last executing test programs: 1m11.694826637s ago: executing program 32 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1m2.53298726s ago: executing program 5 (id=868): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 1m2.490178083s ago: executing program 5 (id=872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1}}], 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 1m2.370141444s ago: executing program 5 (id=876): socket$packet(0x11, 0x2, 0x300) open(0x0, 0x22000, 0x1c0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x14, 0x2b, 0x0, @private2, @local, {[@routing={0x1, 0x0, 0x2, 0x8}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x1, 0x100, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) 1m2.328081997s ago: executing program 5 (id=878): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440), 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r0, 0xc0504e47, &(0x7f0000000a00)) 1m2.163799857s ago: executing program 5 (id=882): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r1, r0}}, 0xfffffffffffffeda) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m1.772499898s ago: executing program 5 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_script(r0, &(0x7f0000002bc0)={'#! ', './dev/kmsg'}, 0xe) 1m1.684762352s ago: executing program 33 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$binfmt_script(r0, &(0x7f0000002bc0)={'#! ', './dev/kmsg'}, 0xe) 1m1.596719163s ago: executing program 2 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noauto_da_alloc}, {@nouid32}]}, 0x7, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendfile(r0, r0, 0x0, 0x1000000000007) 1m1.523856168s ago: executing program 2 (id=912): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000180)={[{@noinit_itable}, {@init_itable}, {@grpquota}]}, 0x3, 0x494, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x3, @desc2}) 1m1.424834158s ago: executing program 2 (id=914): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, 0x0) 1m1.350481692s ago: executing program 2 (id=915): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m1.256932215s ago: executing program 2 (id=918): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000180)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {0x0, 0xf}}, 0x18) 1m1.084102352s ago: executing program 2 (id=920): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0504e47, 0x0) 53.792887509s ago: executing program 6 (id=956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/3, 0x3}], 0x1, 0x0, 0xb) 53.494094251s ago: executing program 6 (id=958): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x2, {0xffffffffffffffe5, './file0'}}, 0x10) 52.847274062s ago: executing program 6 (id=965): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x5, 0x6, 0x2000201, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x1185, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x6, 0x6823, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x7, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x2, 0x42c2, 0x6, 0x6, 0x0, 0x1, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 52.55277875s ago: executing program 6 (id=970): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 52.192424637s ago: executing program 6 (id=974): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64=r0, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0) 50.474651204s ago: executing program 6 (id=985): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xb0) 49.996309277s ago: executing program 34 (id=985): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xb0) 48.362470719s ago: executing program 1 (id=999): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00001a6000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c4}, 0x40041) mlock(&(0x7f0000997000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 48.059245882s ago: executing program 1 (id=1000): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) 47.71442736s ago: executing program 1 (id=1003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x41}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 47.442119794s ago: executing program 1 (id=1006): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) 47.27147284s ago: executing program 1 (id=1007): unshare(0x6a040000) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 45.867858977s ago: executing program 35 (id=920): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0504e47, 0x0) 45.338177271s ago: executing program 1 (id=1019): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0484e41, 0x0) 39.709727004s ago: executing program 4 (id=1022): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) 39.270805191s ago: executing program 4 (id=1024): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 38.956903536s ago: executing program 4 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000002c0)={0x50103, 0x0, 0x3}, 0x18) 38.772758467s ago: executing program 4 (id=1029): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x81e, &(0x7f00000001c0), 0x3, 0x4bf, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 38.252851914s ago: executing program 4 (id=1031): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 37.673307832s ago: executing program 4 (id=1036): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd 0-sk.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"!=\"/bin\"\n', 0x4c) 37.313551295s ago: executing program 36 (id=1036): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd 0-sk.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"!=\"/bin\"\n', 0x4c) 30.167154356s ago: executing program 37 (id=1019): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0484e41, 0x0) 4.821231121s ago: executing program 0 (id=1190): r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r1, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.540814994s ago: executing program 0 (id=1192): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f00000001c0), 0x7) 3.608365427s ago: executing program 9 (id=1202): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) write$tcp_mem(r0, &(0x7f00000000c0)={0x9, 0x20, 0x5a3, 0x20, 0x6}, 0x48) read$FUSE(r0, &(0x7f0000001400)={0x2020}, 0x2020) 3.140958016s ago: executing program 7 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f0000000140)='0f', 0x2) 3.092574771s ago: executing program 9 (id=1208): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)='#', 0x1}], 0x1, 0x0, 0x0, 0x4008040}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x2, 0x20040000) 2.860564682s ago: executing program 8 (id=1210): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000080), 0xff, 0x249, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x20000, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) 2.741613239s ago: executing program 7 (id=1211): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x40, 0xc) fsync(r0) 2.708014387s ago: executing program 9 (id=1212): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0xfd00) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="9551e7", 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x9, r1, 0x0, 0x0, 0x4}]) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2.600394796s ago: executing program 3 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) 2.461125445s ago: executing program 0 (id=1214): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040), 0xffffffffffffff4e}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2.3035697s ago: executing program 8 (id=1215): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file1\x00', 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) 2.288876949s ago: executing program 0 (id=1216): mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2.277310538s ago: executing program 7 (id=1217): io_uring_setup(0x4deb, &(0x7f0000000000)={0x0, 0xa4e3, 0x8, 0x0, 0x2ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x401, &(0x7f0000000000)={0x0}) 2.162541987s ago: executing program 3 (id=1218): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0xb5dd1d8db5a6cf6b}, {@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4d6, 0x2b}, @in6=@mcast1, {0x2}, {0x0, 0x8e, 0x3}, {}, 0x0, 0xffffffff, 0xa, 0x0, 0x0, 0x10}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r0 = syz_io_uring_setup(0x13c0, &(0x7f0000000540)={0x0, 0xa7df, 0x400, 0x1, 0xd3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000002c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.921325994s ago: executing program 7 (id=1219): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0x40, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7ffd, 0xfffffffc, 0x0}) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b", 0x27}], 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 1.832153096s ago: executing program 0 (id=1220): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000200)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.682609208s ago: executing program 3 (id=1221): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) 1.659703913s ago: executing program 8 (id=1222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r0, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000003200000000000000000000000000000070") 1.602694874s ago: executing program 9 (id=1223): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 1.203614178s ago: executing program 7 (id=1224): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x1}, 0xe) 1.1026483s ago: executing program 3 (id=1225): r0 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.102059891s ago: executing program 8 (id=1226): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmmsg$inet(r0, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 1.06611597s ago: executing program 0 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$packet(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000016c0)=ANY=[], 0xfce) 958.738402ms ago: executing program 9 (id=1228): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x30, r0, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) 586.186741ms ago: executing program 8 (id=1229): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x6020400) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 565.498816ms ago: executing program 3 (id=1230): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000c88000/0x1000)=nil, 0x1000}}) 326.658664ms ago: executing program 9 (id=1231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x2d, r0, 0x0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc7}, 0x835a, 0x4014, 0x0, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) 13.226693ms ago: executing program 3 (id=1232): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000001200)=[{0x30, 0x7f, 0x4, 0xcc}]}, 0x10) mmap(&(0x7f0000371000/0x2000)=nil, 0x2000, 0x0, 0x4008032, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 595.793µs ago: executing program 8 (id=1233): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x302) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) 0s ago: executing program 7 (id=1234): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r2, 0x2e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): dump_stack+0x1c/0x28 [ 53.811681][ T5917] should_fail_ex+0x41c/0x590 [ 53.811694][ T5917] should_failslab+0xc4/0x120 [ 53.811708][ T5917] kmem_cache_alloc_noprof+0x94/0x5d4 [ 53.811721][ T5917] do_getname+0x48/0x234 [ 53.811730][ T5917] __arm64_sys_mkdirat+0x88/0xc0 [ 53.811741][ T5917] invoke_syscall+0x98/0x244 [ 53.811753][ T5917] el0_svc_common+0xec/0x23c [ 53.811765][ T5917] do_el0_svc+0x4c/0x5c [ 53.811776][ T5917] el0_svc+0x64/0x260 [ 53.811787][ T5917] el0t_64_sync_handler+0x44/0x104 [ 53.811798][ T5917] el0t_64_sync+0x198/0x19c [ 53.893031][ T5926] loop2: detected capacity change from 0 to 1024 [ 53.893479][ T5926] EXT4-fs: Ignoring removed nobh option [ 53.893492][ T5926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.906391][ T5926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.927459][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.976212][ T5936] loop4: detected capacity change from 0 to 256 [ 54.119536][ T5953] syzkaller1: entered promiscuous mode [ 54.119573][ T5953] syzkaller1: entered allmulticast mode [ 54.216711][ T5957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.258299][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.440136][ T5986] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.419: missing EA_INODE flag [ 54.442895][ T5986] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 54.444235][ T5986] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.419: error while reading EA inode 12 err=-117 [ 54.448871][ T5986] loop0: lost filesystem error report for type 5 error -117 [ 54.449382][ T5986] EXT4-fs (loop0): 1 orphan inode deleted [ 54.453344][ T5986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.463605][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.486244][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.487784][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 54.542288][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.692873][ T6012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.696584][ T6012] EXT4-fs (loop0): 1 truncate cleaned up [ 54.698462][ T6012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.716829][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.954250][ T6031] Injecting memory failure for pfn 0x144ebe at process virtual address 0x2062c000 [ 54.959540][ T6031] Memory failure: 0x144ebe: Sending SIGBUS to syz.3.438:6031 due to hardware memory corruption [ 54.962139][ T6031] Memory failure: 0x144ebe: recovery action for unsplit thp: Failed [ 55.036874][ T6037] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.038673][ T6037] EXT4-fs (loop2): Test dummy encryption mode enabled [ 55.040406][ T6037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.046704][ T6037] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 55.062713][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.093554][ T6042] syzkaller1: entered allmulticast mode [ 55.440714][ T6082] EXT4-fs: Ignoring removed bh option [ 55.477145][ T6082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.488391][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.493755][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.503860][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.946428][ T6129] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.482: missing EA_INODE flag [ 55.946474][ T6129] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 55.950243][ T6129] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.482: error while reading EA inode 12 err=-117 [ 55.954933][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 55.954946][ C0] EXT4-fs (loop4): initial error at time 55: ext4_xattr_inode_iget:437: inode 12 [ 55.954967][ C0] EXT4-fs (loop4): last error at time 55: ext4_xattr_inode_iget:437: inode 12 [ 55.964223][ T6129] loop4: lost filesystem error report for type 5 error -117 [ 55.965027][ T6129] EXT4-fs (loop4): 1 orphan inode deleted [ 55.965560][ T6129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.032369][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.038566][ T6132] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 56.038566][ T6132] The task syz.0.481 (6132) triggered the difference, watch for misbehavior. [ 56.303414][ T5519] fido_id[5519]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.376291][ T6153] set_capacity_and_notify: 7 callbacks suppressed [ 61.379472][ T6153] loop1: detected capacity change from 0 to 2048 [ 61.412055][ T6153] loop1: p1 < > p4 < > [ 61.499485][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 61.509712][ T6158] loop2: detected capacity change from 0 to 512 [ 61.519711][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 61.541315][ T6158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.613667][ T6173] loop0: detected capacity change from 0 to 512 [ 61.627917][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.645196][ T6173] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.499: inode has both inline data and extents flags [ 61.645240][ T6173] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.647851][ T6173] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.499: couldn't read orphan inode 15 (err -117) [ 61.647894][ T6173] loop0: lost filesystem error report for type 5 error -117 [ 61.652856][ T6173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.778679][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.832791][ T6196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.509'. [ 61.850777][ T6198] tun0: tun_chr_ioctl cmd 1074025675 [ 61.850805][ T6198] tun0: persist enabled [ 61.851460][ T6198] tun0: tun_chr_ioctl cmd 1074025675 [ 61.851471][ T6198] tun0: persist enabled [ 61.928231][ T6207] loop0: detected capacity change from 0 to 512 [ 61.943007][ T6207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.981831][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.102752][ T6219] loop2: detected capacity change from 0 to 512 [ 62.103094][ T6219] EXT4-fs: Ignoring removed nobh option [ 62.132068][ T6219] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #3: comm syz.2.519: corrupted inode contents [ 62.136794][ T6219] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.137614][ T6219] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #3: comm syz.2.519: mark_inode_dirty error [ 62.141667][ T6219] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.143994][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 62.144028][ C0] EXT4-fs (loop2): initial error at time 62: ext4_do_update_inode:5801: inode 3 [ 62.144069][ C0] EXT4-fs (loop2): last error at time 62: ext4_dirty_inode:6731: inode 3 [ 62.155057][ T6219] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #3: comm syz.2.519: corrupted inode contents [ 62.158302][ T6219] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.158517][ T6219] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.519: mark_inode_dirty error [ 62.158537][ T6219] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.160771][ T6219] Quota error (device loop2): write_blk: dquota write failed [ 62.160833][ T6219] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 62.160858][ T6219] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.519: Failed to acquire dquot type 0 [ 62.160875][ T6219] loop2: lost filesystem error report for type 5 error -117 [ 62.166356][ T6219] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.519: corrupted inode contents [ 62.166377][ T6219] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.168007][ T6219] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #16: comm syz.2.519: mark_inode_dirty error [ 62.168022][ T6219] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.168236][ T6219] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.519: corrupted inode contents [ 62.168248][ T6219] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.170222][ T6219] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.519: mark_inode_dirty error [ 62.170246][ T6219] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.174528][ T6219] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.519: corrupted inode contents [ 62.174548][ T6219] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.187968][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'. [ 62.187985][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'. [ 62.188044][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'. [ 62.188054][ T6230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'. [ 62.209331][ T6219] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 62.209377][ T6219] loop2: lost filesystem error report for type 5 error -117 [ 62.210375][ T6219] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #16: comm syz.2.519: corrupted inode contents [ 62.210540][ T6219] EXT4-fs error (device loop2): ext4_truncate:4721: inode #16: comm syz.2.519: mark_inode_dirty error [ 62.210664][ T6219] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 62.210673][ T6219] loop2: lost filesystem error report for type 5 error -117 [ 62.212972][ T6232] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 62.215847][ T6219] EXT4-fs (loop2): 1 truncate cleaned up [ 62.216318][ T6219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.229489][ T6219] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #3: comm syz.2.519: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 62.229489][ T6219] [ 62.262788][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.404249][ T6251] mmap: syz.0.531 (6251) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.468571][ T6257] loop4: detected capacity change from 0 to 512 [ 62.471704][ T6257] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.496058][ T6257] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.535: bad orphan inode 131083 [ 62.496100][ T6257] loop4: lost filesystem error report for type 5 error -117 [ 62.496708][ T6257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.521885][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.538328][ T6260] loop3: detected capacity change from 0 to 512 [ 62.579823][ T6260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.599152][ T6260] EXT4-fs error (device loop3): ext4_get_first_dir_block:3562: inode #12: comm syz.3.536: directory missing '..' [ 62.620071][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.675002][ T6274] loop3: detected capacity change from 0 to 2048 [ 62.691558][ T6278] loop0: detected capacity change from 0 to 512 [ 62.707638][ T6278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.734942][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.738805][ T6274] loop3: p1 p2 p3 p4 [ 62.738805][ T6274] p1: [ 62.738919][ T6274] loop3: p1 size 67110656 extends beyond EOD, truncated [ 62.743392][ T6274] loop3: p3 size 134217728 extends beyond EOD, truncated [ 62.748548][ T6274] loop3: p4 size 4278190080 extends beyond EOD, truncated [ 62.750771][ T6274] loop3: p5 size 67110656 extends beyond EOD, truncated [ 62.753411][ T6274] loop3: p6 size 134217728 extends beyond EOD, truncated [ 62.970653][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 62.989513][ T5154] udevd[5154]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 62.993700][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 62.999400][ T6283] udevd[6283]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 63.005638][ T6282] udevd[6282]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 63.013872][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.175136][ T6310] loop0: detected capacity change from 0 to 512 [ 63.179072][ T6310] EXT4-fs (loop0): Test dummy encryption mode enabled [ 63.183499][ T6310] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.557: inode has both inline data and extents flags [ 63.183635][ T6310] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.557: couldn't read orphan inode 15 (err -117) [ 63.183663][ T6310] loop0: lost filesystem error report for type 5 error -117 [ 63.184448][ T6310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.200471][ T6313] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 63.203575][ T6313] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.208363][ T6313] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.558: Block bitmap for bg 0 marked uninitialized [ 63.208401][ T6313] loop3: lost filesystem error report for type 5 error -117 [ 63.211505][ T6313] EXT4-fs (loop3): Remounting filesystem read-only [ 63.214550][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 63.214564][ C0] EXT4-fs (loop3): initial error at time 63: ext4_read_block_bitmap_nowait:521 [ 63.214583][ C0] EXT4-fs (loop3): last error at time 63: ext4_read_block_bitmap_nowait:521 [ 63.220514][ T6313] EXT4-fs (loop3): 1 orphan inode deleted [ 63.327115][ T6326] FAULT_INJECTION: forcing a failure. [ 63.327115][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 63.329794][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.0.562 Not tainted syzkaller #0 PREEMPT [ 63.329820][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.329828][ T6326] Call trace: [ 63.329832][ T6326] show_stack+0x2c/0x3c (C) [ 63.329855][ T6326] __dump_stack+0x30/0x40 [ 63.329870][ T6326] dump_stack_lvl+0xd8/0x12c [ 63.329882][ T6326] dump_stack+0x1c/0x28 [ 63.329894][ T6326] should_fail_ex+0x41c/0x590 [ 63.329906][ T6326] should_failslab+0xc4/0x120 [ 63.329920][ T6326] kmem_cache_alloc_noprof+0x94/0x5d4 [ 63.329933][ T6326] do_getname+0x48/0x234 [ 63.329942][ T6326] getname_flags+0x2c/0x3c [ 63.329950][ T6326] __arm64_sys_statx+0xd4/0x174 [ 63.329962][ T6326] invoke_syscall+0x98/0x244 [ 63.329974][ T6326] el0_svc_common+0xec/0x23c [ 63.329986][ T6326] do_el0_svc+0x4c/0x5c [ 63.329997][ T6326] el0_svc+0x64/0x260 [ 63.330008][ T6326] el0t_64_sync_handler+0x44/0x104 [ 63.330018][ T6326] el0t_64_sync+0x198/0x19c [ 63.542772][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 63.670901][ T6352] FAULT_INJECTION: forcing a failure. [ 63.670901][ T6352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.670941][ T6352] CPU: 0 UID: 0 PID: 6352 Comm: syz.0.573 Not tainted syzkaller #0 PREEMPT [ 63.670954][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.670961][ T6352] Call trace: [ 63.670965][ T6352] show_stack+0x2c/0x3c (C) [ 63.670986][ T6352] __dump_stack+0x30/0x40 [ 63.670999][ T6352] dump_stack_lvl+0xd8/0x12c [ 63.671011][ T6352] dump_stack+0x1c/0x28 [ 63.671022][ T6352] should_fail_ex+0x41c/0x590 [ 63.671036][ T6352] should_fail+0x14/0x24 [ 63.671047][ T6352] should_fail_usercopy+0x20/0x30 [ 63.671059][ T6352] _inline_copy_from_user+0x3c/0x188 [ 63.671070][ T6352] copy_clone_args_from_user+0x1c8/0x5d0 [ 63.671081][ T6352] __arm64_sys_clone3+0x150/0x390 [ 63.671090][ T6352] invoke_syscall+0x98/0x244 [ 63.671103][ T6352] el0_svc_common+0xec/0x23c [ 63.671114][ T6352] do_el0_svc+0x4c/0x5c [ 63.671126][ T6352] el0_svc+0x64/0x260 [ 63.671137][ T6352] el0t_64_sync_handler+0x44/0x104 [ 63.671147][ T6352] el0t_64_sync+0x198/0x19c [ 63.830995][ T6367] FAULT_INJECTION: forcing a failure. [ 63.830995][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 63.833678][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.3.580 Not tainted syzkaller #0 PREEMPT [ 63.833704][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.833711][ T6367] Call trace: [ 63.833716][ T6367] show_stack+0x2c/0x3c (C) [ 63.833740][ T6367] __dump_stack+0x30/0x40 [ 63.833754][ T6367] dump_stack_lvl+0xd8/0x12c [ 63.833767][ T6367] dump_stack+0x1c/0x28 [ 63.833779][ T6367] should_fail_ex+0x41c/0x590 [ 63.833792][ T6367] should_failslab+0xc4/0x120 [ 63.833806][ T6367] __kmalloc_noprof+0x108/0x6c8 [ 63.833815][ T6367] security_prepare_creds+0x60/0x35c [ 63.833826][ T6367] prepare_creds+0x500/0x7d0 [ 63.833838][ T6367] copy_creds+0xd8/0x7b0 [ 63.833850][ T6367] copy_process+0xb1c/0x332c [ 63.833859][ T6367] kernel_clone+0x234/0x9fc [ 63.833868][ T6367] __arm64_sys_clone3+0x35c/0x390 [ 63.833878][ T6367] invoke_syscall+0x98/0x244 [ 63.833890][ T6367] el0_svc_common+0xec/0x23c [ 63.833902][ T6367] do_el0_svc+0x4c/0x5c [ 63.833914][ T6367] el0_svc+0x64/0x260 [ 63.833924][ T6367] el0t_64_sync_handler+0x44/0x104 [ 63.833935][ T6367] el0t_64_sync+0x198/0x19c [ 63.908721][ T6375] EXT4-fs mount: 3 callbacks suppressed [ 63.908763][ T6375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.928856][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 63.928900][ T6379] netlink: 'syz.4.586': attribute type 20 has an invalid length. [ 63.928922][ T6379] netlink: 'syz.4.586': attribute type 21 has an invalid length. [ 63.950373][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.956205][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.956836][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.957075][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.957310][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.957528][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.957743][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.957963][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.958175][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 63.958415][ T4716] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.247093][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 64.297137][ T5708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.338776][ T6404] FAULT_INJECTION: forcing a failure. [ 64.338776][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 64.341349][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: syz.4.599 Not tainted syzkaller #0 PREEMPT [ 64.341373][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.341391][ T6404] Call trace: [ 64.341399][ T6404] show_stack+0x2c/0x3c (C) [ 64.341422][ T6404] __dump_stack+0x30/0x40 [ 64.341436][ T6404] dump_stack_lvl+0xd8/0x12c [ 64.341449][ T6404] dump_stack+0x1c/0x28 [ 64.341461][ T6404] should_fail_ex+0x41c/0x590 [ 64.341474][ T6404] should_failslab+0xc4/0x120 [ 64.341487][ T6404] kmem_cache_alloc_noprof+0x94/0x5d4 [ 64.341500][ T6404] prepare_creds+0x34/0x7d0 [ 64.341512][ T6404] cap_task_prctl+0x1e8/0x8a8 [ 64.341525][ T6404] security_task_prctl+0xe8/0x17c [ 64.341536][ T6404] __arm64_sys_prctl+0x13c/0x13d0 [ 64.341548][ T6404] invoke_syscall+0x98/0x244 [ 64.341560][ T6404] el0_svc_common+0xec/0x23c [ 64.341572][ T6404] do_el0_svc+0x4c/0x5c [ 64.341583][ T6404] el0_svc+0x64/0x260 [ 64.341593][ T6404] el0t_64_sync_handler+0x44/0x104 [ 64.341603][ T6404] el0t_64_sync+0x198/0x19c [ 64.359082][ T3477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.405208][ T3477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.418719][ T6408] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.441118][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 64.461523][ T3477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.486147][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486198][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.491570][ T24] cfg80211: failed to load regulatory.db [ 64.547086][ T3477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.679235][ T3477] bridge_slave_1: left allmulticast mode [ 64.679292][ T3477] bridge_slave_1: left promiscuous mode [ 64.679763][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.685527][ T3477] bridge_slave_0: left allmulticast mode [ 64.685559][ T3477] bridge_slave_0: left promiscuous mode [ 64.685640][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.759843][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.776048][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.825494][ T3477] bond0 (unregistering): Released all slaves [ 65.132001][ T3477] hsr_slave_0: left promiscuous mode [ 65.133104][ T3477] hsr_slave_1: left promiscuous mode [ 65.133673][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.133690][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.134914][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.134925][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.140328][ T3477] veth1_macvtap: left promiscuous mode [ 65.140360][ T3477] veth0_macvtap: left promiscuous mode [ 65.140408][ T3477] veth1_vlan: left promiscuous mode [ 65.140465][ T3477] veth0_vlan: left promiscuous mode [ 65.241335][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 65.250236][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 66.337518][ T6424] FAULT_INJECTION: forcing a failure. [ 66.337518][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 66.337554][ T6424] CPU: 1 UID: 0 PID: 6424 Comm: syz.0.609 Not tainted syzkaller #0 PREEMPT [ 66.337569][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.337576][ T6424] Call trace: [ 66.337579][ T6424] show_stack+0x2c/0x3c (C) [ 66.337600][ T6424] __dump_stack+0x30/0x40 [ 66.337616][ T6424] dump_stack_lvl+0xd8/0x12c [ 66.337628][ T6424] dump_stack+0x1c/0x28 [ 66.337639][ T6424] should_fail_ex+0x41c/0x590 [ 66.337652][ T6424] should_failslab+0xc4/0x120 [ 66.337666][ T6424] kmem_cache_alloc_noprof+0x94/0x5d4 [ 66.337680][ T6424] do_getname+0x48/0x234 [ 66.337689][ T6424] __arm64_sys_symlinkat+0x9c/0xdc [ 66.337700][ T6424] invoke_syscall+0x98/0x244 [ 66.337713][ T6424] el0_svc_common+0xec/0x23c [ 66.337724][ T6424] do_el0_svc+0x4c/0x5c [ 66.337736][ T6424] el0_svc+0x64/0x260 [ 66.337747][ T6424] el0t_64_sync_handler+0x44/0x104 [ 66.337757][ T6424] el0t_64_sync+0x198/0x19c [ 66.380515][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.395166][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.396265][ T4719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.396633][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.396853][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.484509][ T6449] FAULT_INJECTION: forcing a failure. [ 66.484509][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 66.484550][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz.1.614 Not tainted syzkaller #0 PREEMPT [ 66.484567][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.484575][ T6449] Call trace: [ 66.484579][ T6449] show_stack+0x2c/0x3c (C) [ 66.484601][ T6449] __dump_stack+0x30/0x40 [ 66.484614][ T6449] dump_stack_lvl+0xd8/0x12c [ 66.484626][ T6449] dump_stack+0x1c/0x28 [ 66.484637][ T6449] should_fail_ex+0x41c/0x590 [ 66.484650][ T6449] should_failslab+0xc4/0x120 [ 66.484663][ T6449] __kmalloc_cache_noprof+0x94/0x5fc [ 66.484673][ T6449] sget_fc+0x5f4/0x14e8 [ 66.484682][ T6449] vfs_get_super+0x40/0x148 [ 66.484691][ T6449] get_tree_nodev+0x2c/0x3c [ 66.484701][ T6449] mqueue_get_tree+0xac/0xe8 [ 66.484714][ T6449] vfs_get_tree+0x90/0x28c [ 66.484723][ T6449] fc_mount+0x24/0xac [ 66.484733][ T6449] fc_mount_longterm+0x20/0x74 [ 66.484743][ T6449] mq_init_ns+0x3c8/0x638 [ 66.484755][ T6449] copy_ipcs+0x3c8/0x63c [ 66.484767][ T6449] create_new_namespaces+0x1a8/0x50c [ 66.484778][ T6449] unshare_nsproxy_namespaces+0x120/0x170 [ 66.484789][ T6449] ksys_unshare+0x438/0x6cc [ 66.484799][ T6449] __arm64_sys_unshare+0x40/0x54 [ 66.484808][ T6449] invoke_syscall+0x98/0x244 [ 66.484820][ T6449] el0_svc_common+0xec/0x23c [ 66.484832][ T6449] do_el0_svc+0x4c/0x5c [ 66.484844][ T6449] el0_svc+0x64/0x260 [ 66.484855][ T6449] el0t_64_sync_handler+0x44/0x104 [ 66.484866][ T6449] el0t_64_sync+0x198/0x19c [ 66.618430][ T6461] set_capacity_and_notify: 2 callbacks suppressed [ 66.622984][ T6461] loop0: detected capacity change from 0 to 512 [ 66.647063][ T6461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.679489][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.684826][ T6474] FAULT_INJECTION: forcing a failure. [ 66.684826][ T6474] name failslab, interval 1, probability 0, space 0, times 0 [ 66.684863][ T6474] CPU: 1 UID: 0 PID: 6474 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT [ 66.684880][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.684887][ T6474] Call trace: [ 66.684891][ T6474] show_stack+0x2c/0x3c (C) [ 66.684911][ T6474] __dump_stack+0x30/0x40 [ 66.684924][ T6474] dump_stack_lvl+0xd8/0x12c [ 66.684936][ T6474] dump_stack+0x1c/0x28 [ 66.684947][ T6474] should_fail_ex+0x41c/0x590 [ 66.684960][ T6474] should_failslab+0xc4/0x120 [ 66.684973][ T6474] __kmalloc_noprof+0x108/0x6c8 [ 66.684982][ T6474] security_sk_alloc+0x60/0x35c [ 66.684994][ T6474] sk_prot_alloc+0xe0/0x1e8 [ 66.685007][ T6474] sk_alloc+0x44/0x3ac [ 66.685018][ T6474] __netlink_create+0x78/0x23c [ 66.685028][ T6474] netlink_create+0x3b4/0x6a0 [ 66.685038][ T6474] __sock_create+0x31c/0x670 [ 66.685047][ T6474] __sys_socket_create+0xc0/0x11c [ 66.685055][ T6474] __sys_socket+0x44/0xec [ 66.685064][ T6474] __arm64_sys_socket+0x84/0x9c [ 66.685073][ T6474] invoke_syscall+0x98/0x244 [ 66.685085][ T6474] el0_svc_common+0xec/0x23c [ 66.685097][ T6474] do_el0_svc+0x4c/0x5c [ 66.685108][ T6474] el0_svc+0x64/0x260 [ 66.685119][ T6474] el0t_64_sync_handler+0x44/0x104 [ 66.685129][ T6474] el0t_64_sync+0x198/0x19c [ 66.772620][ T6482] FAULT_INJECTION: forcing a failure. [ 66.772620][ T6482] name failslab, interval 1, probability 0, space 0, times 0 [ 66.772665][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.0.623 Not tainted syzkaller #0 PREEMPT [ 66.772680][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.772688][ T6482] Call trace: [ 66.772693][ T6482] show_stack+0x2c/0x3c (C) [ 66.772714][ T6482] __dump_stack+0x30/0x40 [ 66.772729][ T6482] dump_stack_lvl+0xd8/0x12c [ 66.772741][ T6482] dump_stack+0x1c/0x28 [ 66.772752][ T6482] should_fail_ex+0x41c/0x590 [ 66.772765][ T6482] should_failslab+0xc4/0x120 [ 66.772778][ T6482] kmem_cache_alloc_noprof+0x94/0x5d4 [ 66.772792][ T6482] do_getname+0x48/0x234 [ 66.772801][ T6482] getname_flags+0x2c/0x3c [ 66.772809][ T6482] do_sys_openat2+0xd0/0x1e8 [ 66.772820][ T6482] do_sys_open+0xb0/0xe0 [ 66.772831][ T6482] __arm64_sys_openat+0xa8/0xc4 [ 66.772843][ T6482] invoke_syscall+0x98/0x244 [ 66.772855][ T6482] el0_svc_common+0xec/0x23c [ 66.772867][ T6482] do_el0_svc+0x4c/0x5c [ 66.772878][ T6482] el0_svc+0x64/0x260 [ 66.772889][ T6482] el0t_64_sync_handler+0x44/0x104 [ 66.772899][ T6482] el0t_64_sync+0x198/0x19c [ 66.927788][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.927875][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.927959][ T6432] bridge_slave_0: entered allmulticast mode [ 66.929532][ T6432] bridge_slave_0: entered promiscuous mode [ 66.930475][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.930932][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.930991][ T6432] bridge_slave_1: entered allmulticast mode [ 66.933159][ T6432] bridge_slave_1: entered promiscuous mode [ 66.977367][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.008393][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.073171][ T6432] team0: Port device team_slave_0 added [ 67.073934][ T6432] team0: Port device team_slave_1 added [ 67.107225][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.107971][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.107998][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.109765][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.109776][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.109788][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.146358][ T6432] hsr_slave_0: entered promiscuous mode [ 67.146705][ T6432] hsr_slave_1: entered promiscuous mode [ 67.213860][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 67.239863][ T6543] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 67.360954][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 67.366099][ T6432] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.369991][ T6562] FAULT_INJECTION: forcing a failure. [ 67.369991][ T6562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.370029][ T6562] CPU: 1 UID: 0 PID: 6562 Comm: syz.0.647 Not tainted syzkaller #0 PREEMPT [ 67.370047][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.370054][ T6562] Call trace: [ 67.370058][ T6562] show_stack+0x2c/0x3c (C) [ 67.370079][ T6562] __dump_stack+0x30/0x40 [ 67.370094][ T6562] dump_stack_lvl+0xd8/0x12c [ 67.370106][ T6562] dump_stack+0x1c/0x28 [ 67.370117][ T6562] should_fail_ex+0x41c/0x590 [ 67.370130][ T6562] should_fail+0x14/0x24 [ 67.370141][ T6562] should_fail_usercopy+0x20/0x30 [ 67.370153][ T6562] _inline_copy_from_user+0x3c/0x174 [ 67.370166][ T6562] do_seccomp+0x2f8/0xbfc [ 67.370176][ T6562] __arm64_sys_seccomp+0x84/0x98 [ 67.370187][ T6562] invoke_syscall+0x98/0x244 [ 67.370199][ T6562] el0_svc_common+0xec/0x23c [ 67.370211][ T6562] do_el0_svc+0x4c/0x5c [ 67.370222][ T6562] el0_svc+0x64/0x260 [ 67.370233][ T6562] el0t_64_sync_handler+0x44/0x104 [ 67.370243][ T6562] el0t_64_sync+0x198/0x19c [ 67.412767][ T6432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.413132][ T6432] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.415006][ T6432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.415305][ T6432] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.417803][ T6432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.418105][ T6432] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.420029][ T6432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.477086][ T6566] syzkaller1: entered promiscuous mode [ 67.477125][ T6566] syzkaller1: entered allmulticast mode [ 67.497921][ T6575] loop4: detected capacity change from 0 to 128 [ 67.498418][ T6575] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.506250][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.506304][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.506386][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.506415][ T6432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.509337][ T6575] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.561780][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.578563][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.583706][ T6432] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.604406][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.606917][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.665854][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.665920][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.666247][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.666274][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.688138][ T6432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.688177][ T6432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.879547][ T4796] kernel read not supported for file /tomoyo/domain_policy (pid: 4796 comm: kworker/1:4) [ 67.919261][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.040545][ T6624] loop0: detected capacity change from 0 to 512 [ 68.053749][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.055965][ T6624] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.079268][ T6624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.159182][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.261959][ T6659] loop4: detected capacity change from 0 to 512 [ 68.271790][ T6432] veth0_vlan: entered promiscuous mode [ 68.279485][ T6432] veth1_vlan: entered promiscuous mode [ 68.291527][ T6432] veth0_macvtap: entered promiscuous mode [ 68.300598][ T6432] veth1_macvtap: entered promiscuous mode [ 68.301945][ T6659] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.668: corrupted in-inode xattr: invalid ea_ino [ 68.301988][ T6659] fserror_report: 3 callbacks suppressed [ 68.302004][ T6659] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.304644][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 68.304660][ C1] EXT4-fs (loop4): initial error at time 68: ext4_iget_extra_inode:5210: inode 15 [ 68.304678][ C1] EXT4-fs (loop4): last error at time 68: ext4_iget_extra_inode:5210: inode 15 [ 68.304746][ T6659] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.668: couldn't read orphan inode 15 (err -117) [ 68.305040][ T6659] loop4: lost filesystem error report for type 5 error -117 [ 68.314710][ T6659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.323293][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.328946][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.333207][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.365566][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.371273][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 68.413136][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.429544][ T3894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.429576][ T3894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.435959][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.436976][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.474295][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.474324][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.477256][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 68.494109][ T50] Bluetooth: hci3: command tx timeout [ 68.506590][ T6675] loop2: detected capacity change from 0 to 512 [ 68.510507][ T6675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.519760][ T6675] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 1803188595: comm syz.2.674: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 68.519807][ T6675] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.520177][ T6675] EXT4-fs (loop2): Remounting filesystem read-only [ 68.520454][ T6675] EXT4-fs (loop2): mount failed [ 68.643861][ T6683] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.643908][ T6683] vhci_hcd vhci_hcd.2: invalid port number 96 [ 68.643921][ T6683] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 68.837707][ T6719] loop5: detected capacity change from 0 to 256 [ 68.929288][ T6728] vcan0: tx address claim with broadcast sa [ 68.948232][ T6732] loop4: detected capacity change from 0 to 512 [ 68.957061][ T6732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.690: missing EA_INODE flag [ 68.957099][ T6732] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 68.957667][ T6732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.690: error while reading EA inode 12 err=-117 [ 68.957687][ T6732] loop4: lost filesystem error report for type 5 error -117 [ 68.960818][ T6732] EXT4-fs (loop4): 1 orphan inode deleted [ 68.967978][ T6732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.010993][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.017850][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 69.124139][ T50] Bluetooth: hci0: command 0x1407 tx timeout [ 69.124226][ T4719] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 69.388804][ T6775] loop2: detected capacity change from 0 to 512 [ 69.397284][ T6775] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.708: inode has both inline data and extents flags [ 69.399835][ T6775] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.400196][ T6775] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.708: couldn't read orphan inode 15 (err -117) [ 69.404000][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 69.404027][ C1] EXT4-fs (loop2): initial error at time 69: ext4_orphan_get:1403: inode 15 [ 69.404063][ C1] EXT4-fs (loop2): last error at time 69: ext4_orphan_get:1403: inode 15 [ 69.408657][ T6775] loop2: lost filesystem error report for type 5 error -117 [ 69.409331][ T6775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.427313][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.598742][ T6795] loop0: detected capacity change from 0 to 1024 [ 69.599099][ T6795] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.599114][ T6795] EXT4-fs: Ignoring removed oldalloc option [ 69.616212][ T6795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.625832][ T6795] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.717: bg 0: block 112: padding at end of block bitmap is not set [ 69.628844][ T6795] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.717: lblock 0 mapped to illegal pblock 0 (length 1) [ 69.630073][ T6795] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.717: lblock 0 mapped to illegal pblock 0 (length 1) [ 69.631367][ T6795] EXT4-fs error (device loop0) in ext4_setattr:6247: Corrupt filesystem [ 69.659622][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.849645][ T6806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.720'. [ 70.261945][ T6844] loop2: detected capacity change from 0 to 1024 [ 70.276860][ T6844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.307028][ T6844] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 70.323484][ T6844] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.332052][ T6844] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 70.347752][ T6844] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.347752][ T6844] [ 70.347803][ T6844] EXT4-fs (loop2): Total free blocks count 0 [ 70.347820][ T6844] EXT4-fs (loop2): Free/Dirty block details [ 70.347838][ T6844] EXT4-fs (loop2): free_blocks=20480 [ 70.347853][ T6844] EXT4-fs (loop2): dirty_blocks=80 [ 70.347866][ T6844] EXT4-fs (loop2): Block reservation details [ 70.347878][ T6844] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 70.358138][ T6846] syzkaller1: entered promiscuous mode [ 70.358168][ T6846] syzkaller1: entered allmulticast mode [ 70.409550][ T14] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 70.506059][ T6858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.516447][ T6858] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 2: comm syz.4.740: invalid block [ 70.516483][ T6858] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.524011][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 70.524038][ C0] EXT4-fs (loop4): initial error at time 70: __ext4_iget:5592: inode 11: block 2 [ 70.524090][ C0] EXT4-fs (loop4): last error at time 70: __ext4_iget:5592: inode 11: block 2 [ 70.546169][ T6858] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.740: couldn't read orphan inode 11 (err -117) [ 70.546805][ T6858] loop4: lost filesystem error report for type 5 error -117 [ 70.552523][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.574196][ T4719] Bluetooth: hci3: command tx timeout [ 70.730165][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.749792][ T6874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.779390][ T6874] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.748: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.802642][ T6874] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 70.809167][ T6874] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.809167][ T6874] [ 70.864544][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.955430][ T6903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.956677][ T6903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.963555][ T6903] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 71.035642][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.765'. [ 71.062499][ T6920] xt_hashlimit: size too large, truncated to 1048576 [ 71.179805][ T6930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 71.248277][ T6432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 71.289199][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 71.289238][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 71.329151][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 71.329194][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 71.417628][ T6947] Soft offlining pfn 0x15b726 at process virtual address 0x20000000 [ 71.429218][ T6947] Soft offline: 0x15b726: page migration failed 1, type 0x5ffc0000002181c(referenced|uptodate|dirty|owner_2|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 71.497983][ T6952] netlink: 52 bytes leftover after parsing attributes in process `syz.1.781'. [ 71.548221][ T6959] FAT-fs (loop4): unable to read block(809802661888) for building NFS inode [ 71.802707][ T6992] syzkaller1: entered promiscuous mode [ 71.802747][ T6992] syzkaller1: entered allmulticast mode [ 72.001662][ T7011] netlink: 136 bytes leftover after parsing attributes in process `syz.0.808'. [ 72.005939][ T7011] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 72.087779][ T7018] block nbd1: server does not support multiple connections per device. [ 72.089428][ T7017] block nbd1: shutting down sockets [ 72.127648][ T7020] FAULT_INJECTION: forcing a failure. [ 72.127648][ T7020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.130860][ T7020] CPU: 0 UID: 0 PID: 7020 Comm: syz.1.812 Not tainted syzkaller #0 PREEMPT [ 72.130884][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.130894][ T7020] Call trace: [ 72.130898][ T7020] show_stack+0x2c/0x3c (C) [ 72.130920][ T7020] __dump_stack+0x30/0x40 [ 72.130933][ T7020] dump_stack_lvl+0xd8/0x12c [ 72.130947][ T7020] dump_stack+0x1c/0x28 [ 72.130959][ T7020] should_fail_ex+0x41c/0x590 [ 72.130972][ T7020] should_fail+0x14/0x24 [ 72.130983][ T7020] should_fail_usercopy+0x20/0x30 [ 72.130995][ T7020] _inline_copy_from_user+0x3c/0x174 [ 72.131009][ T7020] kstrtouint_from_user+0xcc/0x174 [ 72.131022][ T7020] proc_fail_nth_write+0x9c/0x234 [ 72.131032][ T7020] vfs_write+0x2a4/0xa0c [ 72.131045][ T7020] ksys_pwrite64+0x118/0x1ac [ 72.131057][ T7020] __arm64_sys_pwrite64+0xa8/0xc0 [ 72.131070][ T7020] invoke_syscall+0x98/0x244 [ 72.131082][ T7020] el0_svc_common+0xec/0x23c [ 72.131093][ T7020] do_el0_svc+0x4c/0x5c [ 72.131105][ T7020] el0_svc+0x64/0x260 [ 72.131115][ T7020] el0t_64_sync_handler+0x44/0x104 [ 72.131126][ T7020] el0t_64_sync+0x198/0x19c [ 72.318281][ T7028] set_capacity_and_notify: 5 callbacks suppressed [ 72.324063][ T7028] loop1: detected capacity change from 0 to 128 [ 72.336344][ T7028] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.353915][ T7028] fscrypt (loop1, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 72.370448][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.644304][ T4719] Bluetooth: hci3: command tx timeout [ 72.698016][ T7058] loop4: detected capacity change from 0 to 4096 [ 72.709424][ T7058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.748808][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.791047][ T7061] ip_tables: iptables: counters copy to user failed while replacing table [ 72.798686][ T7061] tipc: Started in network mode [ 72.798726][ T7061] tipc: Node identity ac141441, cluster identity 4711 [ 72.807625][ T7061] tipc: Enabled bearer , priority 10 [ 73.057987][ T7082] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 73.062051][ T7082] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 73.111166][ T7088] loop5: detected capacity change from 0 to 512 [ 73.138410][ T7088] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 73.151780][ T7088] EXT4-fs (loop5): 1 truncate cleaned up [ 73.153373][ T7088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.182688][ T7088] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 73.187934][ T7088] EXT4-fs (loop5): Remounting filesystem read-only [ 73.220221][ T6432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.236294][ T7102] overlay: filesystem on ./file0 is read-only [ 73.270930][ T7106] 0x000000000000-0x00000000004f : "" [ 73.286594][ T7106] ftl_cs: FTL header corrupt! [ 73.333818][ T7113] ip_tables: iptables: counters copy to user failed while replacing table [ 73.452744][ T7127] use of bytesused == 0 is deprecated and will be removed in the future, [ 73.452774][ T7127] use the actual size instead. [ 73.472616][ T7130] loop4: detected capacity change from 0 to 128 [ 73.485479][ T7134] netlink: 56 bytes leftover after parsing attributes in process `syz.2.864'. [ 73.505631][ T7130] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 73.559222][ T4718] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.711743][ T7160] loop1: detected capacity change from 0 to 1024 [ 73.717002][ T7160] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.739262][ T7160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.752974][ T7160] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.875: bg 0: block 112: padding at end of block bitmap is not set [ 73.782421][ T7166] loop5: detected capacity change from 0 to 512 [ 73.784953][ T7160] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.875: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.787906][ T7160] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.875: lblock 0 mapped to illegal pblock 0 (length 1) [ 73.805687][ T7159] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.875: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 73.805742][ T7159] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.813633][ T7159] EXT4-fs error (device loop1): ext4_evict_inode:280: comm syz.1.875: couldn't truncate inode 15 (err -117) [ 73.838989][ T7166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.860962][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.925255][ T4796] tipc: Node number set to 2886997057 [ 73.927139][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 73.931159][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 73.939531][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 73.940031][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 73.940262][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 73.941798][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 73.942074][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 73.942849][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 73.943073][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 73.943283][ T6432] EXT4-fs error (device loop5): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 74.069364][ T7189] [ 74.076043][ T7187] loop1: detected capacity change from 0 to 128 [ 74.173039][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 74.175628][ T7205] block nbd0: Unsupported socket: should be TCP or UNIX. [ 74.287111][ T6432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.350739][ T7224] loop2: detected capacity change from 0 to 512 [ 74.358638][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.367205][ T7224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.383956][ T7224] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 74.387848][ T7224] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 128 (only 1 groups) [ 74.398858][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.448446][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.462143][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.464858][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.466941][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.468886][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.470533][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.512502][ T7240] loop2: detected capacity change from 0 to 1024 [ 74.535651][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.561481][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.563617][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.595048][ T7248] loop2: detected capacity change from 0 to 512 [ 74.599902][ T7248] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.604964][ T7248] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.912: bad orphan inode 131083 [ 74.608182][ T7248] loop2: lost filesystem error report for type 5 error -117 [ 74.608962][ T7248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.626404][ T7248] EXT4-fs (loop2): shut down requested (2) [ 74.630912][ T7248] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #2: comm syz.2.912: directory missing '.' [ 74.654470][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.662966][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.823543][ T58] bridge_slave_1: left allmulticast mode [ 74.823582][ T58] bridge_slave_1: left promiscuous mode [ 74.823666][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.830390][ T58] bridge_slave_0: left allmulticast mode [ 74.830531][ T58] bridge_slave_0: left promiscuous mode [ 74.830627][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.911405][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.935382][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.945520][ T58] bond0 (unregistering): Released all slaves [ 75.027010][ T58] tipc: Disabling bearer [ 75.027210][ T58] tipc: Left network mode [ 75.054794][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.054879][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.054940][ T7233] bridge_slave_0: entered allmulticast mode [ 75.055360][ T7233] bridge_slave_0: entered promiscuous mode [ 75.056303][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.056351][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.056408][ T7233] bridge_slave_1: entered allmulticast mode [ 75.056900][ T7233] bridge_slave_1: entered promiscuous mode [ 75.085421][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.086395][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.094731][ T7233] team0: Port device team_slave_0 added [ 75.095641][ T7233] team0: Port device team_slave_1 added [ 75.101984][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.102018][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.102030][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.102578][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.102586][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.102602][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.115289][ T7233] hsr_slave_0: entered promiscuous mode [ 75.115691][ T7233] hsr_slave_1: entered promiscuous mode [ 75.115893][ T7233] debugfs: 'hsr0' already exists in 'hsr' [ 75.115904][ T7233] Cannot create hsr debugfs directory [ 75.235834][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 75.237470][ T7233] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 75.238894][ T7233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.239209][ T7233] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 75.240088][ T7233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.240384][ T7233] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 75.241446][ T7233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.241750][ T7233] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 75.243083][ T7233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.290138][ T58] hsr_slave_0: left promiscuous mode [ 75.291364][ T58] hsr_slave_1: left promiscuous mode [ 75.291635][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.291646][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.292774][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.292786][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.298915][ T58] veth1_macvtap: left promiscuous mode [ 75.298958][ T58] veth0_macvtap: left promiscuous mode [ 75.299018][ T58] veth1_vlan: left promiscuous mode [ 75.299054][ T58] veth0_vlan: left promiscuous mode [ 75.481501][ T58] team0 (unregistering): Port device team_slave_1 removed [ 75.493747][ T58] team0 (unregistering): Port device team_slave_0 removed [ 75.508747][ T7311] FAULT_INJECTION: forcing a failure. [ 75.508747][ T7311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.511530][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.0.924 Not tainted syzkaller #0 PREEMPT [ 75.511561][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.511571][ T7311] Call trace: [ 75.511577][ T7311] show_stack+0x2c/0x3c (C) [ 75.511603][ T7311] __dump_stack+0x30/0x40 [ 75.511619][ T7311] dump_stack_lvl+0xd8/0x12c [ 75.511631][ T7311] dump_stack+0x1c/0x28 [ 75.511643][ T7311] should_fail_ex+0x41c/0x590 [ 75.511656][ T7311] should_fail+0x14/0x24 [ 75.511668][ T7311] should_fail_usercopy+0x20/0x30 [ 75.511680][ T7311] put_timespec64+0xc8/0x208 [ 75.511692][ T7311] poll_select_finish+0x370/0x644 [ 75.511701][ T7311] __arm64_sys_pselect6+0x304/0x39c [ 75.511709][ T7311] invoke_syscall+0x98/0x244 [ 75.511722][ T7311] el0_svc_common+0xec/0x23c [ 75.511734][ T7311] do_el0_svc+0x4c/0x5c [ 75.511745][ T7311] el0_svc+0x64/0x260 [ 75.511756][ T7311] el0t_64_sync_handler+0x44/0x104 [ 75.511767][ T7311] el0t_64_sync+0x198/0x19c [ 75.617771][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.629395][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.633213][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.633247][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.638654][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.638721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.653927][ T7233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.853336][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 76.059803][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.094959][ T7363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.133559][ T7363] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.933: corrupted inode contents [ 76.141968][ T7363] EXT4-fs error (device loop0): ext4_dirty_inode:6731: inode #15: comm syz.0.933: mark_inode_dirty error [ 76.145093][ T7363] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.933: corrupted inode contents [ 76.148121][ T7363] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.933: mark_inode_dirty error [ 76.151165][ T7363] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.933: corrupted inode contents [ 76.153867][ T7363] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.933: mark_inode_dirty error [ 76.157602][ T7363] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.933: corrupted inode contents [ 76.163057][ T7363] EXT4-fs error (device loop0): ext4_truncate:4721: inode #15: comm syz.0.933: mark_inode_dirty error [ 76.167024][ T7363] EXT4-fs error (device loop0) in ext4_setattr:6247: Corrupt filesystem [ 76.179435][ T7378] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.933: corrupted inode contents [ 76.211695][ T4717] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.212782][ T4717] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.220899][ T4717] EXT4-fs warning (device loop0): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 76.225005][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.226409][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 76.242813][ T7233] veth0_vlan: entered promiscuous mode [ 76.251393][ T7233] veth1_vlan: entered promiscuous mode [ 76.266619][ T7233] veth0_macvtap: entered promiscuous mode [ 76.271603][ T7233] veth1_macvtap: entered promiscuous mode [ 76.281511][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.286821][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.321166][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.321198][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.331661][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.331688][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.334802][ T3477] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.335316][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.335344][ T14] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.335360][ T14] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.484035][ T4719] Bluetooth: hci3: command tx timeout [ 78.564062][ T4719] Bluetooth: hci3: command tx timeout [ 80.644091][ T4719] Bluetooth: hci3: command tx timeout [ 81.387890][ T7401] set_capacity_and_notify: 2 callbacks suppressed [ 81.387935][ T7401] loop0: detected capacity change from 0 to 1024 [ 81.391844][ T7401] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.416527][ T7401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.447449][ T7401] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.939: bg 0: block 112: padding at end of block bitmap is not set [ 81.455573][ T7410] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 81.465222][ T7410] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 81.484375][ T7401] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.939: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.487013][ T7401] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.939: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.493193][ T7400] EXT4-fs error (device loop0): ext4_ext_remove_space:2977: inode #15: comm syz.0.939: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 81.493247][ T7400] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.497484][ T7400] EXT4-fs error (device loop0): ext4_evict_inode:280: comm syz.0.939: couldn't truncate inode 15 (err -117) [ 81.527756][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.621475][ T4345] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 81.626810][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 81.692086][ T7438] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 82.627293][ T7462] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 82.629862][ T7462] CPU: 1 UID: 0 PID: 7462 Comm: syz.1.967 Not tainted syzkaller #0 PREEMPT [ 82.629887][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.629898][ T7462] Call trace: [ 82.629904][ T7462] show_stack+0x2c/0x3c (C) [ 82.629934][ T7462] __dump_stack+0x30/0x40 [ 82.629952][ T7462] dump_stack_lvl+0xd8/0x12c [ 82.629969][ T7462] dump_stack+0x1c/0x28 [ 82.629985][ T7462] sysfs_warn_dup+0x9c/0xb8 [ 82.630003][ T7462] sysfs_create_dir_ns+0x190/0x1f4 [ 82.630020][ T7462] kobject_add_internal+0x290/0x6f0 [ 82.630037][ T7462] kobject_add_varg+0x9c/0xe8 [ 82.630053][ T7462] kobject_add+0x110/0x1c8 [ 82.630069][ T7462] device_add+0x394/0x9e0 [ 82.630083][ T7462] device_register+0x28/0x38 [ 82.630096][ T7462] tty_register_device_attr+0x31c/0x5e8 [ 82.630111][ T7462] tty_register_device+0x3c/0x50 [ 82.630125][ T7462] gsm_activate_mux+0xdc/0x284 [ 82.630141][ T7462] gsmld_ioctl+0xea8/0x1414 [ 82.630155][ T7462] tty_ioctl+0x8a8/0xcb0 [ 82.630168][ T7462] __arm64_sys_ioctl+0x154/0x1cc [ 82.630186][ T7462] invoke_syscall+0x98/0x244 [ 82.630203][ T7462] el0_svc_common+0x19c/0x23c [ 82.630219][ T7462] do_el0_svc+0x4c/0x5c [ 82.630235][ T7462] el0_svc+0x64/0x260 [ 82.630250][ T7462] el0t_64_sync_handler+0x44/0x104 [ 82.630270][ T7462] el0t_64_sync+0x198/0x19c [ 82.660924][ T7462] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.675242][ T7460] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 82.681051][ T7460] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 82.736685][ T4719] Bluetooth: hci3: command tx timeout [ 82.873630][ T7467] loop6: detected capacity change from 0 to 1024 [ 82.876459][ T7467] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.991082][ T7479] netlink: 156 bytes leftover after parsing attributes in process `syz.0.961'. [ 83.010031][ T7467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.081106][ T7467] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.958: bg 0: block 112: padding at end of block bitmap is not set [ 83.132063][ T7467] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.958: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.135140][ T7467] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #15: comm syz.6.958: lblock 0 mapped to illegal pblock 0 (length 1) [ 83.158784][ T7466] EXT4-fs error (device loop6): ext4_ext_remove_space:2977: inode #15: comm syz.6.958: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 83.158892][ T7466] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.159478][ T7466] EXT4-fs error (device loop6): ext4_evict_inode:280: comm syz.6.958: couldn't truncate inode 15 (err -117) [ 83.268462][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.642100][ T7501] loop6: detected capacity change from 0 to 1024 [ 83.697126][ T7501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.831308][ T7507] loop4: detected capacity change from 0 to 256 [ 83.927538][ T7233] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /11/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 83.934191][ T7233] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /11/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 83.938540][ T7233] EXT4-fs error (device loop6): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 83.942217][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 83.942725][ T7233] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /11/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 83.948204][ T7233] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /11/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 83.949525][ T7233] EXT4-fs error (device loop6): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 83.950084][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 83.950522][ T7233] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /11/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 83.956225][ T7233] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /11/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 83.958245][ T7233] EXT4-fs error (device loop6): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 83.964114][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 83.964569][ T7233] EXT4-fs error (device loop6): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /11/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 83.970147][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 83.972583][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 83.989399][ T30] audit: type=1400 audit(83.980:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7508 comm="syz.0.973" saddr=63.255.255.255 src=20001 daddr=172.20.20.170 [ 83.991907][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 83.994828][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 84.002702][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 84.007578][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 84.023507][ T7233] EXT4-fs warning (device loop6): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 84.646694][ T7517] loop4: detected capacity change from 0 to 1024 [ 84.647706][ T7517] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.781270][ T7517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.786724][ T7521] loop0: detected capacity change from 0 to 128 [ 84.812138][ T7517] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.977: bg 0: block 112: padding at end of block bitmap is not set [ 84.837639][ T7521] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.860898][ T7517] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.977: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.871462][ T7517] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: comm syz.4.977: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.888500][ T7515] EXT4-fs error (device loop4): ext4_ext_remove_space:2977: inode #15: comm syz.4.977: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 84.888592][ T7515] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.903291][ T7515] EXT4-fs error (device loop4): ext4_evict_inode:280: comm syz.4.977: couldn't truncate inode 15 (err -117) [ 84.997562][ T7521] EXT4-fs error (device loop0): dx_make_map:1296: inode #2: block 34: comm syz.0.978: bad entry in directory: inode out of bounds - offset=988, inode=130816, rec_len=36, size=1024 fake=1 [ 85.002949][ T7521] EXT4-fs error (device loop0) in do_split:2029: Corrupt filesystem [ 85.029117][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.246170][ T4717] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.558135][ T7233] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.693231][ T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.781582][ T7545] loop0: detected capacity change from 0 to 512 [ 85.821813][ T7545] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 85.865900][ T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.922398][ T7545] Bluetooth: MGMT ver 1.23 [ 85.928532][ T7545] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 86.062304][ T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.227068][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.451565][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.455784][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.459564][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.463186][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.466719][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.469870][ T14] bridge_slave_1: left allmulticast mode [ 86.469933][ T14] bridge_slave_1: left promiscuous mode [ 86.470132][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.533383][ T14] bridge_slave_0: left allmulticast mode [ 86.533451][ T14] bridge_slave_0: left promiscuous mode [ 86.533693][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.125377][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.162402][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.187392][ T14] bond0 (unregistering): Released all slaves [ 87.234517][ T3623] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.234799][ T3623] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.234920][ T3623] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.235010][ T3477] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.257587][ T7586] loop4: detected capacity change from 0 to 128 [ 87.321518][ T7586] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.579507][ T7586] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.816922][ T7609] loop4: detected capacity change from 0 to 512 [ 87.825509][ T7609] EXT4-fs (loop4): Test dummy encryption mode enabled [ 87.836851][ T7609] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.998: inode has both inline data and extents flags [ 87.839903][ T7609] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.840452][ T7609] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.998: couldn't read orphan inode 15 (err -117) [ 87.845125][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 87.845140][ C0] EXT4-fs (loop4): initial error at time 87: ext4_orphan_get:1403: inode 15 [ 87.845168][ C0] EXT4-fs (loop4): last error at time 87: ext4_orphan_get:1403: inode 15 [ 87.859991][ T7609] loop4: lost filesystem error report for type 5 error -117 [ 87.873201][ T7609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.112941][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.172706][ T14] hsr_slave_0: left promiscuous mode [ 88.181068][ T14] hsr_slave_1: left promiscuous mode [ 88.188228][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.191116][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.194763][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.197594][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.234892][ T14] veth1_macvtap: left promiscuous mode [ 88.234985][ T14] veth0_macvtap: left promiscuous mode [ 88.235245][ T14] veth1_vlan: left promiscuous mode [ 88.235362][ T14] veth0_vlan: left promiscuous mode [ 88.484896][ T4719] Bluetooth: hci3: command tx timeout [ 88.678596][ T7633] loop4: detected capacity change from 0 to 2048 [ 88.680735][ T7633] EXT4-fs: Ignoring removed i_version option [ 88.731960][ T7633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.890427][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.996263][ T7644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 89.126841][ T14] team0 (unregistering): Port device team_slave_1 removed [ 89.167197][ T14] team0 (unregistering): Port device team_slave_0 removed [ 90.400578][ T7683] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 90.565239][ T4719] Bluetooth: hci3: command tx timeout [ 91.025483][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.030395][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.033359][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.037337][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.043643][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.097514][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.097723][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.097935][ T7555] bridge_slave_0: entered allmulticast mode [ 91.100239][ T7555] bridge_slave_0: entered promiscuous mode [ 91.111132][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.113910][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.118145][ T7555] bridge_slave_1: entered allmulticast mode [ 91.164116][ T7555] bridge_slave_1: entered promiscuous mode [ 91.191218][ T7711] loop4: detected capacity change from 0 to 512 [ 91.292887][ T7711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.416094][ T7555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.429137][ T7555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.523760][ T7555] team0: Port device team_slave_0 added [ 91.530338][ T7555] team0: Port device team_slave_1 added [ 91.575218][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.575280][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.575302][ T7555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.580465][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.580479][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.580496][ T7555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.659699][ T7555] hsr_slave_0: entered promiscuous mode [ 91.660905][ T7555] hsr_slave_1: entered promiscuous mode [ 91.866009][ T7555] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 91.870414][ T7555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.872187][ T7555] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 91.876584][ T7555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.877406][ T7555] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 91.881448][ T7555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.883109][ T7555] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 91.887592][ T7555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.962245][ T7555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.980822][ T7555] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.990243][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.990339][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.998261][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.998344][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.646109][ T50] Bluetooth: hci3: command tx timeout [ 93.124148][ T50] Bluetooth: hci5: command tx timeout [ 93.364326][ T7590] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 94.726362][ T50] Bluetooth: hci3: command tx timeout [ 95.215297][ T50] Bluetooth: hci5: command tx timeout [ 96.395279][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.899193][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 97.267300][ T7555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.284442][ T50] Bluetooth: hci5: command tx timeout [ 97.497404][ T7769] loop4: detected capacity change from 0 to 512 [ 97.592639][ T7769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.838913][ T4718] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 97.839139][ T4718] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 97.872632][ T7703] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.912394][ T7703] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.912641][ T7703] bridge_slave_0: entered allmulticast mode [ 97.918753][ T7703] bridge_slave_0: entered promiscuous mode [ 97.955795][ T7703] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.955894][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.956133][ T7703] bridge_slave_1: entered allmulticast mode [ 97.958407][ T7703] bridge_slave_1: entered promiscuous mode [ 98.024853][ T7703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.045667][ T7703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.179715][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 98.199425][ T7703] team0: Port device team_slave_0 added [ 98.207077][ T7703] team0: Port device team_slave_1 added [ 98.241152][ T7555] veth0_vlan: entered promiscuous mode [ 98.247814][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.247863][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.247910][ T7703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.250777][ T7703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.250806][ T7703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.250857][ T7703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.265821][ T7555] veth1_vlan: entered promiscuous mode [ 98.311715][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.326331][ T7796] ima: policy update failed [ 98.327420][ T30] audit: type=1802 audit(98.320:5): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.1034" res=0 errno=0 [ 98.443372][ T3623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.511317][ T7555] veth0_macvtap: entered promiscuous mode [ 98.527911][ T7555] veth1_macvtap: entered promiscuous mode [ 98.585874][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.609788][ T3623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.655465][ T7703] hsr_slave_0: entered promiscuous mode [ 98.656592][ T7703] hsr_slave_1: entered promiscuous mode [ 98.668082][ T7703] debugfs: 'hsr0' already exists in 'hsr' [ 98.668172][ T7703] Cannot create hsr debugfs directory [ 98.672935][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.760727][ T3623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.949545][ T3623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.995817][ T3894] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.996798][ T3894] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.996848][ T3894] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.996891][ T3894] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.151679][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.151732][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.172974][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.179099][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.181262][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.191502][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.197737][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.370655][ T50] Bluetooth: hci5: command tx timeout [ 99.373510][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 99.485488][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.485543][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.588176][ T3623] bridge_slave_1: left allmulticast mode [ 99.588239][ T3623] bridge_slave_1: left promiscuous mode [ 99.588414][ T3623] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.597408][ T3623] bridge_slave_0: left allmulticast mode [ 99.597470][ T3623] bridge_slave_0: left promiscuous mode [ 99.597629][ T3623] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.622763][ T3623] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 99.799792][ T3623] batman_adv: batadv0: Removing interface: ip6gretap1 [ 100.084933][ T3623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.131306][ T3623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.147894][ T3623] bond0 (unregistering): Released all slaves [ 100.296979][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 100.451885][ T4719] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 100.697553][ T7703] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 100.708027][ T7703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.708807][ T7703] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 100.739733][ T7703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.849702][ T7864] loop7: detected capacity change from 0 to 256 [ 100.871444][ T7864] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.896910][ T7703] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 100.925206][ T7861] loop0: detected capacity change from 0 to 8192 [ 100.928924][ T7703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.929861][ T7861] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.933572][ T7703] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 100.940399][ T7703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.013760][ T7868] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 101.013829][ T7868] FAT-fs (loop7): Filesystem has been set read-only [ 101.014354][ T7868] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 101.014430][ T7868] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 101.105623][ T3623] hsr_slave_0: left promiscuous mode [ 101.110277][ T3623] hsr_slave_1: left promiscuous mode [ 101.118394][ T3623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.118456][ T3623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.197159][ T3623] veth1_macvtap: left promiscuous mode [ 101.197268][ T3623] veth0_macvtap: left promiscuous mode [ 101.197470][ T3623] veth1_vlan: left promiscuous mode [ 101.197569][ T3623] veth0_vlan: left promiscuous mode [ 101.286249][ T4719] Bluetooth: hci4: command tx timeout [ 101.787564][ T3623] team0 (unregistering): Port device team_slave_1 removed [ 101.819021][ T3623] team0 (unregistering): Port device team_slave_0 removed [ 102.080552][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 102.628049][ T7703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.748581][ T7703] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.805671][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.805770][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.807230][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.807279][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.211710][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.213357][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.216102][ T7818] bridge_slave_0: entered allmulticast mode [ 103.219626][ T7818] bridge_slave_0: entered promiscuous mode [ 103.225207][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.227044][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.228698][ T7818] bridge_slave_1: entered allmulticast mode [ 103.232155][ T7818] bridge_slave_1: entered promiscuous mode [ 103.266987][ T7818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.272705][ T7818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.321275][ T7818] team0: Port device team_slave_0 added [ 103.329057][ T7818] team0: Port device team_slave_1 added [ 103.364280][ T4719] Bluetooth: hci4: command tx timeout [ 103.453335][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.457787][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.463357][ T7818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.474802][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.476192][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.481572][ T7818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.549675][ T7818] hsr_slave_0: entered promiscuous mode [ 103.551976][ T7818] hsr_slave_1: entered promiscuous mode [ 103.553908][ T7818] debugfs: 'hsr0' already exists in 'hsr' [ 103.555529][ T7818] Cannot create hsr debugfs directory [ 103.774408][ T7951] loop0: detected capacity change from 0 to 512 [ 103.777350][ T7951] EXT4-fs: Ignoring removed bh option [ 103.797775][ T7951] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 103.807242][ T7951] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.1061: corrupted in-inode xattr: e_value size too large [ 103.811608][ T7951] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.814047][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 103.814089][ C1] EXT4-fs (loop0): initial error at time 103: ext4_iget_extra_inode:5210: inode 15 [ 103.814161][ C1] EXT4-fs (loop0): last error at time 103: ext4_iget_extra_inode:5210: inode 15 [ 103.821304][ T7951] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1061: couldn't read orphan inode 15 (err -117) [ 103.821358][ T7951] loop0: lost filesystem error report for type 5 error -117 [ 103.828270][ T7951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.949312][ T7818] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 103.965026][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.966061][ T7818] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 103.969537][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.978619][ T7818] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 103.983122][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.984671][ T7818] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 103.994751][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.057833][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.057949][ T7818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.058168][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.058287][ T7818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.094822][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.128323][ T3623] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.129556][ T3623] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.158351][ T7703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.237995][ T7972] syzkaller1: entered promiscuous mode [ 104.239198][ T7972] syzkaller1: entered allmulticast mode [ 104.305795][ T7818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.320985][ T7818] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.350860][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.350961][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.353102][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.353149][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.441280][ T7818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.519340][ T7980] FAULT_INJECTION: forcing a failure. [ 104.519340][ T7980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.522364][ T7980] CPU: 1 UID: 0 PID: 7980 Comm: syz.0.1063 Not tainted syzkaller #0 PREEMPT [ 104.522390][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.522399][ T7980] Call trace: [ 104.522406][ T7980] show_stack+0x2c/0x3c (C) [ 104.522433][ T7980] __dump_stack+0x30/0x40 [ 104.522452][ T7980] dump_stack_lvl+0xd8/0x12c [ 104.522469][ T7980] dump_stack+0x1c/0x28 [ 104.522486][ T7980] should_fail_ex+0x41c/0x590 [ 104.522505][ T7980] should_fail+0x14/0x24 [ 104.522521][ T7980] should_fail_usercopy+0x20/0x30 [ 104.522538][ T7980] _inline_copy_from_user+0x3c/0x174 [ 104.522555][ T7980] __arm64_sys_prlimit64+0x17c/0xc64 [ 104.522572][ T7980] invoke_syscall+0x98/0x244 [ 104.522589][ T7980] el0_svc_common+0x19c/0x23c [ 104.522605][ T7980] do_el0_svc+0x4c/0x5c [ 104.522622][ T7980] el0_svc+0x64/0x260 [ 104.522637][ T7980] el0t_64_sync_handler+0x44/0x104 [ 104.522652][ T7980] el0t_64_sync+0x198/0x19c [ 104.805708][ T7703] veth0_vlan: entered promiscuous mode [ 104.812230][ T7703] veth1_vlan: entered promiscuous mode [ 104.913787][ T7703] veth0_macvtap: entered promiscuous mode [ 104.932232][ T7703] veth1_macvtap: entered promiscuous mode [ 104.955659][ T7999] input: syz1 as /devices/virtual/input/input7 [ 104.979765][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.006713][ T7703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.088584][ T3477] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.088683][ T3477] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.088722][ T3477] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.088758][ T3477] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.158949][ T7818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.185189][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.185238][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.279051][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.279114][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.454359][ T4719] Bluetooth: hci4: command tx timeout [ 105.797362][ T7818] veth0_vlan: entered promiscuous mode [ 105.806402][ T8027] netlink: 'syz.0.1069': attribute type 2 has an invalid length. [ 105.836981][ T7818] veth1_vlan: entered promiscuous mode [ 106.032853][ T7818] veth0_macvtap: entered promiscuous mode [ 106.042639][ T8035] loop0: detected capacity change from 0 to 512 [ 106.066298][ T7818] veth1_macvtap: entered promiscuous mode [ 106.187063][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.190626][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.216043][ T8035] EXT4-fs (loop0): 1 orphan inode deleted [ 106.222526][ T8035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.240402][ T14] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 106.240508][ T14] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 1 [ 106.270368][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.272007][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.273789][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.281155][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.302543][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.388474][ T14] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.390846][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.405446][ T14] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.408364][ T14] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.521809][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.521871][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.563653][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.563710][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.524963][ T50] Bluetooth: hci4: command tx timeout [ 108.324635][ T50] Bluetooth: hci6: command tx timeout [ 110.404984][ T50] Bluetooth: hci6: command tx timeout [ 111.433828][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1075'. [ 111.433907][ T8050] netlink: 'syz.7.1075': attribute type 6 has an invalid length. [ 111.434092][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1075'. [ 111.442586][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.621732][ T8060] loop0: detected capacity change from 0 to 512 [ 111.685817][ T8055] loop8: detected capacity change from 0 to 1024 [ 111.702182][ T8060] Quota error (device loop0): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 111.702321][ T8060] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 111.702377][ T8060] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1077: Failed to acquire dquot type 1 [ 111.702409][ T8060] loop0: lost filesystem error report for type 5 error -117 [ 111.705144][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 111.705162][ C0] EXT4-fs (loop0): last error at time 111: ext4_acquire_dquot:7069 [ 111.737476][ T8060] EXT4-fs (loop0): 1 truncate cleaned up [ 111.739824][ T8060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.802791][ T8055] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.101398][ T7703] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.108862][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.315729][ T8084] loop0: detected capacity change from 0 to 512 [ 112.316831][ T8084] EXT4-fs: Ignoring removed nobh option [ 112.347205][ T8084] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 112.352346][ T8084] EXT4-fs (loop0): Remounting filesystem read-only [ 112.352860][ T8084] EXT4-fs (loop0): 1 truncate cleaned up [ 112.416175][ T8084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.499993][ T50] Bluetooth: hci6: command tx timeout [ 112.515911][ T8084] EXT4-fs (loop0): shut down requested (1) [ 112.662838][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.728568][ T8097] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.744696][ T8095] loop7: detected capacity change from 0 to 8192 [ 112.792144][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.792144][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.792324][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 112.794976][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.794976][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.795004][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 112.795076][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.795076][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.795097][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 112.795164][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.795164][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.795182][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 112.795248][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.795248][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.795272][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 112.795381][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.795381][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.795399][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 112.795464][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.795464][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.795482][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 112.795547][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.795547][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.795565][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 112.795630][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.795630][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.795647][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 112.795712][ T8095] syz.7.1083: attempt to access beyond end of device [ 112.795712][ T8095] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 112.795730][ T8095] Buffer I/O error on dev loop7, logical block 57847, async page read [ 113.115937][ T8113] loop9: detected capacity change from 0 to 512 [ 113.117366][ T8113] EXT4-fs: Ignoring removed bh option [ 113.146723][ T8113] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 113.155087][ T8113] EXT4-fs (loop9): 1 truncate cleaned up [ 113.208458][ T8113] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.429766][ T8113] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.1087: bg 0: block 465: padding at end of block bitmap is not set [ 113.444374][ T8113] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 113.444667][ T8113] EXT4-fs (loop9): This should not happen!! Data will be lost [ 113.444667][ T8113] [ 113.444715][ T8113] EXT4-fs (loop9): Total free blocks count 0 [ 113.444744][ T8113] EXT4-fs (loop9): Free/Dirty block details [ 113.444775][ T8113] EXT4-fs (loop9): free_blocks=0 [ 113.444825][ T8113] EXT4-fs (loop9): dirty_blocks=34 [ 113.444851][ T8113] EXT4-fs (loop9): Block reservation details [ 113.444878][ T8113] EXT4-fs (loop9): i_reserved_data_blocks=34 [ 113.630075][ T7818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.788303][ T8098] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.845681][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 113.988057][ T8098] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.148184][ T8098] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.566840][ T50] Bluetooth: hci6: command tx timeout [ 114.649713][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.649811][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.650022][ T8042] bridge_slave_0: entered allmulticast mode [ 114.652108][ T8042] bridge_slave_0: entered promiscuous mode [ 114.737387][ T3623] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.737629][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.738308][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.738535][ T8042] bridge_slave_1: entered allmulticast mode [ 114.747049][ T8042] bridge_slave_1: entered promiscuous mode [ 114.781119][ T3623] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.930748][ T8164] loop9: detected capacity change from 0 to 1024 [ 114.976581][ T8164] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.034924][ T3477] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.067709][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.085245][ T3623] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.150353][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.208928][ T7818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.219244][ T8042] team0: Port device team_slave_0 added [ 115.225517][ T8042] team0: Port device team_slave_1 added [ 115.399949][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 115.415162][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.415217][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.415268][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.418199][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.418210][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.418228][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.719469][ T8042] hsr_slave_0: entered promiscuous mode [ 115.720638][ T8042] hsr_slave_1: entered promiscuous mode [ 115.721391][ T8042] debugfs: 'hsr0' already exists in 'hsr' [ 115.721431][ T8042] Cannot create hsr debugfs directory [ 115.879813][ T8182] loop7: detected capacity change from 0 to 4096 [ 115.890386][ T8182] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.892328][ T8182] EXT4-fs (loop7): Test dummy encryption mode enabled [ 115.904728][ T8182] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 115.906602][ T8182] System zones: 0-5 [ 116.016737][ T8182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.429179][ T7555] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.849430][ T8202] loop0: detected capacity change from 0 to 8192 [ 116.867026][ T8202] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.060013][ T3894] bond0: (slave bond_slave_0): interface is now down [ 117.061929][ T3894] bond0: (slave bond_slave_1): interface is now down [ 117.066849][ T3894] bond0: now running without any active interface! [ 117.805127][ T8237] loop8: detected capacity change from 0 to 512 [ 117.815215][ T8237] EXT4-fs: Ignoring removed nobh option [ 117.835383][ T8237] EXT4-fs (loop8): 1 truncate cleaned up [ 117.837946][ T8237] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.846318][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 118.064873][ T8237] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1120: invalid indirect mapped block 4294901760 (level 0) [ 118.217968][ T7703] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.546454][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1126'. [ 118.627260][ T8261] bond0: Unable to set up delay as MII monitoring is disabled [ 118.636180][ T8042] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.681072][ T8042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.681890][ T8042] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.687550][ T8042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.700277][ T8042] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.743471][ T8042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.746614][ T8042] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.818739][ T8042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.171124][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.247910][ T8042] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.258598][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.258705][ T3894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.315382][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.315481][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.937309][ T8309] 8021q: adding VLAN 0 to HW filter on device eth0 [ 119.938985][ T8309] 8021q: adding VLAN 0 to HW filter on device eth1 [ 119.943223][ T8309] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.953331][ T8309] 8021q: adding VLAN 0 to HW filter on device eth3 [ 120.629605][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.751572][ T8042] veth0_vlan: entered promiscuous mode [ 120.781955][ T8042] veth1_vlan: entered promiscuous mode [ 120.841553][ T8042] veth0_macvtap: entered promiscuous mode [ 120.856405][ T8042] veth1_macvtap: entered promiscuous mode [ 120.885677][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.890972][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.954111][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.954745][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.954817][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.954875][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.252617][ T8348] loop0: detected capacity change from 0 to 512 [ 121.269091][ T8348] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.282272][ T8348] EXT4-fs (loop0): 1 truncate cleaned up [ 121.301717][ T8348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.327172][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.327230][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.401544][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.401594][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.925776][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.925873][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.443804][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.754489][ T8367] loop3: detected capacity change from 0 to 512 [ 126.886054][ T8367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.115900][ T8367] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 127.116180][ T8367] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 127.116216][ T8367] EXT4-fs (loop3): This should not happen!! Data will be lost [ 127.116216][ T8367] [ 127.116250][ T8367] EXT4-fs (loop3): Total free blocks count 0 [ 127.116284][ T8367] EXT4-fs (loop3): Free/Dirty block details [ 127.116317][ T8367] EXT4-fs (loop3): free_blocks=65280 [ 127.116348][ T8367] EXT4-fs (loop3): dirty_blocks=33 [ 127.116374][ T8367] EXT4-fs (loop3): Block reservation details [ 127.116399][ T8367] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 127.633665][ T8395] loop7: detected capacity change from 0 to 512 [ 127.702492][ T8395] EXT4-fs (loop7): 1 truncate cleaned up [ 127.707742][ T8395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.906936][ T8395] EXT4-fs (loop7): shut down requested (1) [ 128.040157][ T7555] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.840638][ T8042] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.200032][ T8447] loop8: detected capacity change from 0 to 128 [ 130.259940][ T8447] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.420691][ T8479] loop9: detected capacity change from 0 to 128 [ 130.449443][ T8479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 130.451079][ T8479] System zones: 1-3, 19-19, 35-36 [ 130.460609][ T8479] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 130.609137][ T8479] EXT4-fs warning (device loop9): verify_group_input:156: Last group not full [ 130.635364][ T7703] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.692482][ T7818] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.812500][ T8489] input: syz0 as /devices/virtual/input/input8 [ 131.705363][ T8525] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 132.649839][ T8555] loop9: detected capacity change from 0 to 512 [ 132.697779][ T8555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 132.697914][ T8555] System zones: 1-12 [ 132.705459][ T8555] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.1202: missing EA_INODE flag [ 132.705510][ T8555] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 132.708036][ T8555] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.1202: error while reading EA inode 12 err=-117 [ 132.708104][ T8555] loop9: lost filesystem error report for type 5 error -117 [ 132.708502][ T8555] EXT4-fs (loop9): 1 orphan inode deleted [ 132.710957][ T8555] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.780702][ T8554] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1203'. [ 133.001437][ T7818] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.423249][ T8583] loop8: detected capacity change from 0 to 128 [ 133.501625][ T8583] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.820595][ T7703] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.115010][ T8605] loop8: detected capacity change from 0 to 128 [ 134.116526][ T8605] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.459792][ T8616] loop0: detected capacity change from 0 to 512 [ 134.550017][ T8616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.880248][ T8631] loop9: detected capacity change from 0 to 256 [ 134.916860][ T8631] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.099483][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.105887][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.109438][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.112555][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.117140][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.140076][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.144229][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.151205][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.194741][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.200541][ T4717] EXT4-fs error (device loop0): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 135.574408][ T4344] nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10 [ 135.574477][ T4344] nvme nvme0: Does your device have a faulty power saving mode enabled? [ 135.578818][ T4344] nvme nvme0: Try "nvme_core.default_ps_max_latency_us=0 pcie_aspm=off pcie_port_pm=off" and report a bug [ 135.775916][ T4344] nvme0n1: I/O Cmd(0x2) @ LBA 524088, 8 blocks, I/O Error (sct 0x3 / sc 0x71) [ 135.776003][ T4344] I/O error, dev nvme0n1, sector 524088 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 136.033417][ T3623] nvme nvme0: Disabling device after reset failure: -19 [ 136.106670][ T3623] Unable to handle kernel paging request at virtual address dfff800000000043 [ 136.106734][ T3623] KASAN: null-ptr-deref in range [0x0000000000000218-0x000000000000021f] [ 136.106774][ T3623] Mem abort info: [ 136.106794][ T3623] ESR = 0x0000000096000005 [ 136.106815][ T3623] EC = 0x25: DABT (current EL), IL = 32 bits [ 136.106836][ T3623] SET = 0, FnV = 0 [ 136.106855][ T3623] EA = 0, S1PTW = 0 [ 136.106874][ T3623] FSC = 0x05: level 1 translation fault [ 136.106894][ T3623] Data abort info: [ 136.106912][ T3623] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 136.106932][ T3623] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 136.106952][ T3623] GCS = 0, Overlay = 0, DirtyBit = 0 [ 136.106973][ T3623] [dfff800000000043] address between user and kernel address ranges [ 136.107063][ T3623] Internal error: Oops: 0000000096000005 [#1] SMP [ 136.122522][ T3623] Modules linked in: [ 136.123311][ T3623] CPU: 0 UID: 0 PID: 3623 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT [ 136.125391][ T3623] Tainted: [L]=SOFTLOCKUP [ 136.126263][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.128300][ T3623] Workqueue: nvme-reset-wq nvme_reset_work [ 136.129482][ T3623] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 136.131029][ T3623] pc : trace_event_raw_event_nvme_sq+0x220/0x448 [ 136.132208][ T3623] lr : trace_event_raw_event_nvme_sq+0x1fc/0x448 [ 136.133380][ T3623] sp : ffff80009b697880 [ 136.134169][ T3623] x29: ffff80009b697950 x28: ffff80009b6978a0 x27: 1fffe0001a127761 [ 136.135726][ T3623] x26: dfff800000000000 x25: ffff7000136d2f14 x24: ffff0000c8682520 [ 136.137289][ T3623] x23: ffff0000ceaf4f78 x22: 000000000000021c x21: 0000000000000082 [ 136.138856][ T3623] x20: 1fffe000191b01c0 x19: ffff0000d093bb08 x18: 00000000ffffffff [ 136.140352][ T3623] x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008285f1f0 [ 136.141858][ T3623] x14: ffff80008a8a7000 x13: 0000000000000000 x12: 0000000000000000 [ 136.143332][ T3623] x11: 0000000000000000 x10: ffff600019d5e9f5 x9 : 0000000000000000 [ 136.144885][ T3623] x8 : 0000000000000043 x7 : 0000000000000000 x6 : 00316e30656d766e [ 136.146452][ T3623] x5 : ffff0000ceaf4fa4 x4 : ffff0000c64ae02c x3 : ffff800082823300 [ 136.147969][ T3623] x2 : 0000000000000020 x1 : ffff0000d093bb00 x0 : 0000000000000000 [ 136.149481][ T3623] Call trace: [ 136.150075][ T3623] trace_event_raw_event_nvme_sq+0x220/0x448 (P) [ 136.151214][ T3623] __traceiter_nvme_sq+0x88/0xe0 [ 136.152114][ T3623] nvme_poll_cq+0xdec/0x1128 [ 136.152958][ T3623] nvme_dev_disable+0x384/0x540 [ 136.153862][ T3623] nvme_reset_work+0x510/0x69c [ 136.154723][ T3623] process_scheduled_works+0x91c/0x1250 [ 136.155725][ T3623] worker_thread+0x798/0xbd0 [ 136.156550][ T3623] kthread+0x304/0x3d4 [ 136.157274][ T3623] ret_from_fork+0x10/0x20 [ 136.158206][ T3623] Code: 978e6a46 f94002c8 91087116 d343fec8 (38fa6908) [ 136.159594][ T3623] ---[ end trace 0000000000000000 ]--- [ 136.471795][ T1885] kernel read not supported for file /dummy_udc (pid: 1885 comm: kworker/1:2) [ 136.531540][ T3623] Kernel panic - not syncing: Oops: Fatal exception [ 136.534319][ T3623] SMP: stopping secondary CPUs [ 136.535163][ T3623] Kernel Offset: disabled [ 136.536071][ T3623] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 136.537464][ T3623] Memory Limit: none [ 136.879688][ T3623] Rebooting in 86400 seconds..