last executing test programs: 5.358619578s ago: executing program 0 (id=1657): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000020) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000340)=ANY=[], 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x420000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259}, 0x94) 4.802375744s ago: executing program 1 (id=1663): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') 4.727042368s ago: executing program 1 (id=1664): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 4.26104577s ago: executing program 3 (id=1667): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000020) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000340)=ANY=[], 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x420000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259}, 0x94) 4.159721945s ago: executing program 2 (id=1669): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000380)='./bus\x00', 0xa, &(0x7f0000001480)=ANY=[], 0xfd, 0x553e, &(0x7f0000006b40)="$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") socket$kcm(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) 4.020600321s ago: executing program 0 (id=1671): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20048881}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) 3.761726943s ago: executing program 1 (id=1674): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') 3.659709768s ago: executing program 1 (id=1675): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000020) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[], 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x420000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259}, 0x94) 3.210156739s ago: executing program 2 (id=1676): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000020) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000340)=ANY=[], 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x420000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259}, 0x94) 2.890061584s ago: executing program 2 (id=1677): prlimit64(0x0, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)=r2}, 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2.857555456s ago: executing program 3 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 2.77774077s ago: executing program 4 (id=1679): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x64, 0x65, 0x63, 0x37, 0x36, 0x34, 0x63, 0x38, 0x31, 0x1d, 0x37, 0x38, 0x32, 0x63, 0x36, 0x35]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x3a}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x66, 0x30, 0x1f883727f4bc645d, 0x37, 0x30, 0x63, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x33, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x2a}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x0, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x35, 0x38, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x65, 0x30, 0x35, 0x30, 0x63, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000800)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566768899aabbccddeeff001122c6445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x31, 0x34, 0x30, 0x38, 0x34, 0x32, 0x62, 0x30, 0x63, 0x66, 0x31, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x34, 0x65, 0x30, 0x36, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x36, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x67, 0x63, 0x66, 0x30, 0x64, 0x31, 0x30, 0x66]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aaaabbccddeeff00", 0x10}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 2.738133421s ago: executing program 4 (id=1680): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) 2.444357295s ago: executing program 1 (id=1681): syz_io_uring_setup(0x34bc, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r0, r1, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x1591c80d49614632, 0x100}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000540)=0x24) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 2.404771627s ago: executing program 4 (id=1682): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000020) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000340)=ANY=[], 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x420000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259}, 0x94) 2.009200976s ago: executing program 0 (id=1683): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') 1.982225967s ago: executing program 0 (id=1684): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 1.973527257s ago: executing program 2 (id=1685): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') 1.892785671s ago: executing program 3 (id=1686): prlimit64(0x0, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)=r3}, 0x20) ppoll(&(0x7f0000000100)=[{r4, 0x4559}], 0x1, 0x0, 0x0, 0x0) 1.857562273s ago: executing program 2 (id=1687): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') 1.573267636s ago: executing program 2 (id=1688): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000020) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000340)=ANY=[], 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x420000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259}, 0x94) 1.49444631s ago: executing program 1 (id=1689): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000020) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000340)=ANY=[], 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x420000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259}, 0x94) 1.026423792s ago: executing program 0 (id=1690): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:'], 0x9) read$FUSE(r3, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040054}, 0x24000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x403, &(0x7f0000000000)={0x0}) close(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) 1.026218322s ago: executing program 4 (id=1691): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) 964.467915ms ago: executing program 3 (id=1692): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000020) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000340)=ANY=[], 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x420000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259}, 0x94) 950.996606ms ago: executing program 4 (id=1693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0xb0090198) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) socket(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 87.011206ms ago: executing program 0 (id=1694): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[], 0x60}}, 0x200040c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) socket(0x28, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) accept4$unix(r3, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f0000000580)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2}}}}}}}, 0x0) 86.755436ms ago: executing program 3 (id=1695): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(r0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') 58.675057ms ago: executing program 3 (id=1696): prlimit64(0x0, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)=r2}, 0x20) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1697): syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x7c) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800", 0x2}], 0x1) readv(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): r (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 119.858814][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.860107][ T5868] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.298: corrupted inode contents [ 119.862376][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.863567][ T5868] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #12: comm syz.3.298: mark_inode_dirty error [ 119.868164][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.869211][ T5868] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.298: corrupted inode contents [ 119.880482][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.881689][ T5868] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.298: mark_inode_dirty error [ 119.887043][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.889397][ T5875] device syzkaller0 entered promiscuous mode [ 119.895401][ T5875] tipc: Started in network mode [ 119.896912][ T5868] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.298: corrupted inode contents [ 119.901854][ T5875] tipc: Node identity 6269391983bd, cluster identity 4711 [ 119.903109][ T5875] tipc: Enabled bearer , priority 0 [ 119.910500][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.911668][ T5868] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 119.917160][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.918266][ T5868] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.298: corrupted inode contents [ 119.920486][ T5875] tipc: Resetting bearer [ 119.922137][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.923277][ T5868] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.298: mark_inode_dirty error [ 119.946717][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.948120][ T5868] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 119.950660][ T5868] EXT4-fs (loop3): Remounting filesystem read-only [ 119.951990][ T5868] EXT4-fs (loop3): 1 truncate cleaned up [ 119.953038][ T5868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.004316][ T5874] tipc: Resetting bearer [ 121.358326][ T5885] loop4: detected capacity change from 0 to 128 [ 121.407179][ T5874] tipc: Disabling bearer [ 121.411228][ T4319] tipc: Node number set to 3788781849 [ 123.206169][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 123.241740][ T5912] loop2: detected capacity change from 0 to 256 [ 123.530606][ T5912] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 124.273217][ T5916] loop1: detected capacity change from 0 to 40427 [ 124.284270][ T5916] F2FS-fs (loop1): invalid crc value [ 124.312419][ T5916] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 124.348014][ T5916] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.436245][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 124.779569][ T4330] syz-executor: attempt to access beyond end of device [ 124.779569][ T4330] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 125.319497][ T6015] loop2: detected capacity change from 0 to 512 [ 125.337062][ T6015] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.398548][ T6015] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.316: Allocating blocks 41-42 which overlap fs metadata [ 125.401224][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.402363][ T6015] Quota error (device loop2): write_blk: dquota write failed [ 125.403667][ T6015] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 125.408806][ T6015] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.316: Allocating blocks 41-42 which overlap fs metadata [ 125.427176][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.428400][ T6015] Quota error (device loop2): write_blk: dquota write failed [ 125.429722][ T6015] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 125.431474][ T6015] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.316: Failed to acquire dquot type 1 [ 125.466153][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.476036][ T6015] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 125.495740][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.502481][ T6015] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.316: corrupted inode contents [ 125.513974][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.519748][ T6015] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.316: mark_inode_dirty error [ 125.526336][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.535724][ T6015] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.316: corrupted inode contents [ 125.544856][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.550665][ T6015] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.316: mark_inode_dirty error [ 125.559767][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.562051][ T6031] jffs2: notice: (6031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.569954][ T6015] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.316: corrupted inode contents [ 125.956330][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.969403][ T6015] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 125.979061][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.984624][ T6015] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.316: corrupted inode contents [ 125.995624][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 125.999039][ T6015] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.316: mark_inode_dirty error [ 126.012976][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 126.019601][ T6015] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 126.025024][ T6015] EXT4-fs (loop2): Remounting filesystem read-only [ 126.031952][ T6015] EXT4-fs (loop2): 1 truncate cleaned up [ 126.036917][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.038485][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.040269][ T6015] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.107835][ T6037] loop4: detected capacity change from 0 to 512 [ 126.123889][ T6037] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.148303][ T6037] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.318: Allocating blocks 41-42 which overlap fs metadata [ 126.153202][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.157020][ T6037] Quota error (device loop4): write_blk: dquota write failed [ 126.163995][ T6037] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 126.171247][ T6037] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.318: Allocating blocks 41-42 which overlap fs metadata [ 126.183505][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.189060][ T6037] Quota error (device loop4): write_blk: dquota write failed [ 126.193644][ T6037] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 126.201637][ T6037] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.318: Failed to acquire dquot type 1 [ 126.209147][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.214676][ T6037] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 126.226073][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.231558][ T6037] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.318: corrupted inode contents [ 126.237071][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.241544][ T6037] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.318: mark_inode_dirty error [ 126.249209][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.253633][ T6037] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.318: corrupted inode contents [ 126.255609][ T6039] loop0: detected capacity change from 0 to 40427 [ 126.261314][ T6039] F2FS-fs (loop0): invalid crc value [ 126.264021][ T6039] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 126.266614][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.267796][ T6037] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.318: mark_inode_dirty error [ 126.270185][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.271511][ T6037] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.318: corrupted inode contents [ 126.280295][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.283182][ T6037] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 126.291075][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.292395][ T6039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.294373][ T6037] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.318: corrupted inode contents [ 126.297437][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.298743][ T6037] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.318: mark_inode_dirty error [ 126.317460][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.318849][ T6037] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 126.320785][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 126.322285][ T6037] EXT4-fs (loop4): 1 truncate cleaned up [ 126.323476][ T6037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.824301][ T6057] loop1: detected capacity change from 0 to 512 [ 126.836910][ T6057] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.039265][ T4332] syz-executor: attempt to access beyond end of device [ 127.039265][ T4332] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 127.046701][ T6057] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.321: Allocating blocks 41-42 which overlap fs metadata [ 127.049863][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.051042][ T6057] Quota error (device loop1): write_blk: dquota write failed [ 127.052316][ T6057] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 127.053928][ T6057] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.321: Allocating blocks 41-42 which overlap fs metadata [ 127.070237][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.071486][ T6057] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.321: Failed to acquire dquot type 1 [ 127.080143][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.081258][ T6057] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 127.090281][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.093621][ T6057] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.321: corrupted inode contents [ 127.094420][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 127.095873][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.106664][ T6057] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #12: comm syz.1.321: mark_inode_dirty error [ 127.109021][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.110187][ T6057] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.321: corrupted inode contents [ 127.121656][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.122887][ T6057] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.321: mark_inode_dirty error [ 127.128120][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.129372][ T6057] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.321: corrupted inode contents [ 127.135056][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.136225][ T6057] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 127.139396][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.140502][ T6057] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.321: corrupted inode contents [ 127.153444][ T6062] loop4: detected capacity change from 0 to 512 [ 127.156687][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.157820][ T6057] EXT4-fs error (device loop1): ext4_truncate:4325: inode #12: comm syz.1.321: mark_inode_dirty error [ 127.162409][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.163536][ T6057] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 127.165529][ T6062] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.172666][ T6057] EXT4-fs (loop1): Remounting filesystem read-only [ 127.187116][ T6057] EXT4-fs (loop1): 1 truncate cleaned up [ 127.188592][ T6057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 127.263529][ T6062] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.323: Allocating blocks 41-42 which overlap fs metadata [ 127.270471][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.271723][ T6062] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.323: Allocating blocks 41-42 which overlap fs metadata [ 127.277154][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.278474][ T6062] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.323: Failed to acquire dquot type 1 [ 127.286142][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.294840][ T6062] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 127.301035][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.302092][ T6062] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.323: corrupted inode contents [ 127.307553][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.308626][ T6062] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.323: mark_inode_dirty error [ 127.315229][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.324483][ T6062] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.323: corrupted inode contents [ 127.327903][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.329072][ T6062] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.323: mark_inode_dirty error [ 127.337046][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.338526][ T6062] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.323: corrupted inode contents [ 127.360419][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.361530][ T6062] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 127.363413][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.364608][ T6062] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.323: corrupted inode contents [ 127.376462][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.380229][ T6062] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.323: mark_inode_dirty error [ 127.387542][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.390919][ T6062] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 127.397750][ T6062] EXT4-fs (loop4): Remounting filesystem read-only [ 127.403478][ T6062] EXT4-fs (loop4): 1 truncate cleaned up [ 127.414261][ T6062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.537811][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 128.154360][ T6083] loop2: detected capacity change from 0 to 128 [ 128.719298][ T6087] loop0: detected capacity change from 0 to 512 [ 128.739722][ T6087] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.328: Unrecognised inode hash code 255 [ 128.742673][ T6087] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.328: Corrupt directory, running e2fsck is recommended [ 128.759047][ T6087] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 128.764835][ T6087] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.328: corrupted in-inode xattr [ 128.772609][ T6087] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.328: couldn't read orphan inode 15 (err -117) [ 128.780354][ T6087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.973979][ T6094] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.328: Unrecognised inode hash code 255 [ 128.976325][ T6094] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.328: Corrupt directory, running e2fsck is recommended [ 128.979858][ T6094] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 4: comm syz.0.328: path /66/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0 [ 129.222141][ T6094] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 64: comm syz.0.328: path /66/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 129.576858][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 130.548226][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 130.575273][ T6106] loop1: detected capacity change from 0 to 512 [ 130.582018][ T6107] jffs2: notice: (6107) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.588910][ T6106] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.958334][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 130.961724][ T6106] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.333: Allocating blocks 41-42 which overlap fs metadata [ 130.964478][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 130.965704][ T6106] __quota_error: 6 callbacks suppressed [ 130.965713][ T6106] Quota error (device loop1): write_blk: dquota write failed [ 130.968201][ T6106] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 130.969796][ T6106] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.333: Allocating blocks 41-42 which overlap fs metadata [ 130.973144][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 130.980098][ T6106] Quota error (device loop1): write_blk: dquota write failed [ 130.987128][ T6106] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 130.988713][ T6106] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.333: Failed to acquire dquot type 1 [ 130.994987][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 130.996322][ T6106] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 130.999675][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.000807][ T6106] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.333: corrupted inode contents [ 131.003779][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.005804][ T6106] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #12: comm syz.1.333: mark_inode_dirty error [ 131.013439][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.014684][ T6106] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.333: corrupted inode contents [ 131.018511][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.019648][ T6106] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.333: mark_inode_dirty error [ 131.022243][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.023530][ T6106] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.333: corrupted inode contents [ 131.025597][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.026960][ T6106] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 131.032099][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.033240][ T6106] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.333: corrupted inode contents [ 131.070974][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.072193][ T6106] EXT4-fs error (device loop1): ext4_truncate:4325: inode #12: comm syz.1.333: mark_inode_dirty error [ 131.079412][ T6118] loop2: detected capacity change from 0 to 512 [ 131.087871][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.089094][ T6106] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 131.091000][ T6118] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.097658][ T6106] EXT4-fs (loop1): Remounting filesystem read-only [ 131.102189][ T6106] EXT4-fs (loop1): 1 truncate cleaned up [ 131.103274][ T6106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.126939][ T6118] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.336: Allocating blocks 41-42 which overlap fs metadata [ 131.129519][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.130703][ T6118] Quota error (device loop2): write_blk: dquota write failed [ 131.132104][ T6118] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 131.133673][ T6118] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.336: Allocating blocks 41-42 which overlap fs metadata [ 131.145555][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.146900][ T6118] Quota error (device loop2): write_blk: dquota write failed [ 131.148304][ T6118] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 131.150080][ T6118] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.336: Failed to acquire dquot type 1 [ 131.154966][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.157015][ T6118] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 131.167015][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.168163][ T6118] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.336: corrupted inode contents [ 131.171101][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.172239][ T6118] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.336: mark_inode_dirty error [ 131.177245][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.178486][ T6118] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.336: corrupted inode contents [ 131.186964][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.191668][ T6118] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.336: mark_inode_dirty error [ 131.198170][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.199332][ T6118] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.336: corrupted inode contents [ 131.211923][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.213000][ T6118] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 131.222049][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.223157][ T6118] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.336: corrupted inode contents [ 131.234129][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.238616][ T6118] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.336: mark_inode_dirty error [ 131.292160][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.293335][ T6118] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 131.301552][ T6118] EXT4-fs (loop2): Remounting filesystem read-only [ 131.302994][ T6118] EXT4-fs (loop2): 1 truncate cleaned up [ 131.304060][ T6118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.518395][ T6128] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 132.058231][ T6140] loop3: detected capacity change from 0 to 40427 [ 132.064008][ T6140] F2FS-fs (loop3): invalid crc value [ 132.118039][ T6140] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.127221][ T6140] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 132.182895][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 132.195959][ T6146] loop4: detected capacity change from 0 to 512 [ 132.236747][ T4346] Bluetooth: hci2: command 0x2016 tx timeout [ 132.240067][ T6146] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.941441][ T6146] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.343: Allocating blocks 41-42 which overlap fs metadata [ 132.954309][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 132.955697][ T6146] Quota error (device loop4): write_blk: dquota write failed [ 132.959951][ T6149] device syzkaller0 entered promiscuous mode [ 132.968058][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 132.969663][ T6146] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 132.971358][ T6146] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.343: Allocating blocks 41-42 which overlap fs metadata [ 133.008157][ T6149] tipc: Started in network mode [ 133.009056][ T6149] tipc: Node identity 1657e823e184, cluster identity 4711 [ 133.010471][ T6149] tipc: Enabled bearer , priority 0 [ 133.011762][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.013062][ T6146] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.343: Failed to acquire dquot type 1 [ 133.015966][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.020597][ T6146] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 133.033351][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.034643][ T6146] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.343: corrupted inode contents [ 133.038943][ T6149] tipc: Resetting bearer [ 133.056894][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.060926][ T6146] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.343: mark_inode_dirty error [ 133.068701][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.069906][ T6146] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.343: corrupted inode contents [ 133.078546][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.079714][ T6146] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.343: mark_inode_dirty error [ 133.092086][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.093292][ T6146] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.343: corrupted inode contents [ 133.095763][ T6148] tipc: Resetting bearer [ 133.110349][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.111623][ T6146] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 133.115769][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.120232][ T6146] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.343: corrupted inode contents [ 133.127064][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.128387][ T6146] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.343: mark_inode_dirty error [ 133.140719][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.141833][ T6146] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 133.146975][ T6146] EXT4-fs (loop4): Remounting filesystem read-only [ 133.153273][ T6146] EXT4-fs (loop4): 1 truncate cleaned up [ 133.154417][ T6146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.340565][ T4336] syz-executor: attempt to access beyond end of device [ 133.340565][ T4336] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.362535][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 133.376868][ T6157] loop0: detected capacity change from 0 to 8192 [ 133.379303][ T6157] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.387620][ T6148] tipc: Disabling bearer [ 133.389742][ T6157] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 133.391416][ T6157] REISERFS (device loop0): using ordered data mode [ 133.392602][ T6157] reiserfs: using flush barriers [ 133.404013][ T6157] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.406996][ T6157] REISERFS (device loop0): checking transaction log (loop0) [ 133.410209][ T6160] loop2: detected capacity change from 0 to 512 [ 133.417469][ T6157] REISERFS (device loop0): Using r5 hash to sort names [ 133.419570][ T6157] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 133.423246][ T6160] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.463604][ T6160] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.344: Allocating blocks 41-42 which overlap fs metadata [ 133.466539][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 133.468587][ T6160] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.344: Allocating blocks 41-42 which overlap fs metadata [ 133.482028][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 133.483632][ T6160] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.344: Failed to acquire dquot type 1 [ 133.485968][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 133.489908][ T6160] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 133.515106][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 133.516289][ T6160] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.344: corrupted inode contents [ 133.520184][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 133.521180][ T6160] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.344: mark_inode_dirty error [ 133.527091][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 133.528310][ T6160] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.344: corrupted inode contents [ 133.543168][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 133.544419][ T6160] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.344: mark_inode_dirty error [ 133.553008][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 133.714638][ T6173] jffs2: notice: (6173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.555151][ T6173] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 134.585359][ T6160] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.344: corrupted inode contents [ 134.613909][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 134.615137][ T6160] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 134.623927][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 134.625132][ T6160] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.344: corrupted inode contents [ 134.646625][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 134.647768][ T6160] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.344: mark_inode_dirty error [ 134.651124][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 134.652342][ T6160] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 134.656904][ T6160] EXT4-fs (loop2): Remounting filesystem read-only [ 134.657735][ T6182] loop1: detected capacity change from 0 to 512 [ 134.659561][ T6160] EXT4-fs (loop2): 1 truncate cleaned up [ 134.660633][ T6160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.736033][ T6186] loop3: detected capacity change from 0 to 512 [ 134.751837][ T6186] EXT4-fs (loop3): Test dummy encryption mode enabled [ 134.753009][ T6186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.755588][ T6182] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.766539][ T6186] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.345: bad orphan inode 131072 [ 134.769300][ T6186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.348017][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 135.370216][ T6182] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.352: Allocating blocks 41-42 which overlap fs metadata [ 135.376144][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 135.378422][ T6182] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.352: Allocating blocks 41-42 which overlap fs metadata [ 135.450967][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 135.452962][ T6182] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.352: Failed to acquire dquot type 1 [ 135.455622][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 135.460284][ T6182] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 135.466250][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 135.470852][ T6182] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.352: corrupted inode contents [ 135.474608][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 135.478072][ T6182] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #12: comm syz.1.352: mark_inode_dirty error [ 135.481313][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 135.483352][ T6182] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.352: corrupted inode contents [ 135.487803][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 135.489476][ T6182] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.352: mark_inode_dirty error [ 135.491874][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 135.493227][ T6182] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.352: corrupted inode contents [ 135.495875][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 135.497631][ T6182] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 135.769139][ T6204] EXT4-fs error (device loop3): ext4_lookup:1860: inode #15: comm syz.3.345: iget: bad extra_isize 1312 (inode size 256) [ 136.499546][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 136.500939][ T6182] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.352: corrupted inode contents [ 136.504002][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 136.505235][ T6182] EXT4-fs error (device loop1): ext4_truncate:4325: inode #12: comm syz.1.352: mark_inode_dirty error [ 136.508061][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 137.092138][ T6182] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 137.100008][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 137.101089][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 137.110635][ T6182] EXT4-fs (loop1): 1 truncate cleaned up [ 137.117473][ T6182] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.146514][ T6215] loop4: detected capacity change from 0 to 512 [ 137.159364][ T6215] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.243589][ T6215] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.357: Allocating blocks 41-42 which overlap fs metadata [ 137.246326][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 137.250755][ T6215] __quota_error: 10 callbacks suppressed [ 137.250767][ T6215] Quota error (device loop4): write_blk: dquota write failed [ 137.253103][ T6215] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 137.254846][ T6215] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.357: Allocating blocks 41-42 which overlap fs metadata [ 137.266995][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 137.268374][ T6215] Quota error (device loop4): write_blk: dquota write failed [ 137.269731][ T6215] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 137.271506][ T6215] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.357: Failed to acquire dquot type 1 [ 137.277813][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 137.574108][ T6227] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.615599][ T4337] Bluetooth: Wrong link type (-22) [ 138.012324][ T6215] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 138.049478][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.055702][ T6215] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.357: corrupted inode contents [ 138.059098][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.060144][ T6215] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.357: mark_inode_dirty error [ 138.070702][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.071885][ T6215] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.357: corrupted inode contents [ 138.077522][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.078660][ T6215] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.357: mark_inode_dirty error [ 138.084392][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.085634][ T6215] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.357: corrupted inode contents [ 138.091167][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.146774][ T6215] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 138.148839][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.149977][ T6215] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.357: corrupted inode contents [ 138.156754][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.158092][ T6215] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.357: mark_inode_dirty error [ 138.161697][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.163003][ T6215] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 138.166958][ T6215] EXT4-fs (loop4): Remounting filesystem read-only [ 138.168491][ T6215] EXT4-fs (loop4): 1 truncate cleaned up [ 138.169420][ T6215] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.567490][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 138.719729][ T6241] loop3: detected capacity change from 0 to 40427 [ 138.731033][ T6241] F2FS-fs (loop3): invalid crc value [ 138.762909][ T6241] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 138.777530][ T6241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.492964][ T4336] syz-executor: attempt to access beyond end of device [ 139.492964][ T4336] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 140.936959][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 140.979717][ T6281] loop1: detected capacity change from 0 to 512 [ 141.018379][ T6281] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.124631][ T6281] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.373: Allocating blocks 41-42 which overlap fs metadata [ 141.127678][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.129105][ T6281] Quota error (device loop1): write_blk: dquota write failed [ 141.131925][ T6281] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 141.133888][ T6281] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.373: Allocating blocks 41-42 which overlap fs metadata [ 141.144421][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.148947][ T6281] Quota error (device loop1): write_blk: dquota write failed [ 141.152780][ T6281] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 141.160292][ T6281] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.373: Failed to acquire dquot type 1 [ 141.169998][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.175023][ T6281] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 141.188170][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.191802][ T6281] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.373: corrupted inode contents [ 141.219947][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.225266][ T6281] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #12: comm syz.1.373: mark_inode_dirty error [ 141.233567][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.236015][ T6281] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.373: corrupted inode contents [ 141.254585][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.260200][ T6281] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.373: mark_inode_dirty error [ 141.302735][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.305197][ T6281] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.373: corrupted inode contents [ 141.311041][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.314775][ T6281] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 141.320676][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.323137][ T6281] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.373: corrupted inode contents [ 141.350239][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.354139][ T6281] EXT4-fs error (device loop1): ext4_truncate:4325: inode #12: comm syz.1.373: mark_inode_dirty error [ 141.437983][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.439215][ T6281] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 141.444553][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 141.451480][ T6281] EXT4-fs (loop1): 1 truncate cleaned up [ 141.516782][ T6281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.297526][ T6289] loop4: detected capacity change from 0 to 8192 [ 142.330488][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 142.333700][ T6289] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 142.339002][ T6289] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 142.343224][ T6289] REISERFS (device loop4): using ordered data mode [ 142.344527][ T6289] reiserfs: using flush barriers [ 142.351503][ T6289] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.391926][ T6289] REISERFS (device loop4): checking transaction log (loop4) [ 142.393824][ T6289] REISERFS (device loop4): Using r5 hash to sort names [ 142.399958][ T6289] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 142.456033][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'. [ 142.474371][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'. [ 142.810907][ T6309] loop1: detected capacity change from 0 to 512 [ 142.853378][ T6323] loop0: detected capacity change from 0 to 128 [ 142.864206][ T6323] EXT4-fs (loop0): Test dummy encryption mode enabled [ 142.870175][ T6309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.884016][ T6309] netlink: 'syz.1.378': attribute type 10 has an invalid length. [ 142.884050][ T6323] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 142.893715][ T6309] bridge0: port 3(syz_tun) entered disabled state [ 142.895698][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.897076][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.905487][ T6323] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 142.918613][ T6309] bridge0: port 3(syz_tun) entered blocking state [ 142.919873][ T6309] bridge0: port 3(syz_tun) entered forwarding state [ 142.921708][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.923063][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.924521][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.925819][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.930252][ T6309] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 142.990111][ T6327] LUN: removable file: (no medium) [ 143.026402][ T6330] loop4: detected capacity change from 0 to 512 [ 143.029341][ T6330] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.042108][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 143.063338][ T6330] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.383: Allocating blocks 41-42 which overlap fs metadata [ 143.076282][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.079656][ T6330] Quota error (device loop4): write_blk: dquota write failed [ 143.081047][ T6330] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 143.084266][ T6330] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 143.089329][ T6330] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.383: Failed to acquire dquot type 1 [ 143.094693][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.098015][ T6330] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 143.105317][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.108820][ T6330] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.383: corrupted inode contents [ 143.114162][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.115457][ T6330] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.383: mark_inode_dirty error [ 143.122821][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.124321][ T6330] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.383: corrupted inode contents [ 143.140516][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.141776][ T6330] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.383: mark_inode_dirty error [ 143.145527][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.151666][ T6330] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.383: corrupted inode contents [ 143.158065][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.159511][ T6330] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 143.164571][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.173578][ T6330] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.383: corrupted inode contents [ 143.178260][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.650589][ T6330] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.383: mark_inode_dirty error [ 143.810848][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.812555][ T6330] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 143.852031][ T6330] EXT4-fs (loop4): Remounting filesystem read-only [ 143.942969][ T6330] EXT4-fs (loop4): 1 truncate cleaned up [ 143.944106][ T6330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.987129][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 144.516643][ T6351] loop1: detected capacity change from 0 to 256 [ 144.519370][ T6351] exfat: Deprecated parameter 'utf8' [ 144.525033][ T6351] exfat: Deprecated parameter 'utf8' [ 144.526090][ T6351] exfat: Deprecated parameter 'utf8' [ 144.539310][ T6351] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 145.854262][ T6368] loop1: detected capacity change from 0 to 128 [ 146.687914][ T6374] loop2: detected capacity change from 0 to 8192 [ 146.729471][ T6374] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.924840][ T6374] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 147.117240][ T6374] REISERFS (device loop2): using ordered data mode [ 147.118376][ T6374] reiserfs: using flush barriers [ 147.120600][ T6374] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.123694][ T6374] REISERFS (device loop2): checking transaction log (loop2) [ 147.128619][ T6374] REISERFS (device loop2): Using r5 hash to sort names [ 147.136386][ T6374] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 147.555581][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 149.296294][ T6426] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.193382][ T6435] loop1: detected capacity change from 0 to 512 [ 150.204918][ T6435] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.235559][ T6435] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3861: comm syz.1.411: Allocating blocks 41-42 which overlap fs metadata [ 150.326756][ T6441] 0x7073726500000000-0x7073726500306e61 : "" [ 150.328058][ T6441] mtd: partition "" is out of reach -- disabled [ 150.567608][ T6441] ftl_cs: FTL header not found. [ 150.589706][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.591695][ T6443] loop2: detected capacity change from 0 to 512 [ 150.593052][ T6435] Quota error (device loop1): write_blk: dquota write failed [ 150.599036][ T6435] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 150.606466][ T6435] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 150.665799][ T6435] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.411: Failed to acquire dquot type 1 [ 150.669322][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.671002][ T6435] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 150.675884][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.679397][ T6435] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.411: corrupted inode contents [ 150.681643][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.682831][ T6435] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #12: comm syz.1.411: mark_inode_dirty error [ 150.686050][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.689209][ T6435] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.411: corrupted inode contents [ 150.691389][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.696183][ T6435] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.411: mark_inode_dirty error [ 150.699256][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.700376][ T6435] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.411: corrupted inode contents [ 150.702563][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.703721][ T6435] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 150.705522][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.896111][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 150.902842][ T6435] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.411: corrupted inode contents [ 150.910027][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.912516][ T6435] EXT4-fs error (device loop1): ext4_truncate:4325: inode #12: comm syz.1.411: mark_inode_dirty error [ 150.919682][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.922118][ T6435] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 150.925960][ T6435] EXT4-fs (loop1): Remounting filesystem read-only [ 150.928527][ T6435] EXT4-fs (loop1): 1 truncate cleaned up [ 150.930622][ T6435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.555191][ T6463] loop2: detected capacity change from 0 to 512 [ 151.725335][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'. [ 153.267278][ T6494] jffs2: notice: (6494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.268900][ T6493] bridge0: port 4(erspan0) entered blocking state [ 153.271805][ T6493] bridge0: port 4(erspan0) entered disabled state [ 153.281143][ T6493] device erspan0 entered promiscuous mode [ 153.284176][ T6493] bridge0: port 4(erspan0) entered blocking state [ 153.285420][ T6493] bridge0: port 4(erspan0) entered forwarding state [ 153.360085][ T6493] device erspan0 left promiscuous mode [ 153.363794][ T6493] bridge0: port 4(erspan0) entered disabled state [ 153.694040][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 153.695680][ T4337] Bluetooth: hci0: command 0x0406 tx timeout [ 153.697668][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 153.699094][ T4345] Bluetooth: hci4: command 0x0406 tx timeout [ 153.703226][ T4346] Bluetooth: hci1: command 0x0406 tx timeout [ 153.970037][ T6479] loop0: detected capacity change from 0 to 40427 [ 153.974900][ T6479] F2FS-fs (loop0): invalid crc value [ 154.076100][ T6479] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 154.090470][ T6479] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 154.600437][ T4332] syz-executor: attempt to access beyond end of device [ 154.600437][ T4332] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 154.604366][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 155.965341][ T6547] loop0: detected capacity change from 0 to 512 [ 155.990942][ T6550] loop2: detected capacity change from 0 to 256 [ 155.992514][ T6550] FAT-fs (loop2): Unrecognized mount option "rø¶°" or missing value [ 155.998294][ T6547] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.977211][ T6558] netlink: 'syz.2.439': attribute type 12 has an invalid length. [ 157.570896][ T6564] loop4: detected capacity change from 0 to 512 [ 157.578941][ T6564] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.611052][ T6547] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.433: Allocating blocks 41-42 which overlap fs metadata [ 157.613469][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.614710][ T6547] Quota error (device loop0): write_blk: dquota write failed [ 157.615942][ T6547] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 157.620431][ T6547] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.433: Allocating blocks 41-42 which overlap fs metadata [ 157.636629][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.637809][ T6547] Quota error (device loop0): write_blk: dquota write failed [ 157.647471][ T6547] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 157.652902][ T6570] loop2: detected capacity change from 0 to 512 [ 157.654712][ T6547] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.433: Failed to acquire dquot type 1 [ 157.658895][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.660242][ T6547] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 157.667355][ T6570] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.673460][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.674743][ T6547] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.433: corrupted inode contents [ 157.687449][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.688778][ T6547] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #12: comm syz.0.433: mark_inode_dirty error [ 157.695562][ T6570] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.445: Allocating blocks 41-42 which overlap fs metadata [ 157.698669][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.699808][ T6570] Quota error (device loop2): write_blk: dquota write failed [ 157.702270][ T6564] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.442: Allocating blocks 41-42 which overlap fs metadata [ 157.705409][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.707512][ T6564] Quota error (device loop4): write_blk: dquota write failed [ 157.708906][ T6564] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 157.710561][ T6564] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.442: Allocating blocks 41-42 which overlap fs metadata [ 157.718015][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.719164][ T6547] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.433: corrupted inode contents [ 157.721396][ T6570] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 157.723070][ T6570] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.445: Allocating blocks 41-42 which overlap fs metadata [ 157.746113][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.748252][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.749437][ T6564] Quota error (device loop4): write_blk: dquota write failed [ 157.750751][ T6564] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 157.752586][ T6564] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.442: Failed to acquire dquot type 1 [ 157.754812][ T6547] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.433: mark_inode_dirty error [ 157.757637][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.758919][ T6570] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.445: Failed to acquire dquot type 1 [ 157.761325][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.762505][ T6547] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.433: corrupted inode contents [ 157.764720][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.766018][ T6570] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 157.770569][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.771836][ T6547] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 157.773551][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.774776][ T6564] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 157.781711][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.782981][ T6570] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.445: corrupted inode contents [ 157.787318][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.788393][ T6547] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.433: corrupted inode contents [ 157.796211][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.800513][ T6564] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.442: corrupted inode contents [ 157.802720][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.803930][ T6570] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.445: mark_inode_dirty error [ 157.806492][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.808452][ T6547] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.433: mark_inode_dirty error [ 157.816398][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.817970][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.819075][ T6564] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.442: mark_inode_dirty error [ 157.826532][ T6547] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 157.827646][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.830381][ T6570] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.445: corrupted inode contents [ 157.832691][ T6547] EXT4-fs (loop0): Remounting filesystem read-only [ 157.834184][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.835391][ T6564] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.442: corrupted inode contents [ 157.838003][ T6547] EXT4-fs (loop0): 1 truncate cleaned up [ 157.839125][ T6547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.842890][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.844005][ T6570] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.445: mark_inode_dirty error [ 157.846323][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.856285][ T6564] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.442: mark_inode_dirty error [ 157.858883][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.860055][ T6570] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.445: corrupted inode contents [ 157.862415][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.869025][ T6564] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.442: corrupted inode contents [ 157.873902][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.875119][ T6570] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 157.887158][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.888311][ T6564] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 157.904217][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.905472][ T6570] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.445: corrupted inode contents [ 157.909216][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.910339][ T6564] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.442: corrupted inode contents [ 157.923110][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.924291][ T6570] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.445: mark_inode_dirty error [ 157.926863][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.927994][ T6564] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.442: mark_inode_dirty error [ 157.948835][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.950067][ T6564] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 157.951788][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.952916][ T6570] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 157.958433][ T6570] EXT4-fs (loop2): Remounting filesystem read-only [ 157.959972][ T6564] EXT4-fs (loop4): Remounting filesystem read-only [ 157.970326][ T6570] EXT4-fs (loop2): 1 truncate cleaned up [ 157.971319][ T6570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.973813][ T6564] EXT4-fs (loop4): 1 truncate cleaned up [ 157.974795][ T6564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.980608][ T6574] loop3: detected capacity change from 0 to 256 [ 157.981803][ T6565] loop1: detected capacity change from 0 to 40427 [ 157.982132][ T6574] exfat: Deprecated parameter 'utf8' [ 158.040919][ T6574] exfat: Deprecated parameter 'utf8' [ 158.042013][ T6574] exfat: Deprecated parameter 'utf8' [ 158.116210][ T6565] F2FS-fs (loop1): invalid crc value [ 158.323056][ T6574] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 158.342119][ T6565] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 158.364610][ T6565] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.452349][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 158.706321][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 159.104589][ T4330] syz-executor: attempt to access beyond end of device [ 159.104589][ T4330] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.249739][ T6602] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 160.514417][ T6625] bridge0: port 1(erspan0) entered blocking state [ 160.515814][ T6625] bridge0: port 1(erspan0) entered disabled state [ 160.520114][ T6625] device erspan0 entered promiscuous mode [ 160.532906][ T6625] bridge0: port 1(erspan0) entered blocking state [ 160.533960][ T6625] bridge0: port 1(erspan0) entered forwarding state [ 160.608650][ T6625] device erspan0 left promiscuous mode [ 160.611121][ T6625] bridge0: port 1(erspan0) entered disabled state [ 161.021384][ T6630] loop2: detected capacity change from 0 to 512 [ 161.097311][ T6630] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.197665][ T6632] loop3: detected capacity change from 0 to 32768 [ 161.223835][ T6630] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.457: Allocating blocks 41-42 which overlap fs metadata [ 161.227012][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.228341][ T6630] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.457: Allocating blocks 41-42 which overlap fs metadata [ 161.236292][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 161.241829][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.243235][ T6630] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.457: Failed to acquire dquot type 1 [ 161.253361][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.254533][ T6630] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 161.265253][ T6632] XFS (loop3): Mounting V5 Filesystem [ 161.272001][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.273126][ T6630] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.457: corrupted inode contents [ 161.283263][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.284420][ T6630] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.457: mark_inode_dirty error [ 161.299513][ T6632] XFS (loop3): Ending clean mount [ 161.303614][ T6632] XFS (loop3): Quotacheck needed: Please wait. [ 161.322043][ T6632] XFS (loop3): Quotacheck: Done. [ 161.396493][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.406109][ T6630] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.457: corrupted inode contents [ 161.416400][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.419357][ T6630] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.457: mark_inode_dirty error [ 161.421445][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.422699][ T6630] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.457: corrupted inode contents [ 161.497335][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.498559][ T6630] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 161.753310][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.773680][ T6630] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.457: corrupted inode contents [ 161.775797][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.785100][ T6630] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.457: mark_inode_dirty error [ 161.790363][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.791478][ T6630] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 161.793476][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 161.797430][ T6630] EXT4-fs (loop2): 1 truncate cleaned up [ 161.798612][ T6630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.819077][ T6650] loop4: detected capacity change from 0 to 1024 [ 161.820760][ T6650] EXT4-fs: Ignoring removed bh option [ 162.382648][ T6650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.405922][ T4336] XFS (loop3): Unmounting Filesystem [ 162.437092][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 163.603724][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 163.738075][ T6683] loop2: detected capacity change from 0 to 8192 [ 163.761260][ T6683] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.775955][ T6683] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 163.778321][ T6683] REISERFS (device loop2): using ordered data mode [ 163.779400][ T6683] reiserfs: using flush barriers [ 163.800812][ T6683] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.803749][ T6683] REISERFS (device loop2): checking transaction log (loop2) [ 164.164487][ T6683] REISERFS (device loop2): Using tea hash to sort names [ 164.166116][ T6683] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 164.175194][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 164.288421][ T6705] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.233532][ T6720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.476'. [ 166.044412][ T6727] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 166.888671][ T4453] bond0: (slave bond_slave_0): link status definitely up [ 166.944447][ T4453] bond0: active interface up! [ 167.134304][ T6748] null_blk: disk rnullb0 created [ 167.137284][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 167.152377][ T6736] loop3: detected capacity change from 0 to 40427 [ 167.218327][ T6761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.220605][ T6761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.327341][ T5146] bond0: (slave bond_slave_0): interface is now down [ 167.343372][ T5146] bond0: now running without any active interface! [ 167.477729][ T6736] F2FS-fs (loop3): invalid crc value [ 167.524190][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.490'. [ 167.532325][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.490'. [ 167.592968][ T6767] loop4: detected capacity change from 0 to 512 [ 167.598647][ T6736] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 167.737772][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 168.159538][ T6736] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.264361][ T6767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.645531][ T6787] netlink: 'syz.4.490': attribute type 10 has an invalid length. [ 168.678257][ T6787] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 169.107278][ T4336] syz-executor: attempt to access beyond end of device [ 169.107278][ T4336] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 169.682823][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 172.084491][ T6829] serio: Serial port ptm0 [ 172.522002][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 173.291549][ T6843] loop3: detected capacity change from 0 to 40427 [ 173.337350][ T6843] F2FS-fs (loop3): invalid crc value [ 173.879519][ T6843] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 173.896201][ T6843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 175.525841][ T6878] bridge0: port 3(erspan0) entered blocking state [ 175.527244][ T6878] bridge0: port 3(erspan0) entered disabled state [ 175.528891][ T6878] device erspan0 entered promiscuous mode [ 175.533722][ T6878] bridge0: port 3(erspan0) entered blocking state [ 175.534854][ T6878] bridge0: port 3(erspan0) entered forwarding state [ 175.546751][ T6878] device erspan0 left promiscuous mode [ 175.548031][ T6878] bridge0: port 3(erspan0) entered disabled state [ 175.759201][ T4336] syz-executor: attempt to access beyond end of device [ 175.759201][ T4336] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 175.998150][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 177.738900][ T6913] loop4: detected capacity change from 0 to 40427 [ 177.741453][ T6913] F2FS-fs (loop4): invalid crc value [ 177.811985][ T6913] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 177.844381][ T6913] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 179.174953][ T4331] syz-executor: attempt to access beyond end of device [ 179.174953][ T4331] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 179.316623][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 179.318668][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 179.779447][ T6941] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 179.781368][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.784552][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.971759][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.973159][ T6941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.974451][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.975675][ T6941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.978756][ T6949] loop4: detected capacity change from 0 to 512 [ 180.068847][ T6941] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 180.218821][ T6949] EXT4-fs (loop4): 1 orphan inode deleted [ 180.220003][ T6949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.498659][ T4656] __quota_error: 6 callbacks suppressed [ 181.498670][ T4656] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 181.501684][ T4656] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 1 [ 181.508133][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 182.214041][ T6962] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 184.120599][ T6998] serio: Serial port ptm0 [ 184.858398][ T7004] device syzkaller0 entered promiscuous mode [ 184.864225][ T7002] loop2: detected capacity change from 0 to 512 [ 184.865672][ T7002] EXT4-fs: inline encryption not supported [ 184.874351][ T7004] tipc: Enabled bearer , priority 0 [ 184.881839][ T7002] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.475126][ T7004] tipc: Resetting bearer [ 185.477679][ T7000] tipc: Resetting bearer [ 185.497785][ T7002] EXT4-fs (loop2): 1 truncate cleaned up [ 185.498897][ T7002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.896337][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 186.176051][ T7031] binder: 7030:7031 tried to acquire reference to desc 0, got 1 instead [ 186.227537][ T7000] tipc: Disabling bearer [ 186.231460][ T7025] tipc: Enabled bearer , priority 0 [ 186.232776][ T7014] device syzkaller0 entered promiscuous mode [ 186.234993][ T4383] tipc: Node number set to 4157859875 [ 186.925502][ T7012] tipc: Resetting bearer [ 186.931741][ T7011] tipc: Resetting bearer [ 186.939486][ T4383] binder: release 7030:7031 transaction 10 out, still active [ 186.958987][ T4383] binder: send failed reply for transaction 17 to 7030:7043 [ 186.968262][ T7011] tipc: Disabling bearer [ 187.064924][ T4383] binder: undelivered TRANSACTION_COMPLETE [ 187.085944][ T4383] binder: undelivered TRANSACTION_ERROR: 29189 [ 187.093479][ T4383] binder: send failed reply for transaction 10, target dead [ 187.938861][ T7060] loop2: detected capacity change from 0 to 512 [ 187.947680][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.948769][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.990410][ T7060] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 188.217998][ T7067] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 188.219979][ T7067] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 188.512461][ T7073] loop4: detected capacity change from 0 to 128 [ 188.527816][ T7073] EXT4-fs (loop4): Test dummy encryption mode enabled [ 188.543931][ T7060] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.554: Allocating blocks 41-42 which overlap fs metadata [ 188.547424][ T7073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.549557][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 188.550858][ T7060] Quota error (device loop2): write_blk: dquota write failed [ 188.553336][ T7060] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 188.560779][ T7060] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.554: Allocating blocks 41-42 which overlap fs metadata [ 188.570583][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 188.572062][ T7060] Quota error (device loop2): write_blk: dquota write failed [ 188.581594][ T7060] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 188.583562][ T7060] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.554: Failed to acquire dquot type 1 [ 188.663914][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 188.666395][ T7060] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 188.672945][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 188.676502][ T7060] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.554: corrupted inode contents [ 188.683058][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 188.685424][ T7060] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.554: mark_inode_dirty error [ 188.692089][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 188.694456][ T7060] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.554: corrupted inode contents [ 188.700230][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 188.703817][ T7060] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.554: mark_inode_dirty error [ 188.709034][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 188.710899][ T7060] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.554: corrupted inode contents [ 189.077458][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 189.080246][ T7060] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 189.084256][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 189.087540][ T7060] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.554: corrupted inode contents [ 189.093343][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 189.098856][ T7060] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.554: mark_inode_dirty error [ 189.102084][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 189.105258][ T7060] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 189.108378][ T7060] EXT4-fs (loop2): Remounting filesystem read-only [ 189.109954][ T7060] EXT4-fs (loop2): 1 truncate cleaned up [ 189.111285][ T7060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 189.565112][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 189.610162][ T7086] loop4: detected capacity change from 0 to 512 [ 189.610298][ T7087] loop1: detected capacity change from 0 to 512 [ 189.621204][ T7086] EXT4-fs: inline encryption not supported [ 189.622617][ T7086] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.656200][ T7086] EXT4-fs (loop4): 1 truncate cleaned up [ 189.658225][ T7086] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 189.668739][ T7087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.729374][ T7087] FAULT_INJECTION: forcing a failure. [ 189.729374][ T7087] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 189.731758][ T7087] CPU: 0 PID: 7087 Comm: syz.1.561 Not tainted syzkaller #0 [ 189.732919][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 189.734811][ T7087] Call trace: [ 189.735408][ T7087] dump_backtrace+0x1c4/0x1f0 [ 189.736294][ T7087] show_stack+0x2c/0x3c [ 189.737069][ T7087] __dump_stack+0x30/0x40 [ 189.737868][ T7087] dump_stack_lvl+0xf4/0x15c [ 189.738704][ T7087] dump_stack+0x1c/0x5c [ 189.739470][ T7087] should_fail_ex+0x3cc/0x524 [ 189.740363][ T7087] should_fail_alloc_page+0x74/0xb8 [ 189.741314][ T7087] prepare_alloc_pages+0x1b8/0x4f0 [ 189.742240][ T7087] __alloc_pages+0x134/0x544 [ 189.743068][ T7087] alloc_pages+0x434/0x6fc [ 189.743862][ T7087] get_zeroed_page+0x20/0x8c [ 189.744708][ T7087] rds_cong_from_addr+0xd8/0x34c [ 189.745620][ T7087] rds_cong_get_maps+0x30/0xb4 [ 189.746522][ T7087] __rds_conn_create+0x840/0x1944 [ 189.747473][ T7087] rds_conn_create_outgoing+0x60/0x7c [ 189.748430][ T7087] rds_sendmsg+0xcac/0x191c [ 189.749245][ T7087] ____sys_sendmsg+0x588/0x90c [ 189.750105][ T7087] __sys_sendmsg+0x288/0x374 [ 189.750929][ T7087] __arm64_sys_sendmsg+0x80/0x94 [ 189.751787][ T7087] invoke_syscall+0x98/0x290 [ 189.752603][ T7087] el0_svc_common+0x13c/0x258 [ 189.753456][ T7087] do_el0_svc+0x5c/0x134 [ 189.754205][ T7087] el0_svc+0x58/0x128 [ 189.754905][ T7087] el0t_64_sync_handler+0x84/0xf0 [ 189.755797][ T7087] el0t_64_sync+0x18c/0x190 [ 190.072219][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 190.074791][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 190.088171][ T7083] loop3: detected capacity change from 0 to 40427 [ 190.093353][ T7083] F2FS-fs (loop3): invalid crc value [ 190.118290][ T7083] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 190.180829][ T7083] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.636421][ T4336] syz-executor: attempt to access beyond end of device [ 190.636421][ T4336] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 191.090163][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 191.542953][ T7128] Bluetooth: MGMT ver 1.22 [ 191.588167][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 191.604194][ T7126] device syzkaller0 entered promiscuous mode [ 191.607998][ T7126] tipc: Enabled bearer , priority 0 [ 191.614700][ T7126] tipc: Resetting bearer [ 192.134201][ T7123] tipc: Resetting bearer [ 193.337456][ T7123] tipc: Disabling bearer [ 193.393422][ T7160] loop2: detected capacity change from 0 to 512 [ 193.401339][ T7160] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.940258][ T7160] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.578: Allocating blocks 41-42 which overlap fs metadata [ 194.026753][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.030730][ T7160] Quota error (device loop2): write_blk: dquota write failed [ 194.069677][ T7160] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 194.110295][ T7160] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3861: comm syz.2.578: Allocating blocks 41-42 which overlap fs metadata [ 194.171677][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.260769][ T7160] Quota error (device loop2): write_blk: dquota write failed [ 194.262279][ T7160] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 194.264091][ T7160] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.578: Failed to acquire dquot type 1 [ 194.317810][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.319138][ T7160] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 194.322354][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.323499][ T7160] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.578: corrupted inode contents [ 194.328474][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.394196][ T7160] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.578: mark_inode_dirty error [ 194.402263][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.403558][ T7160] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.578: corrupted inode contents [ 194.416189][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.420834][ T7160] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.578: mark_inode_dirty error [ 194.428028][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.429269][ T7160] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.578: corrupted inode contents [ 194.442753][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.446540][ T7160] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 194.448756][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.449980][ T7160] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.578: corrupted inode contents [ 194.837438][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.858268][ T7160] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.578: mark_inode_dirty error [ 194.887461][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.888871][ T7160] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 194.890817][ T7160] EXT4-fs (loop2): Remounting filesystem read-only [ 194.892247][ T7160] EXT4-fs (loop2): 1 truncate cleaned up [ 194.893366][ T7160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.135157][ T7186] device syzkaller0 entered promiscuous mode [ 195.144800][ T7186] tipc: Enabled bearer , priority 0 [ 195.150761][ T7186] tipc: Resetting bearer [ 195.158891][ T7185] tipc: Resetting bearer [ 195.297678][ T7185] tipc: Disabling bearer [ 196.270528][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 196.330540][ T7212] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 196.332538][ T7212] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 197.459772][ T7242] null_blk: disk nullb1 created [ 197.857193][ T7246] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.858843][ T7246] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 197.861639][ T7234] loop2: detected capacity change from 0 to 32768 [ 197.872428][ T7234] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.596 (7234) [ 197.971466][ T7248] loop4: detected capacity change from 0 to 40427 [ 197.984847][ T7234] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 197.988255][ T7248] F2FS-fs (loop4): invalid crc value [ 197.991122][ T7234] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 197.999388][ T7234] BTRFS info (device loop2): force zlib compression, level 3 [ 198.000788][ T7234] BTRFS info (device loop2): setting nodatasum [ 198.006082][ T7234] BTRFS info (device loop2): using free space tree [ 198.017409][ T7248] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.028836][ T7248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.959685][ T7234] BTRFS info (device loop2): enabling ssd optimizations [ 199.432011][ T4331] syz-executor: attempt to access beyond end of device [ 199.432011][ T4331] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.592054][ T4333] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 199.596622][ T4346] Bluetooth: hci4: command 0x0405 tx timeout [ 200.485790][ T7317] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 200.487793][ T7317] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 200.491260][ T4337] Bluetooth: hci1: ACL packet for unknown connection handle 969 [ 200.922152][ T7320] loop4: detected capacity change from 0 to 40427 [ 200.939037][ T7320] F2FS-fs (loop4): invalid crc value [ 201.049448][ T7320] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 201.071029][ T7320] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 201.169281][ T7333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.410709][ T4331] syz-executor: attempt to access beyond end of device [ 202.410709][ T4331] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 203.563498][ T7369] syz.3.625 (7369): drop_caches: 2 [ 207.498186][ T7442] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 207.499781][ T7442] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 208.196445][ T7457] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 208.201940][ T7457] CIFS: Attempting to mount \\127.0.0.1\share [ 208.212819][ T7457] CIFS: VFS: Error connecting to socket. Aborting operation. [ 208.214876][ T7457] CIFS: VFS: cifs_mount failed w/return code = -111 [ 208.428398][ T7463] loop4: detected capacity change from 0 to 2048 [ 208.442355][ T7463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.230501][ T7528] 0x000000000006-0x000000020000 : "" [ 211.243422][ T7528] ftl_cs: FTL header corrupt! [ 213.240136][ T4337] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 213.915567][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 218.525458][ T7623] NILFS (nullb0): couldn't find nilfs on the device [ 218.747473][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 219.632427][ T7644] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 219.640590][ T7644] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 219.858400][ T7650] process 'syz.1.703' launched './file1' with NULL argv: empty string added [ 220.411774][ T4346] Bluetooth: hci3: ACL packet for unknown connection handle 969 [ 221.518300][ T7677] vivid-000: kernel_thread() failed [ 221.882535][ T7691] NILFS (nullb0): couldn't find nilfs on the device [ 225.075040][ T4346] Bluetooth: hci2: ACL packet for unknown connection handle 969 [ 226.641436][ T7759] NILFS (nullb0): couldn't find nilfs on the device [ 227.131311][ T7775] syz.2.738 (7775): drop_caches: 2 [ 228.817405][ T7805] NILFS (nullb0): couldn't find nilfs on the device [ 231.830757][ T7838] syz.0.752 (7838): drop_caches: 2 [ 234.346311][ T4729] bond0: (slave bond_slave_0): link status definitely up [ 234.783373][ T4729] bond0: active interface up! [ 235.000028][ T11] bond0: (slave bond_slave_0): interface is now down [ 235.002226][ T11] bond0: now running without any active interface! [ 235.033924][ T7868] raw_sendmsg: syz.4.763 forgot to set AF_INET. Fix it! [ 235.805678][ T7886] CIFS: Attempting to mount \\127.0.0.1\share [ 235.809496][ T7886] CIFS: VFS: Error connecting to socket. Aborting operation. [ 235.810782][ T7886] CIFS: VFS: cifs_mount failed w/return code = -111 [ 237.097563][ T7896] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.109294][ T7896] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 237.118304][ T7896] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.148983][ T7896] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 237.262573][ T7896] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 237.430005][ T7896] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.471622][ T7896] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 237.482061][ T7896] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 237.486174][ T7896] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.492781][ T7896] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 237.494747][ T7896] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.496256][ T7896] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 237.508842][ T7896] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 237.751986][ T7926] syz.4.777 (7926): drop_caches: 2 [ 238.759511][ T4346] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.196609][ T4346] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.602870][ T4346] Bluetooth: hci4: command 0x0c1a tx timeout [ 239.602897][ T4337] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.602913][ T4345] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.888283][ T7961] capability: warning: `syz.1.786' uses deprecated v2 capabilities in a way that may be insecure [ 240.970788][ T4346] Bluetooth: hci1: command 0x0406 tx timeout [ 241.276659][ T4345] Bluetooth: hci0: command 0x0406 tx timeout [ 241.687775][ T7985] overlayfs: failed to clone upperpath [ 241.809230][ T4346] Bluetooth: hci3: command 0x0406 tx timeout [ 241.810498][ T4346] Bluetooth: hci2: command 0x0406 tx timeout [ 241.811585][ T4346] Bluetooth: hci4: command 0x0406 tx timeout [ 243.025730][ T8010] syz.1.795 (8010): drop_caches: 2 [ 243.655392][ T8025] bridge0: port 3(erspan0) entered blocking state [ 243.656750][ T8025] bridge0: port 3(erspan0) entered disabled state [ 243.660362][ T8025] device erspan0 entered promiscuous mode [ 243.678237][ T8025] bridge0: port 3(erspan0) entered blocking state [ 243.679460][ T8025] bridge0: port 3(erspan0) entered listening state [ 243.715823][ T8025] device erspan0 left promiscuous mode [ 243.718286][ T8025] bridge0: port 3(erspan0) entered disabled state [ 243.748741][ T8026] NILFS (nullb0): couldn't find nilfs on the device [ 246.499726][ T4345] Bluetooth: hci3: unexpected event for opcode 0x202f [ 248.148367][ T8072] syz.1.817 (8072): drop_caches: 2 [ 248.468119][ T8082] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 249.188347][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.205546][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.934404][ T8108] tmpfs: Unknown parameter '0x000000000000ee01' [ 250.164480][ T8113] bridge0: port 4(vlan2) entered blocking state [ 250.165954][ T8113] bridge0: port 4(vlan2) entered disabled state [ 250.167756][ T8113] device vlan2 entered promiscuous mode [ 250.169210][ T8113] bridge0: mtu less than device minimum [ 253.067603][ T8166] NILFS (nullb0): couldn't find nilfs on the device [ 254.979102][ T8193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.849'. [ 255.252312][ T8194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.256355][ T8194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.257901][ T8194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.772727][ T8243] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.863'. [ 258.782243][ T8268] 9pnet_fd: Insufficient options for proto=fd [ 262.959345][ T8334] overlayfs: failed to clone upperpath [ 264.875462][ T27] audit: type=1326 audit(264.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.1.905" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 264.964016][ T27] audit: type=1326 audit(264.850:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.1.905" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 265.105249][ T27] audit: type=1326 audit(264.860:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.1.905" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 265.109620][ T27] audit: type=1326 audit(264.860:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.1.905" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 265.113588][ T27] audit: type=1326 audit(264.860:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.1.905" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 265.118644][ T27] audit: type=1326 audit(264.860:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.1.905" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 265.123191][ T27] audit: type=1326 audit(264.860:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.1.905" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 265.127824][ T27] audit: type=1326 audit(264.860:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.1.905" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b79368 code=0x7ffc0000 [ 265.661021][ T8402] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 266.273133][ T8424] tmpfs: Unknown parameter '0x000000000000ee01' [ 267.399653][ T8444] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 272.870950][ T8494] netlink: 36 bytes leftover after parsing attributes in process `syz.3.933'. [ 273.159850][ T8503] overlayfs: failed to clone upperpath [ 273.848878][ T8515] overlayfs: failed to clone lowerpath [ 276.423619][ T8560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.949'. [ 277.369379][ T4345] Bluetooth: hci3: unexpected event for opcode 0x202f [ 278.902538][ T8583] tmpfs: Unknown parameter '0x000000000000ee01' [ 280.597066][ T4345] Bluetooth: hci0: ACL packet for unknown connection handle 1211 [ 281.447650][ T8630] tipc: Enabling of bearer rejected, failed to enable media [ 281.889419][ T8644] tmpfs: Unknown parameter '0x000000000000ee01' [ 283.275138][ T8675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.980'. [ 286.232786][ T8729] tmpfs: Unknown parameter '0x000000000000ee01' [ 286.372216][ T8730] overlayfs: failed to clone lowerpath [ 286.942961][ T8741] overlayfs: failed to clone upperpath [ 290.056109][ T8780] overlayfs: failed to clone upperpath [ 293.122172][ T8805] overlayfs: failed to clone upperpath [ 293.239260][ T8812] overlayfs: failed to clone upperpath [ 294.287109][ T8825] overlayfs: failed to clone upperpath [ 295.060110][ T8831] netlink: 'syz.3.1027': attribute type 3 has an invalid length. [ 295.387827][ T8834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1025'. [ 295.554502][ T8841] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 296.136359][ T8848] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 297.048048][ T27] audit: type=1326 audit(295.883:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.149178][ T27] audit: type=1326 audit(295.883:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.155683][ T27] audit: type=1326 audit(295.883:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.159783][ T27] audit: type=1326 audit(295.883:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.163973][ T27] audit: type=1326 audit(295.892:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.168128][ T27] audit: type=1326 audit(295.892:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.174738][ T27] audit: type=1326 audit(295.892:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.188579][ T27] audit: type=1326 audit(295.892:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.194709][ T27] audit: type=1326 audit(295.892:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.199331][ T27] audit: type=1326 audit(295.892:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.0.1032" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 297.473032][ T8870] overlayfs: failed to clone upperpath [ 300.570919][ T8919] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 301.971706][ T8938] overlayfs: failed to clone upperpath [ 302.320482][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 302.320497][ T27] audit: type=1326 audit(301.181:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 302.325785][ T27] audit: type=1326 audit(301.181:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 302.335635][ T27] audit: type=1326 audit(301.181:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 302.340370][ T27] audit: type=1326 audit(301.181:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 302.345571][ T27] audit: type=1326 audit(301.181:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 302.351125][ T27] audit: type=1326 audit(301.181:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 302.355298][ T27] audit: type=1326 audit(301.181:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 302.359925][ T27] audit: type=1326 audit(301.181:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 302.363826][ T27] audit: type=1326 audit(301.181:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 302.377860][ T27] audit: type=1326 audit(301.181:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8939 comm="syz.0.1053" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97179368 code=0x7ffc0000 [ 303.804188][ T8982] infiniband syz2: set down [ 303.805505][ T8982] infiniband syz2: added ipvlan0 [ 304.112289][ T8982] RDS/IB: syz2: added [ 304.114464][ T8982] smc: adding ib device syz2 with port count 1 [ 304.116068][ T8982] smc: ib device syz2 port 1 has pnetid [ 305.718535][ T9013] overlayfs: failed to clone upperpath [ 307.863148][ T9038] overlayfs: failed to clone upperpath [ 309.333451][ T9069] IPv6: NLM_F_CREATE should be specified when creating new route [ 309.873263][ T9071] overlayfs: failed to clone upperpath [ 311.589560][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.591053][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.746726][ T9131] overlayfs: failed to clone upperpath [ 312.801468][ T9136] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 313.298734][ T9148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1103'. [ 314.651478][ T9169] mmap: syz.4.1107 (9169) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 314.898439][ T27] kauditd_printk_skb: 271 callbacks suppressed [ 314.898866][ T27] audit: type=1326 audit(312.824:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 314.991181][ T27] audit: type=1326 audit(312.833:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 315.044506][ T27] audit: type=1326 audit(312.833:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 315.139705][ T27] audit: type=1326 audit(312.833:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 315.144752][ T27] audit: type=1326 audit(312.833:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 315.148689][ T27] audit: type=1326 audit(312.833:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 315.153496][ T27] audit: type=1326 audit(312.833:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 315.158037][ T27] audit: type=1326 audit(312.833:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 315.163675][ T27] audit: type=1326 audit(312.833:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 315.167944][ T27] audit: type=1326 audit(312.833:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.2.1108" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 317.051138][ T9209] overlayfs: failed to clone upperpath [ 317.240674][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 318.601077][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'. [ 319.999632][ T9259] overlayfs: failed to clone upperpath [ 322.059435][ T9290] rdma_rxe: rxe_register_device failed with error -23 [ 322.062346][ T9290] rdma_rxe: failed to add ipvlan0 [ 325.381749][ T9325] overlayfs: failed to clone upperpath [ 330.437553][ T9401] overlayfs: failed to clone upperpath [ 335.834144][ T27] kauditd_printk_skb: 726 callbacks suppressed [ 335.834160][ T27] audit: type=1326 audit(332.637:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb79368 code=0x7ffc0000 [ 335.840506][ T27] audit: type=1326 audit(332.637:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb79368 code=0x7ffc0000 [ 335.844931][ T27] audit: type=1326 audit(332.637:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff7fb5c22c code=0x7ffc0000 [ 335.849400][ T27] audit: type=1326 audit(332.637:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb79368 code=0x7ffc0000 [ 335.854576][ T27] audit: type=1326 audit(332.637:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb79368 code=0x7ffc0000 [ 335.859400][ T27] audit: type=1326 audit(332.637:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffff7fb79368 code=0x7ffc0000 [ 335.864290][ T27] audit: type=1326 audit(332.637:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb79368 code=0x7ffc0000 [ 335.869739][ T27] audit: type=1326 audit(332.637:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb79368 code=0x7ffc0000 [ 335.875446][ T27] audit: type=1326 audit(332.637:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff7fb79368 code=0x7ffc0000 [ 335.880461][ T27] audit: type=1326 audit(332.637:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.4.1189" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb79368 code=0x7ffc0000 [ 335.894661][ T9474] ip_tables: iptables: counters copy to user failed while replacing table [ 342.054201][ T4345] Bluetooth: hci3: unexpected event for opcode 0x202f [ 345.253533][ T9621] overlayfs: failed to clone upperpath [ 345.317233][ T9622] rdma_rxe: rxe_register_device failed with error -23 [ 345.318690][ T9622] rdma_rxe: failed to add ipvlan0 [ 348.133001][ T9659] overlayfs: failed to resolve './file2': -2 [ 348.743636][ T9670] overlayfs: failed to resolve './file2': -2 [ 348.743650][ T9675] overlayfs: failed to resolve './file2': -2 [ 350.676350][ T9718] overlayfs: failed to clone upperpath [ 350.677932][ T4345] Bluetooth: hci3: ACL packet for unknown connection handle 969 [ 350.816687][ T9720] overlayfs: failed to resolve './file2': -2 [ 351.156913][ T9727] overlayfs: failed to resolve './file2': -2 [ 355.319426][ T9776] overlayfs: failed to resolve './file2': -2 [ 355.349685][ T9784] overlayfs: failed to resolve './file2': -2 [ 356.204847][ T9799] overlayfs: failed to clone upperpath [ 357.060738][ T9810] rdma_rxe: rxe_register_device failed with error -23 [ 357.063569][ T9810] rdma_rxe: failed to add ipvlan0 [ 358.611210][ T9830] overlayfs: failed to clone upperpath [ 362.067765][ T9881] rdma_rxe: rxe_register_device failed with error -23 [ 362.069283][ T9881] rdma_rxe: failed to add ipvlan0 [ 363.357179][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1300'. [ 364.422241][ T9908] overlayfs: failed to clone upperpath [ 364.562043][ T9918] Unknown status report in ack skb [ 364.626337][ T9919] overlayfs: failed to resolve './file2': -2 [ 366.640751][ T9943] kAFS: unable to lookup cell '.yz1' [ 370.313029][ T9995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1330'. [ 371.371343][T10003] 9pnet_fd: Insufficient options for proto=fd [ 371.420154][ T4345] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 371.420308][T10002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1331'. [ 375.379296][T10051] overlayfs: failed to clone upperpath [ 376.201525][T10067] netlink: 'syz.1.1350': attribute type 4 has an invalid length. [ 377.506382][T10078] overlayfs: failed to clone upperpath [ 377.833547][ T27] kauditd_printk_skb: 174 callbacks suppressed [ 377.833559][ T27] audit: type=1326 audit(371.384:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 377.849239][ T27] audit: type=1326 audit(371.384:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 377.859650][ T27] audit: type=1326 audit(371.384:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 377.868631][ T27] audit: type=1326 audit(371.384:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 377.881122][ T27] audit: type=1326 audit(371.384:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 377.886491][ T27] audit: type=1326 audit(371.393:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 377.892324][ T27] audit: type=1326 audit(371.393:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 377.896938][ T27] audit: type=1326 audit(371.393:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 377.905223][ T27] audit: type=1326 audit(371.393:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 377.909491][ T27] audit: type=1326 audit(371.393:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10083 comm="syz.3.1356" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82579368 code=0x7ffc0000 [ 378.354848][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.360822][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.297555][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 380.254121][T10138] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 381.986514][T10170] overlayfs: failed to clone upperpath [ 383.930503][T10210] netlink: 'syz.4.1390': attribute type 10 has an invalid length. [ 384.932751][T10226] overlayfs: failed to clone upperpath [ 387.110010][T10265] device gretap0 entered promiscuous mode [ 390.774677][T10290] overlayfs: failed to clone upperpath [ 391.765317][T10315] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 392.784537][T10327] ip_tables: iptables: counters copy to user failed while replacing table [ 394.699230][T10357] overlayfs: failed to clone upperpath [ 395.880807][T10371] overlayfs: failed to clone lowerpath [ 396.473637][T10387] overlayfs: failed to clone upperpath [ 397.127065][T10395] overlayfs: failed to clone upperpath [ 398.563799][T10417] overlayfs: failed to clone upperpath [ 399.644395][T10445] netlink: 'syz.4.1456': attribute type 2 has an invalid length. [ 401.971628][T10512] overlayfs: failed to clone upperpath [ 402.767488][T10533] overlayfs: failed to clone upperpath [ 404.168762][T10562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1480'. [ 404.257159][T10565] overlayfs: failed to clone upperpath [ 404.277751][ T4345] Bluetooth: hci0: ACL packet for unknown connection handle 969 [ 404.498132][ T4345] Bluetooth: hci2: hcon 00000000c58a6a48 sent 1 < count 15 [ 404.499599][ T4345] Bluetooth: hci2: hcon 0000000082840016 sent 1 < count 6 [ 404.500919][ T4345] Bluetooth: hci2: hcon 0000000082840016 sent 0 < count 4 [ 404.502095][ T4345] Bluetooth: hci2: hcon 0000000082840016 sent 0 < count 44954 [ 404.503307][ T4345] Bluetooth: hci2: hcon 0000000082840016 sent 0 < count 127 [ 404.504696][ T4345] Bluetooth: hci2: hcon 0000000082840016 sent 0 < count 3059 [ 404.505913][ T4345] Bluetooth: hci2: hcon 00000000c58a6a48 sent 0 < count 14 [ 405.041700][T10572] overlayfs: failed to clone upperpath [ 405.226409][T10582] overlayfs: failed to clone upperpath [ 408.296155][T10631] overlayfs: failed to clone upperpath [ 408.929807][T10643] overlayfs: failed to clone upperpath [ 408.981258][T10644] overlayfs: failed to clone upperpath [ 409.135015][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'. [ 411.319848][T10689] overlayfs: failed to clone upperpath [ 411.950260][ T4345] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 412.163574][T10700] overlayfs: failed to clone upperpath [ 412.261483][T10703] overlayfs: failed to clone upperpath [ 412.735130][T10711] overlayfs: failed to clone upperpath [ 413.826802][T10734] overlayfs: failed to clone upperpath [ 414.093055][T10747] ip_tables: iptables: counters copy to user failed while replacing table [ 414.116941][T10746] overlayfs: failed to clone upperpath [ 414.632764][T10762] overlayfs: failed to clone upperpath [ 416.185565][T10797] xt_NFQUEUE: number of total queues is 0 [ 416.586106][T10804] overlayfs: failed to clone upperpath [ 417.108715][T10818] overlayfs: failed to clone upperpath [ 419.533564][ C1] vxcan0: j1939_tp_rxtimer: 0x000000005c3747f3: rx timeout, send abort [ 419.536375][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x000000005c3747f3: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 423.086512][T10877] overlayfs: failed to clone upperpath [ 423.091473][T10878] overlayfs: failed to clone upperpath [ 424.182061][T10897] overlayfs: failed to clone upperpath [ 428.636082][ T27] kauditd_printk_skb: 171 callbacks suppressed [ 428.636091][ T27] audit: type=1326 audit(524706.805:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 428.642880][ T27] audit: type=1326 audit(524706.805:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 428.660138][ T27] audit: type=1326 audit(524706.814:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 428.664577][ T27] audit: type=1326 audit(524706.814:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 428.668775][ T27] audit: type=1326 audit(524706.814:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 428.700024][ T27] audit: type=1326 audit(524706.814:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 428.935898][ T27] audit: type=1326 audit(524706.814:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 428.945096][ T27] audit: type=1326 audit(524706.814:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 428.949153][ T27] audit: type=1326 audit(524706.814:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 428.953962][ T27] audit: type=1326 audit(524706.814:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.2.1601" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7f979368 code=0x7ffc0000 [ 429.530093][T10984] ip_tables: iptables: counters copy to user failed while replacing table [ 430.552570][T11007] overlayfs: failed to clone upperpath [ 431.124274][T11028] overlayfs: failed to clone upperpath [ 431.919223][T11041] overlayfs: failed to clone upperpath [ 433.396549][T11075] overlayfs: failed to clone upperpath [ 433.749406][T11082] overlayfs: failed to clone upperpath [ 436.391099][T11138] overlayfs: failed to clone upperpath [ 437.007713][T11156] overlayfs: failed to clone upperpath [ 437.024983][T11157] overlayfs: failed to clone upperpath [ 437.731707][T11175] overlayfs: failed to clone upperpath [ 438.358613][T11195] overlayfs: failed to clone upperpath [ 438.714147][T11198] overlayfs: failed to clone upperpath [ 439.834544][T11223] overlayfs: failed to clone upperpath [ 440.453132][T11241] overlayfs: failed to clone upperpath [ 440.519638][T11243] overlayfs: failed to clone upperpath [ 440.964748][T11251] overlayfs: failed to clone upperpath [ 441.814723][T11264] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 441.816652][T11264] Mem abort info: [ 441.817263][T11264] ESR = 0x0000000086000006 [ 441.818051][T11264] EC = 0x21: IABT (current EL), IL = 32 bits [ 441.819112][T11264] SET = 0, FnV = 0 [ 441.819768][T11264] EA = 0, S1PTW = 0 [ 441.820431][T11264] FSC = 0x06: level 2 translation fault [ 441.821379][T11264] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000132fa4000 [ 441.822518][T11264] [0000000000000000] pgd=080000013ca90003, p4d=080000013ca90003, pud=0800000111a88003, pmd=0000000000000000 [ 441.824578][T11264] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 441.825746][T11264] Modules linked in: [ 441.826441][T11264] CPU: 0 PID: 11264 Comm: syz.0.1694 Not tainted syzkaller #0 [ 441.827833][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 441.829720][T11264] pstate: 82400805 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 441.831157][T11264] pc : 0x0 [ 441.831759][T11264] lr : bond_xdp_xmit+0x284/0x480 [ 441.832739][T11264] sp : ffff8000231e7420 [ 441.833531][T11264] x29: ffff8000231e74e0 x28: ffff8000231e7448 x27: dfff800000000000 [ 441.835038][T11264] x26: ffff70000463ce90 x25: ffff800013d28558 x24: ffff0000dc11c000 [ 441.836514][T11264] x23: fffffbffeff92f20 x22: ffff0000d2818000 x21: fffffbffeff92f20 [ 441.837990][T11264] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000000 [ 441.839473][T11264] x17: 0000000000000000 x16: ffff8000082dbd78 x15: 0000000000000002 [ 441.840990][T11264] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 441.842505][T11264] x11: 000000000000035e x10: ffff800022c6c000 x9 : ffff8000231e7480 [ 441.844036][T11264] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 441.845558][T11264] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 441.847076][T11264] x2 : ffff8000231e74a0 x1 : 0000000000000001 x0 : ffff0000dc11c000 [ 441.848580][T11264] Call trace: [ 441.849210][T11264] 0x0 [ 441.849704][T11264] bq_xmit_all+0xb0c/0xf8c [ 441.850522][T11264] __dev_flush+0xc4/0x18c [ 441.851341][T11264] xdp_do_flush+0x14/0x28 [ 441.852166][T11264] tun_get_user+0x2440/0x3268 [ 441.853064][T11264] tun_chr_write_iter+0xfc/0x200 [ 441.853999][T11264] vfs_write+0x3c8/0x7c8 [ 441.854812][T11264] ksys_write+0x12c/0x228 [ 441.855653][T11264] __arm64_sys_write+0x7c/0x90 [ 441.856566][T11264] invoke_syscall+0x98/0x290 [ 441.857451][T11264] el0_svc_common+0x13c/0x258 [ 441.858357][T11264] do_el0_svc+0x5c/0x134 [ 441.859185][T11264] el0_svc+0x58/0x128 [ 441.859950][T11264] el0t_64_sync_handler+0x84/0xf0 [ 441.860937][T11264] el0t_64_sync+0x18c/0x190 [ 441.861786][T11264] Code: bad PC value [ 441.862536][T11264] ---[ end trace 0000000000000000 ]--- [ 442.175510][T11264] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 442.176871][T11264] SMP: stopping secondary CPUs [ 442.177726][T11264] Kernel Offset: disabled [ 442.178487][T11264] CPU features: 0x0a0000,000f0097,a65bfea7 [ 442.179531][T11264] Memory Limit: none [ 442.497386][T11264] Rebooting in 86400 seconds..