 398.544752][ T4905] ? __pfx_kthread+0x10/0x10 [ 398.544772][ T4905] ret_from_fork+0x514/0xb70 [ 398.544792][ T4905] ? __pfx_ret_from_fork+0x10/0x10 [ 398.544813][ T4905] ? __switch_to+0xc89/0x1420 [ 398.544843][ T4905] ? __pfx_kthread+0x10/0x10 [ 398.544862][ T4905] ret_from_fork_asm+0x1a/0x30 [ 398.544890][ T4905] [ 398.544898][ T4905] Modules linked in: [ 398.544924][ T4905] CR2: ffffc90004a61010 [ 398.544940][ T4905] ---[ end trace 0000000000000000 ]--- [ 398.544951][ T4905] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 398.544974][ T4905] Code: b3 8d 4c 8b b8 b8 c2 9d 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 18 22 8e 4d 8b 3f 49 81 ff 00 18 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 9b 41 08 03 84 c0 74 0e 49 8b 07 49 [ 398.544991][ T4905] RSP: 0018:ffffc900103e7a98 EFLAGS: 00010287 [ 398.545009][ T4905] RAX: 0000000000000000 RBX: ffff888036538000 RCX: 0000000000000000 [ 398.545022][ T4905] RDX: 000000009a78d6fb RSI: 0000000000000001 RDI: ffffffff8bca6e20 [ 398.545036][ T4905] RBP: 0000000000100000 R08: 0600000000000000 R09: 0000000000000000 [ 398.545050][ T4905] R10: 0000000000000000 R11: ffffffff8e1c3840 R12: 0000000000000002 [ 398.545064][ T4905] R13: 0000000000000001 R14: ffff88802b9d0000 R15: ffffc90004a61000 [ 398.545080][ T4905] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 398.545097][ T4905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.545112][ T4905] CR2: ffffc90004a61010 CR3: 000000005fe1c000 CR4: 00000000003526f0 [ 398.545140][ T4905] Kernel panic - not syncing: Fatal exception [ 398.545743][ T4905] Kernel Offset: disabled