last executing test programs: 1m15.867228814s ago: executing program 32 (id=80): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1m12.784882228s ago: executing program 33 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x100000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x3, r2}, 0x10) 1m9.585916272s ago: executing program 6 (id=249): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2}) 1m9.54056142s ago: executing program 6 (id=252): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x2002}]}) io_uring_setup(0x34b, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m8.686063809s ago: executing program 6 (id=281): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000000)="f7", 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1) 1m8.570183204s ago: executing program 34 (id=282): r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r4 = epoll_create1(0x80000) unshare(0x6020400) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x40, 0x0, r4, r0}) io_uring_enter(r0, 0x13e7, 0x1, 0x1, 0x0, 0x0) 1m8.508202731s ago: executing program 6 (id=289): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x43, 0x47a, &(0x7f00000028c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1m8.276389233s ago: executing program 6 (id=297): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x4e8, 0x1c17, 0x2, 0x400, 0x18, "4b9999b1eb406eb223e8772e04d4c198315196"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000740)=0x1004af) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0xfffd, 0x7, 0x7, 0x10, 0x5, "96d15f1b9bef90de"}) 1m6.952755515s ago: executing program 6 (id=329): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 1m6.82107522s ago: executing program 35 (id=329): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 1m2.635895876s ago: executing program 8 (id=430): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300)) readv(r0, &(0x7f0000001240)=[{&(0x7f0000001080)=""/182, 0xb6}], 0x1) 1m2.615447463s ago: executing program 8 (id=431): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCGPTPEER(r2, 0x5441, 0xffffffffffffffff) 1m2.540122193s ago: executing program 8 (id=432): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2a060400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x4020940d, &(0x7f0000000440)={0x3, 0x80000001, 0x4}) 1m2.51511321s ago: executing program 8 (id=433): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m2.425376327s ago: executing program 8 (id=436): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80241, 0x48) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m2.004502959s ago: executing program 1 (id=447): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xffbd}}, 0x26) syz_emit_ethernet(0x38, &(0x7f0000000240)={@broadcast, @random="bca1d50509bc", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x2a, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x200, 0x4e20, 0x16, 0x0, @opaque="956d2bb26f4f6aac3f61da4d180b"}}}}}, 0x0) 1m1.966510203s ago: executing program 1 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000022ebffffffffffff00000000000088a81600810087000800450000204000e0da2c84"], 0x3a) 1m1.800257081s ago: executing program 1 (id=456): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x200, @loopback, 0x6}, @in={0x2, 0x4e24, @local}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1m1.731927796s ago: executing program 1 (id=459): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m1.572070932s ago: executing program 1 (id=464): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) 1m1.148348487s ago: executing program 1 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m0.922550854s ago: executing program 36 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m0.475266589s ago: executing program 8 (id=482): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) 1m0.346588642s ago: executing program 37 (id=482): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) 53.148533945s ago: executing program 0 (id=656): mlockall(0x2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc004) 53.080929187s ago: executing program 0 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 53.037705083s ago: executing program 0 (id=661): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', '', [], 0xa, "beef955ed71bdec8122dc812a8bd7f3b4429ee527c937e1b7c97cc8cde89fd6991485312"}, 0x28) recvmmsg(r0, &(0x7f000000e080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 52.891878438s ago: executing program 0 (id=672): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x43, 0x47a, &(0x7f00000028c0)="$eJzs28tvFdUfAPDvTF/0Bz97RXzwUKtobHy0FHyQ6EKJJi4wMdGF26YtBCnU0JoIIQrG4Mq4cW9057/gSjfGuDJxq3tDQgwbwNU1c+9M2/ukvdz2Fu7nkww9Z+YM53zvzLlzZs7cAPrWePZPErErIv6MiLFqtrbAePXPzesXZ29dvzibRLn83j9JpdyN6xdni6LFfjvzzEQakX6RxP4m9S6dv3B6ZmFh/lyen1o+89HU0vkLL5w6M3Ny/uT82cNHj754ZPqVlw+/1JU4szbd2Pfp4oG9byeD7xz/KluXFvHXxdEl4+02Pl0ud7m63vr/mnQy2MOGsCEDEZEdrqFK/x+LgVg9eGPx1uc9bRywqcrlcrlyva58AzS4VAbuYUnU5nV56BfFhT67/y2W+kHA65s7BOmpa29Ub4CyuG/mS3XLYKQxWkkN1d3fdtN4RHxw6d9vsyU25zkEAECNn7Lxz/PNxn9pPLSm3H353FApIu6PiN0R8UBE7ImIByMqZR+OiEfy8qPrrL9+kqRx/JNe7Ti4dcjGf6/lc1u147+0KFIaqORGKmPAUgwlJ04tzB/KP5OJGBrJ8tNt6vj5zT++brVt7fgvW7L6i7Fg3o6rgyO1+8zNLM9UUyMdx124djli32Cz+JOVmYAkIvZGxL4O6zj17A8HWm27ffxtdGGeqfxdxDPV438p6uIvJO3nJ6d2xML8oanirGj02+9X3m1V/x3F3wXXShH/a3r+r8RfStbO1y5tvI4rf33Z8p6m0/N/OHm/kh7O130ys7x8bjpiODlebfTa9YdX9y3yRfns/J842Lz/747VT2J/RGQn8aMR8VhEPJ63/YmIeDIiDraJ/9djT33YefybK4t/bkPHfzUxHPVrmicGTv/yY02lpYb4b7U5/iupifzv6vdfYaAhrvW0q7OzGQAAAO4+2d31rkjSyZV0mk5OVt+X3xORLiwuLT93YvHjs3PV3wiUItLiSdfYmueh0/ltfTV/OSKqrxYU24/kz42/GRit5CdnFxfmeh089LmdLfp/5u/Gx2rAvcbvtaB/te//O7asHcDWu931/7Mtagew9TY6/v/+1SJ1bL3veQLbVJP+r19DXxhpev035of+UNf/TftBH6nr/x74Qx/pfP5/uKvtALae93+gLy2Nxu1/JN82UfxPHe5+zyZiqNWm4W3Swjs87um2aMa2TQzd5f2id99JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fRfAAAA//8Nkdx1") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 52.776912574s ago: executing program 0 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 52.503115666s ago: executing program 0 (id=673): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x4e8, 0x1c17, 0x2, 0x400, 0x18, "4b9999b1eb406eb223e8772e04d4c198315196"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000740)=0x1004af) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0xfffd, 0x7, 0x7, 0x10, 0x5, "96d15f1b9bef90de"}) 52.434816852s ago: executing program 38 (id=673): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x4e8, 0x1c17, 0x2, 0x400, 0x18, "4b9999b1eb406eb223e8772e04d4c198315196"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000740)=0x1004af) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0xfffd, 0x7, 0x7, 0x10, 0x5, "96d15f1b9bef90de"}) 45.879116417s ago: executing program 3 (id=830): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[], 0x11d0}, 0x7, 0x3ed763469f8f58cc}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 45.806408163s ago: executing program 3 (id=834): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) 45.747843749s ago: executing program 3 (id=837): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000006c0)={0x8, 0x2800, 0xd95, 0x9, 0xb, "855c004000000827"}) 45.636537722s ago: executing program 3 (id=838): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 45.514372552s ago: executing program 3 (id=844): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x7808b000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000384000/0x1000)=nil, 0x1000, &(0x7f0000000480)=""/85) 44.984665911s ago: executing program 3 (id=859): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capget(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x800454dd, 0xffffffffffffffff) 44.977958894s ago: executing program 39 (id=859): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capget(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x800454dd, 0xffffffffffffffff) 1.030982001s ago: executing program 4 (id=2397): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 995.596539ms ago: executing program 4 (id=2399): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}}, 0x0) 913.199315ms ago: executing program 4 (id=2411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x7c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_IE={0x34, 0x2a, [@prep={0x83, 0x1f, {{}, 0x8, 0x24, @device_a, 0x7, @void, 0xffff, 0x6, @device_a, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x18, 0xa1, 0x9}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x41}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4010, 0x1, 0x5, 0x0, {0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x80, 0x34}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) 805.396569ms ago: executing program 4 (id=2403): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x597, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3100401, 0x0, 0xfc, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x10a) 734.586546ms ago: executing program 4 (id=2417): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r1, r2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) 520.443061ms ago: executing program 2 (id=2416): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 494.291013ms ago: executing program 5 (id=2418): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf", 0x4f}], 0x1}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4604, &(0x7f00000005c0)) 493.719915ms ago: executing program 9 (id=2419): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 444.727185ms ago: executing program 2 (id=2420): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setresuid(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4bfb, &(0x7f0000000000)) 436.715522ms ago: executing program 9 (id=2422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) close(r0) 435.008561ms ago: executing program 5 (id=2423): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x43) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x121003, 0x1ac) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 419.94169ms ago: executing program 2 (id=2424): setuid(0xee01) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 348.70841ms ago: executing program 4 (id=2425): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10', 0x2) write(r0, 0x0, 0x0) 330.714889ms ago: executing program 40 (id=2425): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='10', 0x2) write(r0, 0x0, 0x0) 321.426944ms ago: executing program 5 (id=2427): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xff, 0xffffffff, 0xfffffff2, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) 321.318156ms ago: executing program 2 (id=2428): socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0xa, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 311.99694ms ago: executing program 9 (id=2429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 270.185369ms ago: executing program 5 (id=2430): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 204.556889ms ago: executing program 2 (id=2432): r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f0000002480)=[{}], 0x1) semop(r0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 170.489763ms ago: executing program 5 (id=2433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 151.041301ms ago: executing program 9 (id=2434): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 140.335915ms ago: executing program 7 (id=2435): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 111.646936ms ago: executing program 7 (id=2436): unshare(0x2a020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setns(r1, 0x10000000) 78.927574ms ago: executing program 9 (id=2437): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0x3000000000000000}]) 78.717043ms ago: executing program 5 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x7c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_IE={0x34, 0x2a, [@prep={0x83, 0x1f, {{}, 0x8, 0x24, @device_a, 0x7, @void, 0xffff, 0x6, @device_a, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x18, 0xa1, 0x9}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x41}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4010, 0x1, 0x5, 0x0, {0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x80, 0x34}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) 78.564698ms ago: executing program 7 (id=2439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0xb, 0x0, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) 58.32976ms ago: executing program 7 (id=2440): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)='\vw', 0x2}], 0x1) 50.694064ms ago: executing program 2 (id=2441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7ff, 0x80000001, 0xe, 0x0, 0xff}, 0xf3ee, 0x0, 0x3, 0x2, 0x8, 0x1d, 0x11, 0x9, 0x5, 0xfffffff9, {0x98a934e4, 0xffff0629, 0x80000000, 0xdf, 0x3800000, 0x9}}}}]}, 0x78}}, 0x0) 33.153175ms ago: executing program 7 (id=2442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4001004) 9.314179ms ago: executing program 7 (id=2443): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='non_existent_event:mod:syz_mod_123\n', 0x23) write(r0, &(0x7f0000000400)='!non_existent_event:mod:syz_mod_123\n', 0x24) 0s ago: executing program 9 (id=2444): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): ][ T7343] bridge_slave_1: entered promiscuous mode [ 59.995421][ T7343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.996458][ T7343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.003540][ T7343] team0: Port device team_slave_0 added [ 60.004503][ T7343] team0: Port device team_slave_1 added [ 60.010693][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.010979][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.010998][ T7343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.011547][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.011554][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.011569][ T7343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.023855][ T7343] hsr_slave_0: entered promiscuous mode [ 60.024171][ T7343] hsr_slave_1: entered promiscuous mode [ 60.024369][ T7343] debugfs: 'hsr0' already exists in 'hsr' [ 60.024380][ T7343] Cannot create hsr debugfs directory [ 60.088397][ T1477] bridge_slave_1: left allmulticast mode [ 60.089711][ T1477] bridge_slave_1: left promiscuous mode [ 60.089823][ T1477] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.096944][ T1477] bridge_slave_0: left allmulticast mode [ 60.098085][ T1477] bridge_slave_0: left promiscuous mode [ 60.099289][ T1477] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.104324][ T50] Bluetooth: hci1: command tx timeout [ 60.164343][ T1477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.195789][ T1477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.210006][ T7386] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 60.227789][ T1477] bond0 (unregistering): Released all slaves [ 60.235130][ T4404] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.295473][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 60.295510][ T30] audit: type=1326 audit(60.270:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.295856][ T30] audit: type=1326 audit(60.270:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.298161][ T30] audit: type=1326 audit(60.270:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.298311][ T30] audit: type=1326 audit(60.270:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=41 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.298671][ T30] audit: type=1326 audit(60.270:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.298750][ T30] audit: type=1326 audit(60.270:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.298824][ T30] audit: type=1326 audit(60.270:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.299030][ T30] audit: type=1326 audit(60.270:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.299107][ T30] audit: type=1326 audit(60.270:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.299178][ T30] audit: type=1326 audit(60.270:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7387 comm="syz.7.675" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f781a8 code=0x7ffc0000 [ 60.419431][ T4404] 8021q: adding VLAN 0 to HW filter on device eth20 [ 60.480430][ T7415] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 60.482002][ T7415] overlayfs: conflicting lowerdir path [ 60.545481][ T1477] hsr_slave_0: left promiscuous mode [ 60.547054][ T1477] hsr_slave_1: left promiscuous mode [ 60.548544][ T1477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.551812][ T1477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.558201][ T1477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.558236][ T1477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.590171][ T7432] loop7: detected capacity change from 0 to 512 [ 60.592432][ T1477] veth1_macvtap: left promiscuous mode [ 60.592481][ T1477] veth0_macvtap: left promiscuous mode [ 60.592602][ T1477] veth1_vlan: left promiscuous mode [ 60.592640][ T1477] veth0_vlan: left promiscuous mode [ 60.789657][ T7455] loop9: detected capacity change from 0 to 256 [ 60.861048][ T1477] team0 (unregistering): Port device team_slave_1 removed [ 60.867215][ T1477] team0 (unregistering): Port device team_slave_0 removed [ 61.063284][ T4815] atkbd serio1: keyboard reset failed on [ 61.529409][ T7343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.532172][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.539934][ T7343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.542828][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.545725][ T7343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.548093][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.550033][ T7343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.552324][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.575871][ T7343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.584279][ T7343] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.586454][ T3345] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.586511][ T3345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.592678][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.592714][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.727808][ T7574] netlink: 'syz.7.724': attribute type 1 has an invalid length. [ 61.727863][ T7574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.727944][ T7574] IPv6: NLM_F_CREATE should be set when creating new route [ 61.727958][ T7574] IPv6: NLM_F_CREATE should be set when creating new route [ 61.731585][ T7574] netlink: 'syz.7.724': attribute type 1 has an invalid length. [ 61.731608][ T7574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.768615][ T7343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.783209][ T50] Bluetooth: hci2: command tx timeout [ 62.228833][ T7606] loop3: detected capacity change from 0 to 2048 [ 62.240084][ T7343] veth0_vlan: entered promiscuous mode [ 62.245019][ T7343] veth1_vlan: entered promiscuous mode [ 62.259213][ T7343] veth0_macvtap: entered promiscuous mode [ 62.261073][ T7606] EXT4-fs: Ignoring removed oldalloc option [ 62.264766][ T7343] veth1_macvtap: entered promiscuous mode [ 62.270525][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.273649][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.277708][ T1477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.384187][ T3345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.387062][ T3345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.388782][ T3345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.392026][ T7622] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.398372][ T7622] EXT4-fs (loop3): Remounting filesystem read-only [ 62.398643][ T7622] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 62.416600][ T3345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.416626][ T3345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.426979][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.427039][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.664725][ T7636] loop4: detected capacity change from 0 to 1024 [ 62.666430][ T7636] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.772873][ T7642] loop4: detected capacity change from 0 to 512 [ 62.798765][ T7642] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.732: corrupted xattr block 33: overlapping e_value [ 62.805090][ T7642] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.732: corrupted xattr block 33: overlapping e_value [ 62.808710][ T7642] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.732: corrupted xattr block 33: overlapping e_value [ 62.886350][ T7648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.928960][ T5117] kernel write not supported for file /comedi0 (pid: 5117 comm: kworker/0:4) [ 63.107210][ T7673] netlink: 80 bytes leftover after parsing attributes in process `syz.4.740'. [ 63.111083][ T7673] netlink: 80 bytes leftover after parsing attributes in process `syz.4.740'. [ 63.346666][ T3345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.346700][ T3345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.351600][ T7698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.440351][ T7715] loop3: detected capacity change from 0 to 512 [ 63.440728][ T7715] EXT4-fs: Ignoring removed bh option [ 63.499455][ T7715] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 63.499991][ T7715] EXT4-fs (loop3): 1 truncate cleaned up [ 63.535890][ T7715] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.749: bg 0: block 465: padding at end of block bitmap is not set [ 63.544112][ T4800] atkbd serio2: keyboard reset failed on [ 63.554602][ T7715] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 64 with error 28 [ 63.554645][ T7715] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.554645][ T7715] [ 63.554656][ T7715] EXT4-fs (loop3): Total free blocks count 0 [ 63.554665][ T7715] EXT4-fs (loop3): Free/Dirty block details [ 63.554678][ T7715] EXT4-fs (loop3): free_blocks=0 [ 63.554689][ T7715] EXT4-fs (loop3): dirty_blocks=65 [ 63.554696][ T7715] EXT4-fs (loop3): Block reservation details [ 63.554702][ T7715] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 63.586466][ T3430] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 63.586499][ T3430] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.586499][ T3430] [ 63.608883][ T7734] loop7: detected capacity change from 0 to 512 [ 63.651420][ T4728] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 63.665586][ T7741] loop4: detected capacity change from 0 to 128 [ 63.701065][ T7734] EXT4-fs (loop7): shut down requested (2) [ 63.810328][ T7756] loop7: detected capacity change from 0 to 2048 [ 63.864004][ T50] Bluetooth: hci2: command tx timeout [ 63.894231][ T7756] EXT4-fs (loop7): shut down requested (1) [ 64.005756][ T7782] netlink: 'syz.2.771': attribute type 3 has an invalid length. [ 64.005801][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 64.246550][ T7809] ip_tables: iptables: counters copy to user failed while replacing table [ 64.312825][ T7814] set_capacity_and_notify: 1 callbacks suppressed [ 64.315078][ T7814] loop2: detected capacity change from 0 to 256 [ 64.348396][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.782'. [ 64.348435][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 64.507921][ T26] cfg80211: failed to load regulatory.db [ 64.514252][ T1590] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.516468][ T1590] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.553700][ T7831] block nbd7: NBD_DISCONNECT [ 64.657556][ T7842] loop2: detected capacity change from 0 to 256 [ 64.742551][ T7849] loop9: detected capacity change from 0 to 1024 [ 64.742895][ T7849] EXT4-fs: Ignoring removed bh option [ 64.742922][ T7849] EXT4-fs: Ignoring removed bh option [ 64.768790][ T7849] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 64.787569][ T7849] EXT4-fs mount: 18 callbacks suppressed [ 64.787609][ T7849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.796568][ T26] kernel write not supported for file net/rpc/auth.rpcsec.context/channel (pid: 26 comm: kworker/1:1) [ 64.875064][ T7849] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.920597][ T6462] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /72/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 64.925385][ T6462] EXT4-fs (loop9): Remounting filesystem read-only [ 64.940057][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.231301][ T26] kernel write not supported for file net/rpc/auth.rpcsec.context/channel (pid: 26 comm: kworker/1:1) [ 65.261458][ T7907] loop7: detected capacity change from 0 to 1024 [ 65.339653][ T7907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.384067][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.384219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.436221][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.550077][ T7934] loop7: detected capacity change from 0 to 256 [ 65.698666][ T7947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.698815][ T7947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.698947][ T7947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.717188][ T7947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.717321][ T7947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.943096][ T50] Bluetooth: hci2: command tx timeout [ 66.105196][ T7977] binder: 7976:7977 ioctl c0306201 0 returned -14 [ 66.106822][ T7977] binder: 7976:7977 context manager tried to acquire desc 0 [ 66.107408][ T7977] binder: 7976:7977 ioctl c0306201 200003c0 returned -22 [ 66.164909][ T7980] loop4: detected capacity change from 0 to 1024 [ 66.177703][ T7980] EXT4-fs: Ignoring removed bh option [ 66.177764][ T7980] EXT4-fs: Ignoring removed bh option [ 66.182223][ T7980] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 66.202632][ T7980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.267475][ T7980] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 66.295869][ T7343] EXT4-fs error (device loop4): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /27/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 66.296139][ T7343] EXT4-fs (loop4): Remounting filesystem read-only [ 66.304476][ T7343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.316233][ T7995] loop9: detected capacity change from 0 to 128 [ 66.328351][ T7995] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.377364][ T6462] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.496234][ T8020] loop3: detected capacity change from 0 to 512 [ 66.517625][ T8020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.625916][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.644147][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.648439][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.650978][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.653761][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.655920][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.658241][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.660487][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.670403][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.676301][ T4728] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 66.699250][ T8050] syzkaller1: entered promiscuous mode [ 66.699286][ T8050] syzkaller1: entered allmulticast mode [ 66.816183][ T8070] netlink: 'syz.7.851': attribute type 2 has an invalid length. [ 66.860162][ T8077] loop7: detected capacity change from 0 to 128 [ 66.935265][ T4728] syz_tun (unregistering): left allmulticast mode [ 66.939214][ T4404] 8021q: adding VLAN 0 to HW filter on device eth21 [ 67.097734][ T4728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.263792][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.267134][ T8115] loop2: detected capacity change from 0 to 1024 [ 67.269687][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.271397][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.275309][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.276975][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.300658][ T8115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 67.388709][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 67.508600][ T8138] EXT4-fs: Ignoring removed nobh option [ 67.525706][ T8138] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 67.533078][ T8138] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 67.533169][ T8138] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.864: inode has both inline data and extents flags [ 67.533190][ T8138] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 67.543105][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 67.543137][ C0] EXT4-fs (loop2): initial error at time 67: ext4_orphan_get:1399: inode 13 [ 67.543178][ C0] EXT4-fs (loop2): last error at time 67: ext4_orphan_get:1399: inode 13 [ 67.551396][ T8138] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.864: couldn't read orphan inode 13 (err -117) [ 67.551434][ T8138] loop2: lost filesystem error report for type 5 error -117 [ 67.554607][ T8138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.571005][ T8138] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 67.587077][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.879980][ T4404] 8021q: adding VLAN 0 to HW filter on device eth22 [ 67.894293][ T8164] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.946457][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.947901][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.949457][ T8114] bridge_slave_0: entered allmulticast mode [ 67.951359][ T8114] bridge_slave_0: entered promiscuous mode [ 67.956044][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.957390][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.958923][ T8114] bridge_slave_1: entered allmulticast mode [ 67.960699][ T8114] bridge_slave_1: entered promiscuous mode [ 67.961259][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.974580][ T8114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.977317][ T8114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.987719][ T8114] team0: Port device team_slave_0 added [ 67.989702][ T8114] team0: Port device team_slave_1 added [ 68.009889][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.011222][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.016313][ T8114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.019885][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.021256][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.023083][ T4725] Bluetooth: hci2: command tx timeout [ 68.027644][ T8114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.031187][ T8182] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.076002][ T8114] hsr_slave_0: entered promiscuous mode [ 68.076428][ T8114] hsr_slave_1: entered promiscuous mode [ 68.076651][ T8114] debugfs: 'hsr0' already exists in 'hsr' [ 68.076662][ T8114] Cannot create hsr debugfs directory [ 68.149704][ T8180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.169239][ T8180] EXT4-fs (loop2): shut down requested (1) [ 68.222333][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.258423][ T8199] binder: 8199 RLIMIT_NICE not set [ 68.346012][ T26] net_ratelimit: 13 callbacks suppressed [ 68.346054][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.422626][ T4404] 8021q: adding VLAN 0 to HW filter on device eth23 [ 68.484571][ T8199] binder: 8198:8199 ioctl c0306201 20001a80 returned -14 [ 68.490664][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.886'. [ 68.503472][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.503592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.589164][ T26] kernel write not supported for file bpf-prog (pid: 26 comm: kworker/1:1) [ 68.775574][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.775790][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.779651][ T8251] Injecting memory failure for pfn 0x162003 at process virtual address 0x20003000 [ 68.807666][ T8251] Memory failure: 0x162003: recovery action for dirty LRU page: Recovered [ 68.817577][ T8264] input: syz1 as /devices/virtual/input/input13 [ 68.956390][ T8114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.972179][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.977652][ T8114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.981398][ T8285] EXT4-fs: inline encryption not supported [ 68.987377][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.989219][ T8114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.993915][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.994286][ T8114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.996112][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.012460][ T8285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.030201][ T8285] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.903: lblock 3 mapped to illegal pblock 3 (length 3) [ 69.031200][ T8285] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 69.031280][ T8285] EXT4-fs (loop7): This should not happen!! Data will be lost [ 69.031280][ T8285] [ 69.034848][ T8285] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.903: lblock 3 mapped to illegal pblock 3 (length 3) [ 69.066671][ T39] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 69.068421][ T39] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 69.068460][ T39] EXT4-fs (loop7): This should not happen!! Data will be lost [ 69.068460][ T39] [ 69.072160][ T5762] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 69.072925][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.084545][ T8114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.093851][ T8114] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.110768][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.110824][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.111361][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.111396][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.142632][ T8114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.142673][ T8114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.247187][ T8322] binder: 8321:8322 ioctl c00c620f 0 returned -22 [ 69.306971][ T4725] Bluetooth: hci4: command tx timeout [ 69.399926][ T8114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.532658][ T8114] veth0_vlan: entered promiscuous mode [ 69.542436][ T8114] veth1_vlan: entered promiscuous mode [ 69.544252][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.544415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.574979][ T8114] veth0_macvtap: entered promiscuous mode [ 69.579549][ T8114] veth1_macvtap: entered promiscuous mode [ 69.588507][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.591233][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.614905][ T39] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.615008][ T39] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.615032][ T39] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.615046][ T39] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.709490][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.709527][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.744177][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.744211][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.004075][ T8395] netlink: 48 bytes leftover after parsing attributes in process `syz.9.921'. [ 70.021367][ T8401] netlink: 'syz.4.923': attribute type 11 has an invalid length. [ 70.021405][ T8401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.923'. [ 70.135576][ T8414] syz_tun: entered allmulticast mode [ 70.137388][ T8413] syz_tun: left allmulticast mode [ 70.588148][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.588256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.666260][ T4815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.696426][ T8457] set_capacity_and_notify: 6 callbacks suppressed [ 70.696464][ T8457] loop2: detected capacity change from 0 to 512 [ 70.702236][ T8457] EXT4-fs (loop2): Test dummy encryption mode enabled [ 70.706779][ T8457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 70.706827][ T8457] System zones: 1-2, 4-12, 8-8 [ 70.710996][ T8457] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.938: iget: bad i_size value: 38620345925642 [ 70.711038][ T8457] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.711460][ T8457] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.938: couldn't read orphan inode 15 (err -117) [ 70.711480][ T8457] loop2: lost filesystem error report for type 5 error -117 [ 70.712051][ T8457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.725247][ T8456] loop9: detected capacity change from 0 to 256 [ 70.779179][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.936489][ T8480] sock: sock_set_timeout: `syz.9.942' (pid 8480) tries to set negative timeout [ 71.035020][ T8488] loop2: detected capacity change from 0 to 512 [ 71.066284][ T8488] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.944: corrupted xattr block 95: invalid header [ 71.066337][ T8488] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.069328][ T8488] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 71.069686][ T8488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.944: bg 0: block 7: invalid block bitmap [ 71.069700][ T8488] loop2: lost filesystem error report for type 5 error -117 [ 71.078800][ T8488] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 71.078836][ T8488] loop2: lost filesystem error report for type 5 error -117 [ 71.079034][ T8488] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.944: corrupted xattr block 95: invalid header [ 71.079049][ T8488] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 71.080320][ T8488] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 71.080368][ T8488] EXT4-fs (loop2): 1 orphan inode deleted [ 71.080836][ T8488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.203122][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.383206][ T4725] Bluetooth: hci4: command tx timeout [ 71.393548][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.545645][ T8527] binder: 8527 RLIMIT_NICE not set [ 71.637276][ T8539] ima: policy update completed [ 71.640050][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 71.640084][ T30] audit: type=1807 audit(71.610:145): action=measure func=FILE_CHECK res=1 [ 71.640104][ T30] audit: type=1802 audit(71.610:146): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.5.957" res=1 errno=0 [ 71.666325][ T30] audit: type=1800 audit(71.640:147): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 71.676975][ T30] audit: type=1800 audit(71.650:148): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 71.687951][ T30] audit: type=1800 audit(71.660:149): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 71.700876][ T30] audit: type=1800 audit(71.670:150): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 71.710257][ T30] audit: type=1800 audit(71.680:151): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 71.726324][ T30] audit: type=1800 audit(71.700:152): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 71.781030][ T8554] loop5: detected capacity change from 0 to 256 [ 71.794924][ T8527] binder: 8526:8527 ioctl c0306201 20001a80 returned -14 [ 71.826781][ T30] audit: type=1800 audit(71.790:153): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 71.853157][ T30] audit: type=1800 audit(71.820:154): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 72.005097][ T8587] binder: 8587 RLIMIT_NICE not set [ 72.239818][ T8587] binder: 8584:8587 ioctl c0306201 20001a80 returned -14 [ 72.470420][ T8655] loop7: detected capacity change from 0 to 2048 [ 72.496111][ T8655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.636599][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.647363][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1006'. [ 72.698017][ T8685] loop2: detected capacity change from 0 to 512 [ 72.753471][ T8685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.765405][ T8685] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 97 vs 96 free clusters [ 72.780136][ T8685] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1007: Failed to acquire dquot type 1 [ 72.820967][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.829295][ T8704] input: syz0 as /devices/virtual/input/input14 [ 72.957731][ T8727] input: syz1 as /devices/virtual/input/input15 [ 72.996457][ T8730] loop4: detected capacity change from 0 to 256 [ 73.296085][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 73.302120][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1036'. [ 73.309712][ T8769] loop2: detected capacity change from 0 to 1024 [ 73.310133][ T8769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.342346][ T8769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 73.342416][ T8769] System zones: 0-1, 3-12 [ 73.366198][ T8769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.457871][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.465810][ T4725] Bluetooth: hci4: command tx timeout [ 73.467438][ T24] net_ratelimit: 18 callbacks suppressed [ 73.467461][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.467579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.474155][ T3430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.474274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.694169][ T8827] loop4: detected capacity change from 0 to 128 [ 73.703983][ T4815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.704102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.749822][ T8827] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 73.783264][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.817491][ T8834] loop2: detected capacity change from 0 to 1024 [ 73.817928][ T8834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.817957][ T8834] EXT4-fs: Ignoring removed orlov option [ 73.838031][ T8834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.911480][ T7343] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.927772][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.025072][ T8850] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.038387][ T8845] EXT4-fs (loop9): 1 orphan inode deleted [ 74.050775][ T8850] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1059: invalid indirect mapped block 32768 (level 2) [ 74.050820][ T8850] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.052358][ T8845] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.053520][ T8850] EXT4-fs (loop2): Remounting filesystem read-only [ 74.053744][ T8850] EXT4-fs (loop2): 1 orphan inode deleted [ 74.053794][ T8850] EXT4-fs (loop2): 1 truncate cleaned up [ 74.069483][ T8850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.081522][ T8850] EXT4-fs (loop2): shut down requested (2) [ 74.093750][ T8850] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 74.102721][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.103868][ T8849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.113951][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.114204][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.119923][ T8849] EXT4-fs (loop4): shut down requested (2) [ 74.125334][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.199072][ T7343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.232162][ T8869] vcan0: tx drop: invalid sa for name 0x0000000000400004 [ 74.341954][ T8878] EXT4-fs: Ignoring removed nobh option [ 74.346622][ T8878] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.424591][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.439027][ T6504] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.875135][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1085'. [ 74.877709][ T8923] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1085'. [ 74.939194][ T8931] vlan2: entered allmulticast mode [ 74.940247][ T8931] bond0: entered allmulticast mode [ 74.941451][ T8931] bond_slave_0: entered allmulticast mode [ 74.945832][ T8931] bond_slave_1: entered allmulticast mode [ 74.952076][ T8931] bridge0: port 3(vlan2) entered blocking state [ 74.952719][ T8931] bridge0: port 3(vlan2) entered disabled state [ 74.956132][ T8931] vlan2: entered promiscuous mode [ 74.956145][ T8931] bond0: entered promiscuous mode [ 74.956153][ T8931] bond_slave_0: entered promiscuous mode [ 74.956223][ T8931] bond_slave_1: entered promiscuous mode [ 74.958935][ T8931] bridge0: port 3(vlan2) entered blocking state [ 74.959005][ T8931] bridge0: port 3(vlan2) entered forwarding state [ 75.169748][ T8958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.169787][ T8958] EXT4-fs: Ignoring removed orlov option [ 75.211114][ T8958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.244157][ T8969] syzkaller1: entered promiscuous mode [ 75.245411][ T8969] syzkaller1: entered allmulticast mode [ 75.270941][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.308327][ T8976] input: syz0 as /devices/virtual/input/input16 [ 75.308375][ T8976] input: failed to attach handler leds to device input16, error: -6 [ 75.471235][ T8989] mmap: syz.4.1114 (8989) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.543234][ T4725] Bluetooth: hci4: command tx timeout [ 75.617987][ T9002] netlink: 144 bytes leftover after parsing attributes in process `syz.9.1120'. [ 75.651558][ T9004] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.1121: Failed to acquire dquot type 1 [ 75.657815][ T9004] loop9: lost filesystem error report for type 5 error -117 [ 75.662989][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 75.663025][ C0] EXT4-fs (loop9): last error at time 75: ext4_acquire_dquot:7041 [ 75.679420][ T9004] EXT4-fs (loop9): 1 truncate cleaned up [ 75.679915][ T9004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.710354][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.830850][ T9025] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 75.860877][ T9029] set_capacity_and_notify: 6 callbacks suppressed [ 75.862552][ T9029] loop9: detected capacity change from 0 to 1024 [ 75.866497][ T9029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.868474][ T9029] EXT4-fs (loop9): The Hurd can't support 64-bit file systems [ 76.077224][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1136'. [ 76.077285][ T9046] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1136'. [ 76.077344][ T9046] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1136'. [ 76.102795][ T9047] netlink: 'syz.2.1137': attribute type 1 has an invalid length. [ 76.222512][ T9065] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 76.333699][ T9069] loop7: detected capacity change from 0 to 512 [ 76.360986][ T9069] EXT4-fs (loop7): 1 orphan inode deleted [ 76.361476][ T9069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.403194][ T9084] input: syz1 as /devices/virtual/input/input17 [ 76.416861][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.491046][ T9095] Injecting memory failure for pfn 0x12d3d0 at process virtual address 0x20000000 [ 76.494700][ T9095] Memory failure: 0x12d3d0: Sending SIGBUS to syz.5.1160:9095 due to hardware memory corruption [ 76.496945][ T9095] Memory failure: 0x12d3d0: recovery action for unsplit thp: Failed [ 76.545302][ T9098] block nbd5: shutting down sockets [ 76.655659][ T30] kauditd_printk_skb: 233 callbacks suppressed [ 76.655700][ T30] audit: type=1800 audit(76.630:384): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 76.671024][ T30] audit: type=1800 audit(76.640:385): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 76.694707][ T4807] kernel write not supported for file /input/mice (pid: 4807 comm: kworker/1:5) [ 76.696588][ T30] audit: type=1800 audit(76.670:386): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 76.738442][ T30] audit: type=1800 audit(76.710:387): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 76.758663][ T30] audit: type=1800 audit(76.730:388): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 76.759569][ T9118] console message test [ 76.779163][ T30] audit: type=1800 audit(76.750:389): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 76.807517][ T30] audit: type=1800 audit(76.780:390): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 76.854844][ T30] audit: type=1800 audit(76.830:391): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 76.942334][ T30] audit: type=1800 audit(76.910:392): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 76.964252][ T30] audit: type=1800 audit(76.940:393): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 77.238871][ T9146] sctp: [Deprecated]: syz.4.1183 (pid 9146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.238871][ T9146] Use struct sctp_sack_info instead [ 77.349843][ T9156] netlink: 'syz.9.1188': attribute type 34 has an invalid length. [ 77.445947][ T9165] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 77.684148][ T9177] loop5: detected capacity change from 0 to 128 [ 77.688890][ T9177] EXT4-fs (loop5): Test dummy encryption mode enabled [ 77.692127][ T9177] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.708915][ T9180] syzkaller1: entered promiscuous mode [ 77.708951][ T9180] syzkaller1: entered allmulticast mode [ 77.717712][ T9177] EXT4-fs (loop5): shut down requested (2) [ 77.730535][ T8114] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.208149][ T9214] loop5: detected capacity change from 0 to 8192 [ 78.218557][ T9214] loop5: p1 p2 p3 p4[EZD] [ 78.218591][ T9214] loop5: partition table partially beyond EOD, truncated [ 78.219184][ T9214] loop5: p1 start 16384 is beyond EOD, truncated [ 78.219198][ T9214] loop5: p2 size 150994944 extends beyond EOD, truncated [ 78.223652][ T9214] loop5: p3 start 67108864 is beyond EOD, truncated [ 78.225626][ T9214] loop5: p4 size 33555584 extends beyond EOD, truncated [ 78.478990][ T5734] udevd[5734]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 78.479885][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 78.530429][ T9264] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1220'. [ 78.588341][ T9268] trusted_key: syz.9.1224 sent an empty control message without MSG_MORE. [ 78.594645][ T1477] net_ratelimit: 540 callbacks suppressed [ 78.594694][ T1477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.594796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.625332][ T9272] loop4: detected capacity change from 0 to 8 [ 78.628233][ T9272] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 78.628268][ T9272] unable to read xattr id index table [ 78.629437][ T9272] SQUASHFS error: zlib decompression failed, data probably corrupt [ 78.629453][ T9272] SQUASHFS error: Failed to read block 0x9b: -5 [ 78.629460][ T9272] SQUASHFS error: Unable to read metadata cache entry [99] [ 78.629466][ T9272] SQUASHFS error: Unable to read inode 0x127 [ 78.649601][ T9184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.823963][ T4362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.851026][ T9304] netlink: 'syz.9.1236': attribute type 1 has an invalid length. [ 78.851064][ T9304] netlink: 'syz.9.1236': attribute type 1 has an invalid length. [ 78.851074][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1236'. [ 78.903171][ T4815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.903292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.906419][ T4800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.910501][ T1477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.910659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.911519][ T1477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.979252][ T9318] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1241'. [ 78.979292][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1241'. [ 79.288149][ T9354] netlink: 'syz.5.1250': attribute type 1 has an invalid length. [ 79.288187][ T9354] netlink: 'syz.5.1250': attribute type 1 has an invalid length. [ 79.310127][ T9357] loop2: detected capacity change from 0 to 128 [ 79.340472][ T9357] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 79.366170][ T9357] EXT4-fs (loop2): shut down requested (1) [ 79.426479][ T6504] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.852869][ T9440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 79.931046][ T9452] loop9: detected capacity change from 0 to 256 [ 80.031454][ T9463] loop9: detected capacity change from 0 to 2048 [ 80.031862][ T9463] ext4: Unknown parameter 'nouser_xattr' [ 80.064495][ T9467] loop5: detected capacity change from 0 to 8192 [ 80.097438][ T9467] loop5: p1 p2 p3 p4[EZD] [ 80.098488][ T9467] loop5: partition table partially beyond EOD, truncated [ 80.099999][ T9467] loop5: p1 start 16384 is beyond EOD, truncated [ 80.101290][ T9467] loop5: p2 size 150994944 extends beyond EOD, truncated [ 80.105238][ T9467] loop5: p3 start 67108864 is beyond EOD, truncated [ 80.106450][ T9467] loop5: p4 size 33555584 extends beyond EOD, truncated [ 80.248713][ T9485] __nla_validate_parse: 2 callbacks suppressed [ 80.248758][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 80.248783][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 80.282279][ T9489] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 80.360290][ T9495] IPVS: persistence engine module ip_vs_pe_ not found [ 80.384736][ T9502] loop5: detected capacity change from 0 to 512 [ 80.385099][ T9502] ext4: Unknown parameter 'uid<00000000000000000000' [ 80.625542][ T9520] netlink: 'syz.5.1299': attribute type 2 has an invalid length. [ 80.819915][ T9537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.878643][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.917695][ T9553] set_capacity_and_notify: 2 callbacks suppressed [ 80.920335][ T9553] loop7: detected capacity change from 0 to 512 [ 80.922832][ T9553] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 80.927566][ T9553] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1313: invalid indirect mapped block 9 (level 0) [ 80.927606][ T9553] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 80.931525][ T9553] EXT4-fs (loop7): 1 truncate cleaned up [ 80.931999][ T9553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.949301][ T9559] netlink: 'syz.2.1314': attribute type 11 has an invalid length. [ 80.956038][ T9556] loop9: detected capacity change from 0 to 1024 [ 80.977323][ T9556] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.989086][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.030752][ T9568] loop2: detected capacity change from 0 to 512 [ 81.038872][ T9568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.052348][ T9568] EXT4-fs (loop2): 1 truncate cleaned up [ 81.052846][ T9568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.062872][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.095276][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.155580][ T1477] Bluetooth: hci5: Frame reassembly failed (-84) [ 81.282521][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 81.283610][ T9588] netlink: 34959 bytes leftover after parsing attributes in process `syz.2.1327'. [ 81.309121][ T9590] loop2: detected capacity change from 0 to 1024 [ 81.325651][ T9590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.348740][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.677708][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 81.677750][ T30] audit: type=1800 audit(81.650:545): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 81.706687][ T30] audit: type=1800 audit(81.680:546): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 81.718269][ T9614] gadgetfs: bound to dummy_udc driver [ 81.724049][ T30] audit: type=1800 audit(81.700:547): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26161 res=0 errno=0 [ 81.727879][ T30] audit: type=1800 audit(81.700:548): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 81.745024][ T30] audit: type=1800 audit(81.720:549): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26184 res=0 errno=0 [ 81.765775][ T30] audit: type=1800 audit(81.740:550): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 81.776391][ T9618] loop4: detected capacity change from 0 to 1024 [ 81.782691][ T9618] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.782722][ T9618] EXT4-fs: Ignoring removed oldalloc option [ 81.788922][ T30] audit: type=1800 audit(81.760:551): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 81.794536][ T9618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.817650][ T9618] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.822559][ T9618] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 81.828225][ T9618] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.828225][ T9618] [ 81.835999][ T9618] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1341: bg 0: block 112: padding at end of block bitmap is not set [ 81.856712][ T30] audit: type=1800 audit(81.830:552): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 81.879307][ T1477] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 81.882185][ T1477] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.882185][ T1477] [ 81.884485][ T1477] EXT4-fs (loop4): Total free blocks count 0 [ 81.885631][ T1477] EXT4-fs (loop4): Free/Dirty block details [ 81.886728][ T1477] EXT4-fs (loop4): free_blocks=0 [ 81.887580][ T1477] EXT4-fs (loop4): dirty_blocks=64 [ 81.888620][ T1477] EXT4-fs (loop4): Block reservation details [ 81.890625][ T7343] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 81.914354][ T30] audit: type=1800 audit(81.880:553): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 81.930022][ T30] audit: type=1800 audit(81.900:554): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 81.971920][ T9638] loop2: detected capacity change from 0 to 1024 [ 82.058504][ T9650] netlink: 'syz.5.1353': attribute type 11 has an invalid length. [ 82.397143][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b2575763: rx timeout, send abort [ 82.398282][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000b2575763: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.418502][ T9680] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 83.223215][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 83.224695][ T4725] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 83.239683][ T9711] loop4: detected capacity change from 0 to 512 [ 83.339026][ T9719] loop4: detected capacity change from 0 to 512 [ 83.385100][ T9719] EXT4-fs (loop4): shut down requested (2) [ 83.471212][ T9735] netlink: 'syz.5.1391': attribute type 12 has an invalid length. [ 83.471244][ T9735] netlink: 'syz.5.1391': attribute type 29 has an invalid length. [ 83.471254][ T9735] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1391'. [ 83.471265][ T9735] netlink: 'syz.5.1391': attribute type 1 has an invalid length. [ 83.471273][ T9735] netlink: 'syz.5.1391': attribute type 2 has an invalid length. [ 83.471280][ T9735] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1391'. [ 83.506071][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 83.533467][ T9739] netlink: 'syz.5.1393': attribute type 1 has an invalid length. [ 83.624632][ T4807] net_ratelimit: 358 callbacks suppressed [ 83.624673][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.637786][ T9759] loop5: detected capacity change from 0 to 1024 [ 83.699618][ T9761] block device autoloading is deprecated and will be removed. [ 83.704830][ T3430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.704908][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.704934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.712897][ T6189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.927969][ T9797] loop9: detected capacity change from 0 to 512 [ 84.014506][ T9805] input: syz0 as /devices/virtual/input/input19 [ 84.107967][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.108116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.194154][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.275495][ T9833] input: syz1 as /devices/virtual/input/input20 [ 84.346719][ T6189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.433596][ T9854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.816493][ T9891] EXT4-fs: inline encryption not supported [ 84.816549][ T9891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.818205][ T9891] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.818216][ T9891] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.819113][ T9891] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 84.820140][ T9891] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 84.820184][ T9891] System zones: 0-5 [ 85.140441][ T9927] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 85.183197][ T9932] EXT4-fs: Ignoring removed bh option [ 85.186804][ T9932] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 85.287103][ T9944] gadgetfs: bound to dummy_udc driver [ 85.410321][ T9956] binder: 9955:9956 ioctl c0306201 200001c0 returned -14 [ 85.456692][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'. [ 85.768765][T10000] EXT4-fs: Ignoring removed nobh option [ 85.768805][T10000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.861735][T10008] EXT4-fs: inline encryption not supported [ 85.867842][T10008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.867888][T10008] EXT4-fs (loop2): Test dummy encryption mode enabled [ 85.877337][T10008] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 85.877415][T10008] System zones: 0-5 [ 85.938406][T10024] capability: warning: `syz.9.1508' uses 32-bit capabilities (legacy support in use) [ 85.995954][T10037] set_capacity_and_notify: 6 callbacks suppressed [ 85.995994][T10037] loop9: detected capacity change from 0 to 1024 [ 86.116332][T10050] block2mtd: error: cannot open device [ 86.187426][T10061] No fuse device found [ 86.728334][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 86.728388][ T30] audit: type=1800 audit(86.700:744): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 86.783706][ T30] audit: type=1800 audit(86.760:745): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 86.824856][ T30] audit: type=1800 audit(86.800:746): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 86.859173][ T30] audit: type=1800 audit(86.830:747): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 86.879525][ T30] audit: type=1800 audit(86.850:748): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 86.895165][ T30] audit: type=1800 audit(86.870:749): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 86.911197][ T30] audit: type=1800 audit(86.880:750): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 86.930517][T10120] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 86.935938][ T30] audit: type=1800 audit(86.910:751): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 86.965494][ T30] audit: type=1800 audit(86.940:752): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 86.969671][ T30] audit: type=1800 audit(86.940:753): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163156 res=0 errno=0 [ 87.114008][T10133] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.114920][T10133] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.155780][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.159461][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.349579][T10139] geneve2: entered promiscuous mode [ 87.363053][ T1397] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.363104][ T1397] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.363127][ T1397] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.363143][ T1397] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.810269][ T1477] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.898926][T10158] loop7: detected capacity change from 0 to 512 [ 88.189718][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1569'. [ 88.221655][T10186] loop4: detected capacity change from 0 to 1024 [ 88.255691][T10186] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1571: bg 0: block 112: padding at end of block bitmap is not set [ 88.259952][T10186] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 88.259994][T10186] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.259994][T10186] [ 88.260009][T10186] EXT4-fs (loop4): Total free blocks count 0 [ 88.260017][T10186] EXT4-fs (loop4): Free/Dirty block details [ 88.260025][T10186] EXT4-fs (loop4): free_blocks=0 [ 88.260034][T10186] EXT4-fs (loop4): dirty_blocks=64 [ 88.260040][T10186] EXT4-fs (loop4): Block reservation details [ 88.260046][T10186] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 88.307576][ T7343] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 88.544131][ T5117] kernel read not supported for file /kmsg (pid: 5117 comm: kworker/0:4) [ 88.821873][T10243] loop4: detected capacity change from 0 to 256 [ 88.884467][T10249] netlink: 'syz.2.1601': attribute type 4 has an invalid length. [ 89.051251][T10268] printk: legacy console [ttyGS0] disabled [ 89.393287][ T4807] net_ratelimit: 30 callbacks suppressed [ 89.393334][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.611155][T10314] loop5: detected capacity change from 0 to 512 [ 89.783673][ T4362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.863131][ T4725] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 90.092929][ T4725] Bluetooth: hci0: Zero size dump init pkt [ 90.104013][ T5117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.104125][ T5117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.424714][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.547794][T10408] loop5: detected capacity change from 0 to 512 [ 90.593828][T10408] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.638948][T10408] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 90.662929][T10423] vlan2: entered allmulticast mode [ 90.666059][T10423] macsec0: entered allmulticast mode [ 90.667706][T10423] veth1_macvtap: entered allmulticast mode [ 90.667934][T10423] bridge0: port 3(vlan2) entered blocking state [ 90.667972][T10423] bridge0: port 3(vlan2) entered disabled state [ 90.669077][T10423] vlan2: entered promiscuous mode [ 90.669092][T10423] macsec0: entered promiscuous mode [ 90.748609][ T5117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.836641][T10446] loop4: detected capacity change from 0 to 512 [ 90.841259][T10446] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 90.851461][T10446] EXT4-fs (loop4): 1 truncate cleaned up [ 90.892156][T10446] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1674: invalid indirect mapped block 4294901760 (level 0) [ 90.898667][T10446] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1674: invalid indirect mapped block 2185560079 (level 0) [ 90.907413][T10446] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1674: invalid indirect mapped block 65535 (level 2) [ 90.916930][T10446] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.1674: Invalid inode table block 0 in block_group 0 [ 90.929351][T10446] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 90.936302][T10446] EXT4-fs error (device loop4): ext4_splice_branch:479: inode #13: comm syz.4.1674: mark_inode_dirty error [ 90.940990][T10446] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1674: bg 0: block 53: invalid block bitmap [ 90.944111][T10446] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 90.946963][T10446] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.1674: Invalid inode table block 0 in block_group 0 [ 90.956259][T10458] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.1674: Invalid inode table block 0 in block_group 0 [ 91.038189][T10469] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 91.052488][T10473] loop4: detected capacity change from 0 to 512 [ 91.060567][T10473] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1679: iget: bad i_size value: 38620345925642 [ 91.060608][T10473] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.060757][T10473] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1679: couldn't read orphan inode 15 (err -117) [ 91.060770][T10473] loop4: lost filesystem error report for type 5 error -117 [ 91.089807][T10473] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1679: bg 0: block 5: invalid block bitmap [ 91.160842][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1683'. [ 91.238509][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1686'. [ 91.275879][T10507] netlink: 'syz.7.1686': attribute type 1 has an invalid length. [ 91.352709][T10520] loop7: detected capacity change from 0 to 1024 [ 91.357161][T10520] EXT4-fs: Ignoring removed orlov option [ 91.357223][T10520] EXT4-fs: Ignoring removed orlov option [ 91.463576][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.476633][T10533] tun0: tun_chr_ioctl cmd 1074025675 [ 91.476667][T10533] tun0: persist enabled [ 91.476847][T10533] tun0: tun_chr_ioctl cmd 1074025675 [ 91.476855][T10533] tun0: persist enabled [ 91.629219][T10557] loop9: detected capacity change from 0 to 1024 [ 91.630140][T10553] gadgetfs: bound to dummy_udc driver [ 91.642339][T10557] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 91.666953][T10557] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 2: comm syz.9.1705: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.666996][T10557] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 91.670448][T10557] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 48: comm syz.9.1705: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.675415][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 91.675431][ C1] EXT4-fs (loop9): initial error at time 91: ext4_map_blocks:791: inode 3: block 2 [ 91.675453][ C1] EXT4-fs (loop9): last error at time 91: ext4_map_blocks:791: inode 3: block 2 [ 91.679720][T10557] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 91.683445][T10557] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.1705: Failed to acquire dquot type 0 [ 91.683494][T10557] loop9: lost filesystem error report for type 5 error -117 [ 91.688241][T10557] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 91.688273][T10557] loop9: lost filesystem error report for type 5 error -117 [ 91.693162][T10557] EXT4-fs error (device loop9): ext4_evict_inode:267: inode #11: comm syz.9.1705: mark_inode_dirty error [ 91.693213][T10557] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 91.696491][T10557] EXT4-fs warning (device loop9): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 91.696563][T10557] EXT4-fs (loop9): 1 orphan inode deleted [ 91.714495][ T12] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.716320][ T12] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 91.742345][T10557] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm syz.9.1705: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.757592][T10573] input: syz0 as /devices/virtual/input/input21 [ 91.757769][T10557] __quota_error: 138 callbacks suppressed [ 91.757782][T10557] Quota error (device loop9): find_tree_dqentry: Can't read quota tree block 1 [ 91.757807][T10557] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 980643439 [ 91.757820][T10557] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.1705: Failed to acquire dquot type 0 [ 91.805851][ T30] audit: type=1800 audit(91.780:889): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 91.815593][ T12] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.815635][ T12] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 91.817968][ T12] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 91.817990][ T12] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 91.818002][ T12] loop9: lost filesystem error report for type 5 error -117 [ 91.818531][ T6462] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 91.818545][ T6462] loop9: lost filesystem error report for type 5 error -117 [ 91.819436][ T6462] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 91.819449][ T6462] loop9: lost filesystem error report for type 5 error -117 [ 91.819522][ T6462] EXT4-fs error (device loop9): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 91.819533][ T6462] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 91.841928][ T30] audit: type=1800 audit(91.810:890): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165436 res=0 errno=0 [ 91.869248][ T30] audit: type=1800 audit(91.840:891): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=165451 res=0 errno=0 [ 91.871123][ T30] audit: type=1800 audit(91.840:892): pid=10582 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1713" name="bcdDevice" dev="configfs" ino=28780 res=0 errno=0 [ 91.895244][ T30] audit: type=1800 audit(91.870:893): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=165454 res=0 errno=0 [ 91.899606][ T30] audit: type=1800 audit(91.870:894): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=165453 res=0 errno=0 [ 91.925818][ T30] audit: type=1800 audit(91.900:895): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 92.014742][T10598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.014880][T10598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.015729][T10598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.559020][T10608] gtp0: entered allmulticast mode [ 92.741472][T10630] loop7: detected capacity change from 0 to 8192 [ 92.791171][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1733'. [ 92.801441][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 93.074509][ T10] kernel read not supported for file /dummy_udc (pid: 10 comm: kworker/0:1) [ 93.139763][T10701] batadv_slave_0: entered promiscuous mode [ 93.140585][T10700] batadv_slave_0: left promiscuous mode [ 93.180195][T10705] loop2: detected capacity change from 0 to 512 [ 93.201550][T10705] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1757: inode has both inline data and extents flags [ 93.201602][T10705] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.201750][T10705] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1757: couldn't read orphan inode 15 (err -117) [ 93.201764][T10705] loop2: lost filesystem error report for type 5 error -117 [ 93.331792][T10723] loop2: detected capacity change from 0 to 7 [ 93.335159][T10723] Dev loop2: unable to read RDB block 7 [ 93.336232][T10723] loop2: AHDI p1 p2 p3 [ 93.337037][T10723] loop2: partition table partially beyond EOD, truncated [ 93.338417][T10723] loop2: p1 start 1601398130 is beyond EOD, truncated [ 93.339687][T10723] loop2: p2 start 1702059890 is beyond EOD, truncated [ 93.418736][T10730] loop4: detected capacity change from 0 to 128 [ 93.421883][T10730] EXT4-fs (loop4): Test dummy encryption mode enabled [ 93.485458][T10739] tipc: Started in network mode [ 93.485500][T10739] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 93.629887][T10759] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1778'. [ 93.654153][T10762] loop4: detected capacity change from 0 to 512 [ 93.703986][T10760] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 93.708941][T10767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 93.751262][T10771] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1781'. [ 93.751312][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1781'. [ 93.751625][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 93.876683][T10785] binder: 10784:10785 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 93.879090][T10785] binder: 10785 RLIMIT_NICE not set [ 93.880156][T10785] binder: 10784:10785 ioctl c0306201 20000480 returned -14 [ 93.998874][T10794] loop4: detected capacity change from 0 to 128 [ 94.000679][T10794] vfat: Unknown parameter '0xffffffffffffffff&^Ao[[I7W4 Ggb")"ĵi' [ 94.036833][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1793'. [ 94.043937][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1793'. [ 94.068015][ T6189] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 94.074439][ T6189] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.362165][T10826] block nbd9: shutting down sockets [ 94.369668][T10830] loop5: detected capacity change from 0 to 512 [ 94.373662][T10830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 94.374564][T10830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 94.374612][T10830] System zones: 1-12 [ 94.378437][T10830] EXT4-fs (loop5): 1 truncate cleaned up [ 94.487962][T10842] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.595699][ T867] net_ratelimit: 11 callbacks suppressed [ 94.595744][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.708040][T10868] input: syz0 as /devices/virtual/input/input23 [ 94.708081][T10868] input: failed to attach handler leds to device input23, error: -6 [ 94.746300][T10870] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.751447][T10870] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.907090][T10895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.908837][T10895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.910997][T10895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.914469][T10895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.916510][T10895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.918697][T10891] EXT4-fs mount: 46 callbacks suppressed [ 94.918724][T10891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.919094][T10895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.920025][T10892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.991478][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.063284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.063403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.178591][T10917] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.210087][T10923] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 95.210124][T10923] unable to read xattr id index table [ 95.212735][T10923] SQUASHFS error: zlib decompression failed, data probably corrupt [ 95.212752][T10923] SQUASHFS error: Failed to read block 0x9b: -5 [ 95.212761][T10923] SQUASHFS error: Unable to read metadata cache entry [99] [ 95.212769][T10923] SQUASHFS error: Unable to read inode 0x127 [ 95.232638][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.444834][T10947] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.676908][T10983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.699532][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.868458][T11003] syzkaller1: entered promiscuous mode [ 95.868487][T11003] syzkaller1: entered allmulticast mode [ 96.231503][T10947] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.379875][T11041] syzkaller1: entered promiscuous mode [ 96.379917][T11041] syzkaller1: entered allmulticast mode [ 96.445002][T11046] set_capacity_and_notify: 6 callbacks suppressed [ 96.445238][T11046] loop4: detected capacity change from 0 to 1024 [ 96.445905][T11046] EXT4-fs: inline encryption not supported [ 96.460945][T11046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.478083][T11046] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1899: lblock 0 mapped to illegal pblock 0 (length 6) [ 96.481441][T11046] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 96.481485][T11046] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.481485][T11046] [ 96.532022][T10498] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 1) [ 96.535947][T10498] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 96.535974][T10498] EXT4-fs (loop4): This should not happen!! Data will be lost [ 96.535974][T10498] [ 96.540792][ T7343] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 96.544632][ T7343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.626658][T11056] __nla_validate_parse: 2 callbacks suppressed [ 96.628060][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1903'. [ 96.712803][T11065] vivid-000: disconnect [ 96.719758][T11055] vivid-000: reconnect [ 96.765502][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 96.765546][ T30] audit: type=1800 audit(96.740:1098): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 96.790546][ T30] audit: type=1800 audit(96.760:1099): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 96.806219][ T30] audit: type=1800 audit(96.780:1100): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 96.822663][ T30] audit: type=1800 audit(96.790:1101): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 96.867607][ T30] audit: type=1800 audit(96.840:1102): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 96.885021][ T30] audit: type=1800 audit(96.860:1103): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 96.978402][ T30] audit: type=1800 audit(96.950:1104): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 97.010468][ T30] audit: type=1800 audit(96.980:1105): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 97.012617][T11089] loop7: detected capacity change from 0 to 256 [ 97.019956][ T30] audit: type=1800 audit(96.990:1106): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 97.046354][ T30] audit: type=1800 audit(97.020:1107): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 97.053772][T11089] syz.7.1916: attempt to access beyond end of device [ 97.053772][T11089] loop7: rw=2049, sector=1800, nr_sectors = 4 limit=256 [ 97.059396][T11089] syz.7.1916: attempt to access beyond end of device [ 97.059396][T11089] loop7: rw=2049, sector=1800, nr_sectors = 4 limit=256 [ 97.164789][T11102] bond1: invalid NS target :: specified for addition [ 97.166248][T11102] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 97.169033][T11102] bond1 (unregistering): Released all slaves [ 97.349787][T11126] loop7: detected capacity change from 0 to 512 [ 97.350192][T11126] ext4: Unknown parameter 'nouser_xattr' [ 98.338833][T11160] loop2: detected capacity change from 0 to 512 [ 98.340802][T11160] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.344801][T11160] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1948: inode has both inline data and extents flags [ 98.344837][T11160] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.344968][T11160] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1948: couldn't read orphan inode 15 (err -117) [ 98.344984][T11160] loop2: lost filesystem error report for type 5 error -117 [ 98.356462][T11157] input: syz1 as /devices/virtual/input/input24 [ 98.376181][T11160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.402846][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.615944][T11194] loop9: detected capacity change from 0 to 512 [ 98.625031][T11194] EXT4-fs (loop9): Test dummy encryption mode enabled [ 98.637012][T11194] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1962: inode has both inline data and extents flags [ 98.637056][T11194] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.637250][T11194] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1962: couldn't read orphan inode 15 (err -117) [ 98.637266][T11194] loop9: lost filesystem error report for type 5 error -117 [ 98.637816][T11194] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.655376][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 98.658008][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.716851][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.015344][T11241] loop2: detected capacity change from 0 to 512 [ 99.031264][T11241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.069935][T11241] EXT4-fs (loop2): shut down requested (0) [ 99.172869][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.179793][ T867] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 99.182229][ T867] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.401089][T11268] loop2: detected capacity change from 0 to 512 [ 99.427564][T11268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.703633][ T10] net_ratelimit: 32 callbacks suppressed [ 99.703694][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.787470][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.873645][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.344411][ T6189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.399825][T11310] loop9: detected capacity change from 0 to 512 [ 100.453282][T11310] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.462447][T11316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 100.504894][T11310] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 100.530406][T11310] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 100.567978][T11324] binder: 11321:11324 ioctl 4018620d 0 returned -22 [ 100.570535][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.574451][T11324] binder: 11321:11324 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 100.576930][T11324] binder: 11324 RLIMIT_NICE not set [ 100.607573][T11326] loop4: detected capacity change from 0 to 512 [ 100.623498][T11326] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2017: inode has both inline data and extents flags [ 100.623540][T11326] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.623679][T11326] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2017: couldn't read orphan inode 15 (err -117) [ 100.623701][T11326] loop4: lost filesystem error report for type 5 error -117 [ 100.624233][T11326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.688359][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2019'. [ 100.693048][ T7343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.823256][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.929370][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 100.993427][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.132907][T11379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.301892][T11400] loop4: detected capacity change from 0 to 1024 [ 101.304520][T11400] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 101.319863][T11400] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.2048: lblock 2 mapped to illegal pblock 2 (length 1) [ 101.319901][T11400] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 101.322664][T11400] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.2048: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.322700][T11400] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 101.324683][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 101.324697][ C0] EXT4-fs (loop4): initial error at time 101: ext4_map_blocks:791: inode 3: block 2 [ 101.324716][ C0] EXT4-fs (loop4): last error at time 101: ext4_map_blocks:791: inode 3: block 48 [ 101.339651][T11400] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2048: Failed to acquire dquot type 0 [ 101.339692][T11400] loop4: lost filesystem error report for type 5 error -117 [ 101.340023][T11400] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 101.340044][T11400] loop4: lost filesystem error report for type 5 error -117 [ 101.345268][T11400] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.2048: mark_inode_dirty error [ 101.345313][T11400] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.345589][T11400] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 101.345648][T11400] EXT4-fs (loop4): 1 orphan inode deleted [ 101.346127][T11400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.364082][ T12] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.366959][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 101.378108][T11400] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm syz.4.2048: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.390446][T11400] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2048: Failed to acquire dquot type 0 [ 101.417577][ T7343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.419318][ T781] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.419361][ T781] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 101.419476][ T781] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 101.419492][ T781] loop4: lost filesystem error report for type 5 error -117 [ 101.419882][ T7343] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 101.419895][ T7343] loop4: lost filesystem error report for type 5 error -117 [ 101.419988][ T7343] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 101.419997][ T7343] loop4: lost filesystem error report for type 5 error -117 [ 101.420063][ T7343] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 101.420073][ T7343] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 101.615642][T11424] loop4: detected capacity change from 0 to 512 [ 101.652709][T11424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.697313][T11424] EXT4-fs (loop4): shut down requested (0) [ 101.750582][T11436] loop9: detected capacity change from 0 to 512 [ 101.778383][T11436] EXT4-fs: Ignoring removed i_version option [ 101.778433][T11436] EXT4-fs: Ignoring removed bh option [ 101.790058][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 101.790093][ T30] audit: type=1800 audit(101.760:1272): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 101.817331][T11436] EXT4-fs error (device loop9): ext4_orphan_get:1399: comm syz.9.2062: inode #13: comm syz.9.2062: iget: illegal inode # [ 101.817384][T11436] loop9: lost filesystem error report for type 5 error -117 [ 101.820270][T11442] tun0: tun_chr_ioctl cmd 1074025675 [ 101.820304][T11442] tun0: persist enabled [ 101.820479][T11442] tun0: tun_chr_ioctl cmd 1074025675 [ 101.820487][T11442] tun0: persist enabled [ 101.822986][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 101.823006][ C1] EXT4-fs (loop9): initial error at time 101: ext4_orphan_get:1399 [ 101.823020][ C1] EXT4-fs (loop9): last error at time 101: ext4_orphan_get:1399 [ 101.823509][T11436] EXT4-fs (loop9): Remounting filesystem read-only [ 101.823977][T11436] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.836538][T11436] EXT4-fs (loop9): shut down requested (2) [ 101.839690][ T7343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.863175][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.879829][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.882178][ T30] audit: type=1800 audit(101.850:1273): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 101.928776][ T30] audit: type=1800 audit(101.900:1274): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 101.932178][ T30] audit: type=1800 audit(101.900:1275): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 101.945407][T11454] Injecting memory failure for pfn 0x15af16 at process virtual address 0x20000000 [ 101.963992][T11454] Memory failure: 0x15af16: Sending SIGBUS to syz.9.2067:11454 due to hardware memory corruption [ 101.964066][T11454] Memory failure: 0x15af16: recovery action for dirty LRU page: Recovered [ 101.964106][T11454] Injecting memory failure for pfn 0x219260 at process virtual address 0x20001000 [ 101.976293][T11454] Memory failure: 0x219260: unhandlable page. [ 101.976336][T11454] Memory failure: 0x219260: recovery action for get hwpoison page: Ignored [ 101.987825][T11454] input: syz0 as /devices/virtual/input/input26 [ 101.991833][T11456] netlink: 1708 bytes leftover after parsing attributes in process `syz.5.2068'. [ 101.991877][T11456] netlink: 1708 bytes leftover after parsing attributes in process `syz.5.2068'. [ 102.014252][ T30] audit: type=1800 audit(101.980:1276): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169283 res=0 errno=0 [ 102.017700][ T30] audit: type=1800 audit(101.990:1277): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=169298 res=0 errno=0 [ 102.017753][ T30] audit: type=1800 audit(101.990:1278): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=169301 res=0 errno=0 [ 102.017778][ T30] audit: type=1800 audit(101.990:1279): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=169300 res=0 errno=0 [ 102.017798][ T30] audit: type=1800 audit(101.990:1280): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=169299 res=0 errno=0 [ 102.017817][ T30] audit: type=1800 audit(101.990:1281): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=169290 res=0 errno=0 [ 102.105377][T11470] loop9: detected capacity change from 0 to 512 [ 102.114421][T11470] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 102.114456][T11470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 102.114550][T11470] EXT4-fs (loop9): orphan cleanup on readonly fs [ 102.115038][T11470] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #13: comm syz.9.2071: iget: bad i_size value: 12154761577498 [ 102.115060][T11470] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 102.115284][T11470] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2071: couldn't read orphan inode 13 (err -117) [ 102.115299][T11470] loop9: lost filesystem error report for type 5 error -117 [ 102.115977][T11470] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.150396][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.408984][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.492020][T11500] gtp0: entered allmulticast mode [ 102.631865][T11519] loop5: detected capacity change from 0 to 512 [ 102.642620][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 102.642721][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2091'. [ 102.658395][T11519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.820581][ T6189] kernel read not supported for file /dummy_udc (pid: 6189 comm: kworker/0:5) [ 102.904925][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.983087][ T4725] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 103.008076][T11545] input: syz1 as /devices/virtual/input/input27 [ 103.155034][T11561] loop7: detected capacity change from 0 to 512 [ 103.155662][T11561] EXT4-fs: Ignoring removed i_version option [ 103.155686][T11561] EXT4-fs: Ignoring removed bh option [ 103.170402][T11561] EXT4-fs error (device loop7): ext4_orphan_get:1399: comm syz.7.2110: inode #13: comm syz.7.2110: iget: illegal inode # [ 103.170600][T11561] EXT4-fs (loop7): Remounting filesystem read-only [ 103.171061][T11561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.181621][T11561] EXT4-fs (loop7): shut down requested (2) [ 103.225419][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.334529][T11572] device-mapper: table: 248:0: zero-length target [ 103.336670][T11572] device-mapper: ioctl: error adding target to table [ 103.597850][T11588] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 103.886126][T11613] loop2: detected capacity change from 0 to 512 [ 103.896342][T11613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.943495][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.961716][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.147155][T11636] tipc: Started in network mode [ 104.147197][T11636] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 104.336281][T11650] loop7: detected capacity change from 0 to 256 [ 104.358732][T11652] binder: 11651:11652 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 104.765644][ T8114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.901835][T11682] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2164'. [ 104.902048][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2164'. [ 104.902060][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2164'. [ 104.983348][ T4815] net_ratelimit: 1 callbacks suppressed [ 104.983389][ T4815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.077882][T11697] erspan0: entered promiscuous mode [ 105.082849][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2172'. [ 105.130519][T11702] loop5: detected capacity change from 0 to 128 [ 105.179476][T11706] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.198740][T11710] netlink: 16198 bytes leftover after parsing attributes in process `syz.9.2177'. [ 105.220164][T11712] loop9: detected capacity change from 0 to 512 [ 105.246666][T11712] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.295588][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.363408][T11726] binder: 11725:11726 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 105.407509][T11731] erspan0: entered promiscuous mode [ 105.409048][T11732] input: syz0 as /devices/virtual/input/input28 [ 105.409089][T11732] input: failed to attach handler leds to device input28, error: -6 [ 105.410940][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2184'. [ 105.569220][T11748] loop9: detected capacity change from 0 to 128 [ 105.585479][T11750] block nbd5: shutting down sockets [ 106.024575][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.082085][T11815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.208529][T11832] Injecting memory failure for pfn 0x11e831 at process virtual address 0x20001000 [ 106.210971][T11832] Memory failure: 0x11e831: recovery action for clean LRU page: Recovered [ 106.211006][T11832] Injecting memory failure for pfn 0x159ed6 at process virtual address 0x20002000 [ 106.211079][T11832] Memory failure: 0x159ed6: recovery action for clean LRU page: Recovered [ 106.211088][T11832] Injecting memory failure for pfn 0x11e092 at process virtual address 0x20003000 [ 106.211123][T11832] Memory failure: 0x11e092: recovery action for clean LRU page: Recovered [ 106.224697][T11832] EXT4-fs (loop2): 1 truncate cleaned up [ 106.225177][T11832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.237927][T11836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.246254][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.665373][T11854] syzkaller1: entered promiscuous mode [ 106.665408][T11854] syzkaller1: entered allmulticast mode [ 106.754086][T11858] set_capacity_and_notify: 3 callbacks suppressed [ 106.756724][T11858] loop7: detected capacity change from 0 to 512 [ 106.763052][T11858] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 106.772538][T11858] EXT4-fs (loop7): 1 truncate cleaned up [ 106.773599][T11858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.791877][T11858] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2245: invalid indirect mapped block 4294901760 (level 0) [ 106.792127][T11858] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2245: invalid indirect mapped block 2185560079 (level 0) [ 106.792489][T11858] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2245: invalid indirect mapped block 65535 (level 2) [ 106.800901][T11858] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2245: Invalid inode table block 0 in block_group 0 [ 106.801253][T11858] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 106.801401][T11858] EXT4-fs error (device loop7): ext4_splice_branch:479: inode #13: comm syz.7.2245: mark_inode_dirty error [ 106.801637][T11858] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2245: bg 0: block 53: invalid block bitmap [ 106.801771][T11858] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 106.802001][T11858] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2245: Invalid inode table block 0 in block_group 0 [ 106.802145][T11858] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 106.820469][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 106.820509][ T30] audit: type=1800 audit(106.790:1476): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 106.848383][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.868762][ T30] audit: type=1800 audit(106.840:1477): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 106.917275][ T30] audit: type=1800 audit(106.890:1478): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 106.946990][ T30] audit: type=1800 audit(106.920:1479): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 107.065352][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.078185][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.085647][ T30] audit: type=1800 audit(107.060:1480): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 107.120827][ T30] audit: type=1800 audit(107.090:1481): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 107.152881][ T30] audit: type=1800 audit(107.120:1482): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 107.212243][ T30] audit: type=1800 audit(107.180:1483): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 107.237756][ T30] audit: type=1800 audit(107.210:1484): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16273 res=0 errno=0 [ 107.247632][T11883] loop4: detected capacity change from 0 to 128 [ 107.268785][T11883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 107.268839][T11883] System zones: 1-3, 19-19, 35-36 [ 107.269512][T11883] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 107.275718][T11883] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 107.282540][ T30] audit: type=1800 audit(107.250:1485): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 107.295621][ T7343] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.425620][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.506799][T11904] loop2: detected capacity change from 0 to 512 [ 107.507213][T11904] EXT4-fs: inline encryption not supported [ 107.509151][T11904] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 107.512826][T11904] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2266: corrupted in-inode xattr: e_value size too large [ 107.512865][T11904] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.514361][T11904] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2266: couldn't read orphan inode 15 (err -117) [ 107.514381][T11904] fserror_report: 1 callbacks suppressed [ 107.514387][T11904] loop2: lost filesystem error report for type 5 error -117 [ 107.514950][T11904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.562896][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.589389][T11913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.589836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.641222][T11921] loop7: detected capacity change from 0 to 512 [ 107.660758][T11921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.732664][T11931] loop9: detected capacity change from 0 to 256 [ 107.852276][T11938] loop4: detected capacity change from 0 to 512 [ 107.860463][T11938] EXT4-fs: inline encryption not supported [ 107.864834][T11938] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.877494][T11938] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2280: corrupted in-inode xattr: e_value size too large [ 107.877539][T11938] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.882075][T11938] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2280: couldn't read orphan inode 15 (err -117) [ 107.882128][T11938] loop4: lost filesystem error report for type 5 error -117 [ 107.891366][T11938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.933380][T11944] __nla_validate_parse: 2 callbacks suppressed [ 107.934726][T11944] netlink: 1700 bytes leftover after parsing attributes in process `syz.9.2283'. [ 107.936313][T11944] netlink: 1700 bytes leftover after parsing attributes in process `syz.9.2283'. [ 107.949596][ T7343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.995951][T11947] bridge1: entered promiscuous mode [ 107.995995][T11947] bridge1: entered allmulticast mode [ 108.002003][T11947] team0: Port device bridge1 added [ 108.014851][T11947] bridge0: port 3(team0) entered blocking state [ 108.014938][T11947] bridge0: port 3(team0) entered disabled state [ 108.015158][T11947] team0: entered allmulticast mode [ 108.015168][T11947] team_slave_0: entered allmulticast mode [ 108.015189][T11947] team_slave_1: entered allmulticast mode [ 108.023752][T11947] team0: entered promiscuous mode [ 108.023781][T11947] team_slave_0: entered promiscuous mode [ 108.025655][T11947] team_slave_1: entered promiscuous mode [ 108.026302][T11947] bridge0: port 3(team0) entered blocking state [ 108.026413][T11947] bridge0: port 3(team0) entered forwarding state [ 108.103175][ T4807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.183122][ T4725] Bluetooth: hci5: command 0x1003 tx timeout [ 108.185525][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 108.328106][T11967] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 108.493264][T11980] binder: 11979:11980 ioctl c0306201 200001c0 returned -14 [ 108.671957][T11987] loop2: detected capacity change from 0 to 512 [ 108.679383][T11987] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 108.684714][T11987] EXT4-fs (loop2): 1 truncate cleaned up [ 108.685184][T11987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.706296][T11987] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2302: invalid indirect mapped block 4294901760 (level 0) [ 108.709254][T11987] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2302: invalid indirect mapped block 2185560079 (level 0) [ 108.714501][T11987] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2302: invalid indirect mapped block 65535 (level 2) [ 108.718663][T11987] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.2302: Invalid inode table block 0 in block_group 0 [ 108.721644][T11987] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 108.725722][T11987] EXT4-fs error (device loop2): ext4_splice_branch:479: inode #13: comm syz.2.2302: mark_inode_dirty error [ 108.728242][T11987] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2302: bg 0: block 53: invalid block bitmap [ 108.730708][T11987] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 108.732812][T11987] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.2302: Invalid inode table block 0 in block_group 0 [ 108.735641][T11987] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 108.785804][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.870171][T11999] loop2: detected capacity change from 0 to 128 [ 108.881660][T11999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 108.881708][T11999] System zones: 1-3, 19-19, 35-36 [ 108.882258][T11999] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 108.913658][T11999] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 108.977364][ T6504] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.074114][T12012] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 109.143296][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.147036][T12018] loop9: detected capacity change from 0 to 2048 [ 109.172472][T12018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.262011][ T6462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.428791][T12041] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 109.533109][T12049] macvlan1: entered promiscuous mode [ 109.539162][T12049] team0: Port device macvlan1 added [ 109.697320][T12061] loop4: detected capacity change from 0 to 512 [ 109.709425][T12061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.846190][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.855625][ T7343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.902770][T12069] EXT4-fs: Ignoring removed i_version option [ 109.927320][T12069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.931784][T12077] netlink: 'syz.4.2341': attribute type 3 has an invalid length. [ 109.956472][ T6189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.981581][ T6504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.117726][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.124660][T12090] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2346: inode has both inline data and extents flags [ 110.127250][T12090] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.127430][T12090] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2346: couldn't read orphan inode 15 (err -117) [ 110.127772][T12087] FAT-fs (loop4): bogus logical sector size 3 [ 110.127790][T12087] FAT-fs (loop4): Can't find a valid FAT filesystem [ 110.133744][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 110.133758][ C0] EXT4-fs (loop2): initial error at time 110: ext4_orphan_get:1399: inode 15 [ 110.133774][ C0] EXT4-fs (loop2): last error at time 110: ext4_orphan_get:1399: inode 15 [ 110.139762][T12090] loop2: lost filesystem error report for type 5 error -117 [ 110.140411][T12090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.155295][T12092] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 110.158739][T12092] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #17: comm syz.5.2347: corrupted in-inode xattr: e_name out of bounds [ 110.158776][T12092] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 110.161585][T12092] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2347: couldn't read orphan inode 17 (err -117) [ 110.161616][T12092] loop5: lost filesystem error report for type 5 error -117 [ 110.163505][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 110.163518][ C0] EXT4-fs (loop5): initial error at time 110: ext4_iget_extra_inode:5180: inode 17 [ 110.163535][ C0] EXT4-fs (loop5): last error at time 110: ext4_orphan_get:1404 [ 110.172667][T12092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.179528][T12092] EXT4-fs (loop5): shut down requested (2) [ 110.183206][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.293188][T12102] macvlan1: entered promiscuous mode [ 110.305477][T12102] team0: Port device macvlan1 added [ 110.490139][T12124] vhci_hcd vhci_hcd.0: failed to lookup sock [ 110.972601][T12181] FAT-fs (loop5): bogus logical sector size 3 [ 110.972646][T12181] FAT-fs (loop5): Can't find a valid FAT filesystem [ 110.992043][T12187] netlink: 'syz.9.2389': attribute type 3 has an invalid length. [ 111.021812][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'. [ 111.223874][ T4815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.244374][T12212] block nbd9: NBD_DISCONNECT [ 111.245884][T12209] block nbd9: Disconnected due to user request. [ 111.245913][T12209] block nbd9: shutting down sockets [ 111.344757][T12221] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2403: corrupted in-inode xattr: invalid ea_ino [ 111.372288][T12227] vhci_hcd vhci_hcd.0: failed to lookup sock [ 111.374766][ T7343] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 111.382921][ T7343] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 111.500766][T12238] team0: entered promiscuous mode [ 111.504331][T12238] team_slave_0: entered promiscuous mode [ 111.504433][T12238] team_slave_1: entered promiscuous mode [ 111.504924][T12238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 111.655800][T12254] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.667881][T12254] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.704803][ T15] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.859016][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 111.859060][ T30] audit: type=1800 audit(111.830:1657): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 111.877240][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.878587][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.878931][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.879245][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.879478][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.894577][ T30] audit: type=1800 audit(111.870:1658): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172596 res=0 errno=0 [ 111.896749][ T30] audit: type=1800 audit(111.870:1659): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 111.897264][ T30] audit: type=1800 audit(111.870:1660): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172607 res=0 errno=0 [ 111.908610][ T30] audit: type=1800 audit(111.880:1661): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172626 res=0 errno=0 [ 111.914195][ T30] audit: type=1800 audit(111.890:1662): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172637 res=0 errno=0 [ 111.956417][ T30] audit: type=1800 audit(111.930:1663): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 111.972691][ T30] audit: type=1800 audit(111.940:1664): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16390 res=0 errno=0 [ 111.993528][ T30] audit: type=1800 audit(111.960:1665): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 112.008128][ T30] audit: type=1800 audit(111.980:1666): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 112.152852][T12312] Unable to handle kernel paging request at virtual address dfff800000000000 [ 112.152886][T12312] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 112.152913][T12312] Mem abort info: [ 112.152923][T12312] ESR = 0x0000000096000005 [ 112.152933][T12312] EC = 0x25: DABT (current EL), IL = 32 bits [ 112.152973][T12312] SET = 0, FnV = 0 [ 112.152981][T12312] EA = 0, S1PTW = 0 [ 112.152990][T12312] FSC = 0x05: level 1 translation fault [ 112.152998][T12312] Data abort info: [ 112.153005][T12312] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 112.153013][T12312] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 112.153022][T12312] GCS = 0, Overlay = 0, DirtyBit = 0 [ 112.153031][T12312] [dfff800000000000] address between user and kernel address ranges [ 112.153123][T12312] Internal error: Oops: 0000000096000005 [#1] SMP [ 112.166333][T12312] Modules linked in: [ 112.167118][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.7.2443 Tainted: G L syzkaller #0 PREEMPT [ 112.168946][T12312] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.169683][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 112.171462][T12312] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 112.172839][T12312] pc : strcmp+0x28/0xf0 [ 112.173575][T12312] lr : __ftrace_set_clr_event_nolock+0x6a0/0x940 [ 112.174627][T12312] sp : ffff800096a17840 [ 112.175297][T12312] x29: ffff800096a17870 x28: dfff800000000000 x27: 0000000000000000 [ 112.176666][T12312] x26: ffff800088d6e830 x25: ffff0000f3d35680 x24: 0000000000000000 [ 112.178049][T12312] x23: ffff800088d6e830 x22: 0000000000000000 x21: dfff800000000000 [ 112.179404][T12312] x20: ffff0000f3d35698 x19: ffff0000cd6937e0 x18: 0000000000000000 [ 112.180767][T12312] x17: 0000000000000000 x16: 0000000000000000 x15: ffff800080c9db3c [ 112.182123][T12312] x14: ffff800080c9d9bc x13: 0000000000000003 x12: 0000000000000000 [ 112.183481][T12312] x11: 0000000000000000 x10: dfff800000000000 x9 : ffff0000f227ef01 [ 112.184875][T12312] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff800080168534 [ 112.186192][T12312] x5 : ffff0000f31f1120 x4 : 0000000000000008 x3 : ffff8000806c6790 [ 112.187550][T12312] x2 : 0000000000000000 x1 : ffff0000f227ef01 x0 : 0000000000000000 [ 112.188931][T12312] Call trace: [ 112.189502][T12312] strcmp+0x28/0xf0 (P) [ 112.190244][T12312] __ftrace_set_clr_event_nolock+0x6a0/0x940 [ 112.191254][T12312] __ftrace_set_clr_event+0xa8/0xec [ 112.192129][T12312] ftrace_set_clr_event+0x2a0/0x438 [ 112.192948][T12312] ftrace_event_write+0x1dc/0x28c [ 112.193762][T12312] vfs_write+0x2a4/0xa0c [ 112.194453][T12312] ksys_write+0x12c/0x228 [ 112.195168][T12312] __arm64_sys_write+0x84/0x98 [ 112.195980][T12312] invoke_syscall+0x98/0x244 [ 112.196747][T12312] el0_svc_common+0xec/0x23c [ 112.197485][T12312] do_el0_svc+0x4c/0x5c [ 112.198209][T12312] el0_svc+0x64/0x260 [ 112.198893][T12312] el0t_64_sync_handler+0x48/0x148 [ 112.199732][T12312] el0t_64_sync+0x198/0x19c [ 112.200476][T12312] Code: aa0103e9 f2fbffea d343fc0b 1200080c (38ea696b) [ 112.201566][T12312] ---[ end trace 0000000000000000 ]--- [ 112.527974][T12312] Kernel panic - not syncing: Oops: Fatal exception [ 112.529073][T12312] SMP: stopping secondary CPUs [ 112.529886][T12312] Kernel Offset: disabled [ 112.530586][T12312] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 112.531734][T12312] Memory Limit: none [ 112.845431][T12312] Rebooting in 86400 seconds..